Campus Network

As a core component supporting the university’s information infrastructure, XJTLU’s campus network has undergone continuous development over the years, providing stable and reliable guarantees for the university’s high-quality development. The XJTLU campus network covers two campuses: SIP and XEC. Centering on XJTLU 3.0’s multi-campus information technology strategic planning, it has built an integrated network architecture featuring a “one network with dedicated line interconnection.” By adopting China Telecom/China Mobile’s bare optical fibers combined with wavelength division multiplexing technology, it achieves a 10-gigabit high-speed interconnection between the two campuses, ensuring the stability and efficiency of the entire network communication.

Campus network coverage and access capabilities

The campus network has achieved full coverage across all office buildings and public areas on campus, offering three flexible access methods: wired access, wireless access, and remote access, to meet the diverse network usage scenario needs of teachers and students. Meanwhile, it adopts a dual-mode real-name authentication mechanism combining Mac authentication and Web Portal to comprehensively ensure network access security.

• Wired access: Office areas are deployed according to the standard of “3 information points per person”. The total number of wired information points on campus exceeds 66,000, supporting the network carrying needs in high-density office and teaching scenarios.
• Wireless access: Seamless coverage of all office buildings and public areas is realized. The number of wireless access points (APs) deployed on campus exceeds 4,000, supporting IPv4/IPv6 dual-stack and IPv6 single-stack access modes.
• Features and remote access: Education network wireless roaming service(eduroam) is available on campus, allowing users from alliance universities to directly access our campus’s eduroam WiFi network through their university accounts; remote access channels are opened for teachers and students, enabling convenient and secure access to internal campus network resources anytime and anywhere.

Campus network architecture

Both the SIP and XEC campuses adopt a large layer 2 network architecture design, with authentication functions centrally deployed at the core layer of each campus. This simplifies the network architecture hierarchy while significantly improving operation and maintenance management efficiency. The interconnection bandwidth between the two campuses has been upgraded to 20Gbps, further enhancing the throughput capacity and real-time performance of cross-campus data transmission.

Internet Egress Configuration

The bandwidth allocated for the campus network egress is 30 Mbps, ensuring stability and smoothness while guaranteeing a consistent network experience for every staff and student.

??Main Egress (SIP Campus): With a total bandwidth of 8.5 Gbps, it adopts a redundant configuration with multiple carriers and multiple lines. Specifically, it includes 2 Gbps from the Education Network, 2 Gbps from China Unicom, 2 Gbps from China Telecom, 2 Gbps from the IPv6 dedicated line, and 500 Mbps from the international R&D dedicated line. This setup can meet the diverse needs of teachers and students, such as daily network access, academic exchanges, and scientific research data transmission.

??Backup Egress (XEC Campus): Equipped with 1 Gbps bandwidth from China Unicom, it builds a comprehensive egress redundancy backup mechanism to ensure the continuity and reliability of campus network services.

Campus Network Security Protection System

The campus network has established a multi-level, all-around three-dimensional security protection system, which effectively resists various network attacks and security threats and ensures the safe and stable operation of various systems on campus.

• Deploy multi-level firewall devices, combine security big data analysis with real-time comparison of threat intelligence databases to achieve automated threat identification and precise blocking, effectively intercepting various intrusion and attack behaviors.
• Equip a full-scenario security protection system, covering Distributed Denial of Service (DDoS) intrusion prevention, network anti-virus and Intrusion Prevention System (IPS), network security traffic monitoring and early warning platform, terminal security protection, and threat intelligence analysis platform, etc.
• Establish a full-process security protection closed loop of “early warning in advance, interception in process, and traceability afterwards” to provide a solid guarantee for the network security of the school’s core businesses, such as teaching, scientific research, and office work.

Urban nodal unit

In 2018, XJTLU officially became the core node unit of the University Education Network in Suzhou, and it is also the first education network city node among Sino-foreign cooperative universities. By accessing the 100G backbone network, the egress bandwidth of XJTLU is no longer limited by physical links. In addition, two 100G independent transmission lines from Nanjing and Shanghai ensure the security and stability of network connections.