Background

Building a high-speed and flexible mobile office network has become a common requirement of K12 schools. At this stage, the wireless network is often the transformation and supplement of the existing wired network. Therefore, when building a mobile office network, most schools require that the wired network and the wireless network can be seamlessly integrated, and the experience of the wired and wireless network should be consistent.

The current school wireless office network has the following problems:

1. Wireless Internet access: As long as users connect to the WLAN with smart terminals such as notebooks, PADs, and mobile phones that support WIFI access, they can stably access the Internet at high speed, solving the problem of teachers and students surfing the Internet and querying data anytime, anywhere.

2. Secure access: It supports a variety of wireless security protection methods, which can resist common wireless network security threats, such as phishing APs.

3. Unified authentication: Using a safe and reliable authentication mechanism, only authorized users can access the network and conduct mobile office applications such as browsing, approval, and sending and receiving emails through the local area network.

4. Stable and reliable: High reliability of wireless devices; support radio frequency optimization, service life, minimize the impact on the network, and enhance network reliability.

5. Convenient operation and maintenance: Support simple and easy-to-use management methods, and reduce maintenance difficulty and labor input costs.

 

AP Deployment Introduction

Maipu IAP300 series access point is a new brand series based on Wi-Fi6 technology.

l Adopting the latest 802.11ax Wi-Fi6 technologies

l High-speed Gigabit dual-band wireless

l Intelligent AP management technology, AP zero configuration, plug and play

l Support uplink and downlink MU-MIMO, and the wireless effective capacity exceeds 100

l Unique antenna signal optimization algorithm, improving AP signal coverage

l SSID + VLAN binding, ensuring information security

l One-key network optimization, improving the maintenance efficiency

l Green design and energy saving

 

Indoor Wall-mounted Wi-Fi6 AP IAP300-815-PE

IAP300-815-PE is a high-performance Wi-Fi 6 AP for indoor room Wi-Fi coverage scenarios. It supports PoE power supply. Compliant with 802.11a/b/g/n/ac/ax Wi-Fi protocol, IAP300-815-PE supports MU-MIMO dual-stream technology and offers built-in omnidirectional antennas. It can operate under 2.4GHz and 5GHz frequency, providing high-speed wireless access up to 1775Mbps bandwidth. It is wall-mounted design for room wireless coverage. For school campus wireless network, it is an ideal choice to deploy at offices rooms of teachers and dormitory of students.

 

 

Indoor Ceiling-mounted Wi-Fi6 AP IAP300-821-PE

IAP300-821-PE is a high-performance Wi-Fi 6 AP for indoor large-area Wi-Fi coverage scenarios. It supports PoE and 12V DC local power supply. Compliant with 802.11a/b/g/n/ac/ax Wi-Fi protocol, IAP300-821-PE supports MU-MIMO dual-stream technology and offers built-in omnidirectional antennas. It can operate under 2.4GHz and 5GHz frequency, providing high-speed wireless access up to 1775Mbps bandwidth. It is ceiling-mounted design which covers more than 25 meters. For school campus wireless network, it is an ideal choice to deploy at the teaching building corridors and meeting rooms.

 

Outdoor Pole-mounted Wi-Fi6 AP IAP300-826-PTE

IAP300-826-PTE is a high-performance Wi-Fi6 AP for outdoor Wi-Fi coverage scenarios. It supports PoE power supply. Compliant with 802.11a/b/g/n/ac/ax Wi-Fi protocol, IAP300-826-PTE supports MU-MIMO dual-stream technology and offers built-in antennas. It can operate under 2.4GHz and 5GHz frequency, providing high-speed wireless access up to 1775Mbps bandwidth. It is outdoor pole-mounted design for outdoor wireless coverage. For campus wireless network, it is an ideal choice to deploy at public area like playground, football field and basketball court.

Maipu Wireless Solution for School Campus

 

Quickly Wireless Service Provisioning

In the FIT AP application mode, the zero-configuration FIT AP can be found and automatically connected to the IGW500 series converged internet gateway through the L2/L3 network. The internet gateway can configure, operate and manage the FIT AP. IGW500 internet gateway supports rich L2/L3 functions, and forms the management and monitoring of FIT AP through the networks.

There is a menu configuration wizard at IGW500 series, the configuration wizard page is mainly used for users to quickly configure the wireless service based on network environment. The network environment is divided into gateway mode and controller mode according to the application requirements of the actual scenario. Wireless service provisioning can be done through the configuration wizard within few operation steps.

 

Secure and Reliable User Authentication

IGW500 series supports rich wireless user authentication methods, PSK, 802.1X, Portal and OPEN. For students and teachers to access the wireless network, 802.1X or Portal account is used for authentication. After the verification, they can access the OA system, education system and Internet resources. For parents and visitors, OPEN, PSK or Portal password-free authentication methods can be used, which can quickly achieve Internet resource access.

 

STA QoS

When using a wireless network, the following situations are often encountered: because one or several wireless users occupy all the bandwidth, other users cannot use the wireless network normally, resulting in network freezes and poor wireless customer experience; Maipu provides SSID-based and AP group-based wireless bandwidth limitation solution. It can ensure that each wireless user can use the wireless network normally and prevent the users from occupying the wireless network bandwidth.

 

L2 Roaming

When a wireless user moves, the user will gradually move away from the AP, and the wireless signal quality of the AP will also gradually decrease. When the wireless user terminal senses that the wireless signal has dropped to a certain level, the terminal will automatically go offline and reconnect to the wireless network, and the terminal will roam to a nearby AP. At this time, the wireless user's IP address and authorization information have not changed, and users can enjoy fast L2 roaming services.

 

Weak Signal Offline

When a wireless user moves, the user will gradually move away from the AP, and the wireless signal quality of the AP will also gradually decrease. When the wireless controller detects that the signal strength of the wireless user drops to the set value, the controller will force the user to go offline. At this time, the terminal will reconnect to the wireless network according to the wireless connection record information, and connect to the AP with the best signal near the terminal.

 

AP Escape

Enable this function, and when the CAPWAP tunnel between the AP and AC is disconnected, the AP can work independently and continuously provide wireless services for the existing wireless online users. For small wireless networks where standby ACs are not deployed on campus, this feature ensures that user data forwarding is not interrupted after the CAPWAP tunnel between the AP and AC is disconnected, improving service reliability of the wireless network. This feature only supports the controller mode, and user data forwarding mode is local forwarding.

 

Channel Optimization

Wireless networks often have overlapping radio frequency channels, resulting in network freezes and poor wireless customer experience. APs are deployed in thin mode, and the wireless controller supports manual one-key radio frequency optimization and scheduling channel optimization, which reduces co-channel interference, reduces the impact on the wireless network, and improves the experience of wireless access users.

 

Intelligent High Availability

In the wireless network constructed by AC + FIT AP, all APs are managed and configured by the AC through the APWAP tunnel. Once the AC fails, the CAPWAP tunnel between the AC and all APs will be disconnected, the AP will be disconnected, and users will not be able to search for the wireless network information, all wireless users under this network will not be able to access the Internet. At the same time, a CAPWAP tunnel is established between the AP and the active and standby ACs, and the service information between the ACs is synchronized through the HA channel. When the CAPWAP tunnel between the AP and the active AC is disconnected, the standby AC will take over from the active AC to start working, ensuring that wireless services are not interrupted.

 

Smart Multi-WAN Failover

The networking environment is divided into gateway mode and controller mode according to the application requirements of the actual scenario. In the gateway mode, the IGW500 series is used as a wireless network egress device to undertake the routing function. The uplink port supports multiple WANs, provides network access for multiple operators, provides load balancing between multiple WANs, and failover between WANs to ensure the continuity of the Internet Access, and the WAN port can obtain the address through PPPoE, DHCP, static.

 

Simplified Security Features

IGW500 providing simplified security protection capabilities for school campus. It will help IT to manage the online behavior of students and teachers, and set the APP and URL that can be accessed or denied access.

 

Network Implementation Solution

Gateway Mode

For small school campus network, IGW500 can be configured to work in gateway mode. The typical application is that IGW500 is deployed at the Internet egress or directly behind the firewall.

IGW500 series has powerful functions which integrates intelligent routing, NAT, DHCP server, wireless control, flow control, anti-attack, behavior control and local portal authentication features in one box, and supports docking with Maipu cloud management platform MMC to realize remote operation and maintenance and centralized management. The WAN port supports obtaining IP address through PPPoE, DHCP and static. Meanwhile, it supports multiple WANs, and load balancing is enabled between multiple WANs by default.

IGW500 series internet gateway has rich software features, which can provide wireless users with bandwidth guarantee, intelligent RF management, fast roaming, weak signal offline, channel optimization, AP escape and other functions.

In addition, the web GUI configuration interface can be used for convenient configuration and deployment without the complex operation of the traditional command line. The maintenance personnel can complete the configuration in only few minutes.

 

Controller Mode

For medium and larger school campus network, IGW500 can be configured to work in controller mode. The typical application is that the wireless network is replaced or newly added on the basis of the existing network.

At this time, IGW500 mainly completes AP management, wireless configuration delivery, wireless user access authentication, roaming management, RF management, channel optimization, AP escape, and wireless user bandwidth guarantee, weak signal offline. To ensure AC reliability, two ACs can be deployed to form a hot backup to ensure that APs continue to provide wireless network services.

 

MMC Cloud

Maipu provides cloud-based management and operations platform called Maipu Managed Cloud (MMC). The platform can significantly reduce the operation & maintenance cost for partners and customers. It supports unified management and configuration of internet gateways, APs, routers and switches. Web GUI interface is very friendly and easy-understanding to customers and users.

The following are just some of the features that Maipu cloud platform includes:

• Centralized Cloud Management

• Flexible Cloud Deployment

• Quickly Cloud Service Provisioning

• Intelligent Remote Maintenance via Cloud

 

Centralized Cloud Management

Getting a predictable operational expenditure (OPEX), rather than capital expenditures (CAPEX). All Internet gateways, APs, routers and switches can be unified managed by Maipu cloud management platform (MMC) through Internet.

 

Flexible Cloud Deployment

Compared with other managed cloud solution suppliers, Maipu MMC can be deployed on public cloud or private cloud which gives more choices for partners to centrally manage all the wireless related devices through internet.

 

Quickly Cloud Service Provisioning

The platform can significantly reduce the operation & maintenance cost for partners and customers. Wireless service and cloud service provisioning can be done within 3 minutes.

 

Intelligent Remote Maintenance via Cloud

MMC is consisted of various management and maintenance features, such as network management, configuration management, topology management, device management, alarm management, SSID management, STA management, cloud web, and cloud telnet.

Topology Management

After registering to Maipu MCC, network equipment can automatically generate network topology by clicking the button ‘Discover Topology’, and users can clearly understand the network status, such as line connection/disconnection, link congestion, device online/offline, alarm type, and alarm quantities.

Device Management

Click the device icon to display the detailed working status of the device, including the device online duration/CPU/memory and other information. Some operations like remote CLI, upgrade and restart can be done here. Users can also learn about the up/down status and traffic of device’s port.

Upgrade Management

MCC platform will automatically compare the version used by the device with the uploaded version, and prompt that a new version is available. Users can choose whether to upgrade the new version according to their own needs.

Shortcut Command Management

Built-in shortcut commands, such as display device version, running-config, startup config, and IP routing table. Users can collect basic device information and troubleshoot through these shortcut commands. MMC supports customized command set, which means that users can customize the shortcut command by ourselves.

Alarm Management

Collect device alarm information in real time, and users can filter according to the alarm level and type. You can also customize the alarm level and set the thresholds for different alarm types.