Backbone network to speed up the construction of office information technology to improve the level of water in Tianjin

Study: Fan Xiaojuan Xiao-Yun Yang Dong Zhi by

Abstracts: The Tianjin Water Resources office WAN construction, focuses on the related routing protocols configuration and security precautions. By Tianjin Water Resources office WAN construction, subordinate units and the Bureau to achieve a stable, fast online office, Information transmission, and meet the future network data, voice and video Information such as business development needs.

Paper Keywords: Water WAN Information
Tianjin Tianjin Water Conservancy Bureau is the administrative department, are responsible for flood control and drought, irrigation and water conservancy construction, water resources development, utilization and Luan River water supply and other important tasks. After years of construction, Tianjin Water Resources within the office network has taken shape, local authorities operation to achieve an online document and file management and Information dissemination functions, the whole water system to achieve an online document and Information delivery. With the increasing amount of information online, network-dependent improvement of the existing frame relay and dial-up networking way, the network bandwidth and network stability can no longer meet the needs of the global office automation, as the bureau's command center is the water sector, various water-related information to be fast, reliable network transmission to the Bureau Center, Tianjin Water Conservancy office wide area network is is to adapt to this new situation needs construction.

1 Construction of the situation prior to access internal network
Tianjin Water Resources within the office network construction is completed, the Council office automation system, a comprehensive application, the Council were to subordinate units, and telephone dial-up frame relay center computer network connected with the Bureau, but the center-side rate of only 1M, with the construction of water information continuous development of information resources on the application of water-depth step by step, you need to transfer large amount of water of various data, video and other information, the network increasingly dependent, in order to replace the original fiber access telephone line access, improve the network response bandwidth and access methods is urgent. and with the Tianjin Water Resources office wide area networks grow, network nodes increases, the original static routing wide area network has the network structure can not adapt to the new requirements, shown in Figure 1.


2 Tianjin office wide area networks construction of water after the whole network structure
Jushu Water Division and other units of 22 units of new access for the 2M mode fiber to achieve with the Bureau of network-centric broadband Internet. Modified WCB to the existing core network firewall as the Water Conservancy Bureau and other agencies within the network of networks the middle of the isolation. network only allows the client to access the internal network to the WCB website related to the corresponding server port.

Increase in the core of the new access router network, released from the role of the main routes and the new one in its CPOS optical interface card, the optical interface card to connect to Netcom's SDH node equipment, the bandwidth of 155M, this channel can be divided into 63 2M, 63 branch offices of up to 2M of the access channel.

Existing router as the core of the original network access equipment, and now as a backup route in the Bridge Reservoir release device.

Luanhe Management Office along with 7 Luan River to Tianjin Construction Engineering Management Information System fiber-optic network, a unified portal, through the Luan River Water Conservancy Project Management Office to Fibre Channel, to achieve Luan Bureau of Engineering Information Network and Network Center Internet connectivity.

3 related technical means of achieving
3.1 OSPF routing protocol used
Tianjin Water Resources bear OA office WAN file system transfer and real time rainfall information, and a variety of large water transfer data, video and other information transmission network task, ask the network to be reliable and stable.

The entire network must have more routing, circuitous routing, routing backup capacity to prevent damage due to single-route the entire network or damage caused by interruption of the node. Meanwhile, the network routing loops or routing ban appears not to be utilized. And circuit connection of a number of circumstances, do as much as possible the flow of each circuit and load balancing to ensure the rational and full use of bandwidth.

Tianjin Water Conservancy office WAN network coverage, after the routing complexity of the node number. The Bureau of the network engine room as the center, connecting the bureau and the bureau-owned enterprises, institutions and county Water (Victoria) Office and other units of the network, to achieve full water system interconnection of computer networks, hardware for the water to provide the basis of information shown in Figure 2.

Links to Research Papers Download http://www.hi138.com OSPF routing protocol has the following advantages: can be adapted to large-scale network, routing changes in convergence speed, no route from the ring to support variable length subnet mask VLSM, support value of the routing, support of regional division, to provide routing hierarchical management, support validation, support for multicast address routing protocol packets and so on. Therefore, water office WAN design and construction, to adopt the main OSPF, static routes route ��strategy to the original office network integration and smooth transition to the new network system.


3.1.1 OSPF region of Tianjin office wide area network running water OSPF routing protocol, OSPF protocol on the current node value is set in the AREA 1O0. As more equipment access, network expansion, can be divided into more regions, depending on characteristics of the regional network to set the appropriate network environment. to isolate the problem, to prevent worms and network equipment failure (such as port failures), and other influence on the whole network. and can be hidden outside the network structure, to prevent outside users the network by scanning probe structure.

3.1.2 Core Router Configuration router 0SPF content �� configured as:
routerospf100 / Start OFPS agreement /
log-adjacency-changes / log changes in the state of OSPF neighbor /
redistributestatic / introduce static routing information /
network192.168. . O. O. O. 3area100 / Notice the local connected network segment routing information /
(Other node Internet paragraph omitted)
�� subordinate units OSPF router configuration. To cisco2821 Access Road
Case 0SPF router configuration is as follows:
routerospf1OO
log-adjacency-changes
redistributestatic
network192.168. . O. O0.255 area1OO
netw ork192.168. . O. O. O. 0area 1OO
3.1.3 OSPF route to achieve wide area network connection automatically OSPF routing learning function, the entire region, all routes to the default gateway automatically learn the above, all without manual set route, to automatically find and update routing purposes.

After configuration, type the show route command show Proute, to display the routing table for each routing method:

3.2 Safety precautions
Office network in Tianjin water system, to ensure the security of network devices to ensure that unauthorized users can not access the router, switch or firewall, and other key network equipment. Mainly uses the following measures:
3.2.1 Console access to network devices and remote access must be under strict management and control, providing strong authentication mechanism to ensure that the network user password is not transmitted codes and passwords be changed regularly. Configure authentication server, for access network equipment for a unified authentication, authorization, auditing (AAA).

3.2.2 by the configuration of the device, making the JP only by a designated network management workstation to address the network management, router or network equipment to read and write operations.

3.3.3 According to the security of the entire network access control policy, configure the firewall filtering rules, access control, the principles must be banned by default, that is those who have not been explicitly prohibited to allow access.

3.3.4 Turn off the router's source routing features to prevent counterfeiting lP address and source by routing the internal network intrusion, the router or switch to configure static ARP, to prevent counterfeiting lP address of the host access to the internal network.

3.3.5 Dial-Up Networking to use the public telephone switching network, the confidential information transmitted over the network there was eavesdropping, tampering and other threats. View of the above threats, we must protect the user password is not transmitted on the network in clear form.

3.3.6 Water as a business systems professional network within the network, not conceptually from the route network of direct interconnection with the public.

4 Conclusion
By Tianjin Water Resources office wide area networks construction, subordinate units and the Bureau to achieve a stable, fast online office, and information transmission. And meet the future network data, voice and video information such as business development needs. Not only for future global network based platform for building a solid foundation, but also for the realization of global sharing of information resources within the network infrastructure provides a good environment.

Links to Research Papers Download http://www.hi138.com