China (Shanghai) Pilot Free Trade Zone, which is referred to as Shanghai Free Trade Zone, is a regional free trade park established in Pudong, Shanghai by the Chinese government. It is one part of China’s free trade zones.
On September 29, 2013, the China (Shanghai) Pilot Free Trade Zone was officially established with an area of 28.78 square kilometers. It covers four special custom supervision regions, including Waigaoqiao Free Trade Zone, Waigaoqiao Bonded Logistics Park, Yangshan Bonded Port Zone and Shanghai Pudong Airport Comprehensive Bonded Zone.
On December 28, 2014, the NPCSC of PRC authorized the State Council to expand the area of China (Shanghai) Pilot Free Trade Zone the to 120.72 square kilometers, covering up to seven regions: Shanghai Waigaoqiao Free Trade Zone, Waigaoqiao Bonded Logistics Park, Yangshan Bonded Port Zone, Shanghai Pudong Airport Comprehensive Bonded Zone, Jinqiao Export Processing Zone, Zhangjiang Hi-Tech Park and Lujiazui Finance and Trade Zone.
Customer Demand on network
Implement by stages the wireless network coverage of all business units, including export business service units, office units, public area units, trade business units, etc.
Each unit supports 100-2000 users, with uplink export bandwidth of 100M bps provided by China Telecom.
Provide centralized management of users and equipment
Must meet the public WIFI security requirements of real-name authentication
Provide SMS, WeChat authentication and the page can be customized
Provide basic data analysis, traffic and related operational data analysis by combining the certification.
Provide seamless roaming in the Free Trade Zone for VIP customers, no need for re-authentication.
Can provide independent cloud service deployment in the future
The DICC (DCN Intelligent Cloud Center), which is deployed in public cloud, is used as authentication server. It can provide customized authentication pages.
DCME-320/DCME-520 is adopted as gateway, it also works as wireless controller providing management to APs.
For PoE switch, the S4600-10P-P-SI and S4600-28P-SI are used. S4600-10P-P-SI has 8*10/100/1000Base-T ports and 2* 100/1000Base-SFP ports, S4600-28P-P-SI has 24*10/100/1000Base-T ports and 4* 100/1000Base-SFP ports, Both of them can supply power to the APs.
Two types of AP are used in the project, DCWL-7962AP R5 was used in the first stage, WL8200-I2 in the second stage.
Here is the topology:
Here is some of the customized authentication pages:
Realize complete coverage of all business unites in the Free Trade Zone.
The DICC is deployed in public cloud, customers only need to apply an account to get the authentication service and it is very convenient.
The users and equipment are central managed, that makes the network expanding very easy.
VIP users can seamlessly roam between unites inside the Free Trade Zone and access the network without re-authentication.
DICC can provide analysis data to customer, such as user traffic, online user, Ads clicks, etc.
|S4600-28P-P-SI||L2 PoE Full Gigabit Access Switch(24*10/100/1000Base-T + 4* Gigabit SFP), AC power, POE af/at, 370W power|
|S4600-10P-P-SI||L2 PoE Full Gigabit Access Switch (8*10/100/1000Base-T + 2* Gigabit SFP), AC power, PoE af/at, 124W power|
|DCWL-7962 (R5)||indoor wireless access points, dual radio card 802.11a/b/g/n, including built-in dual band 802.11a/ b/g/n antenna, support POE power supply and external power adapter|
|WL8200-I2(R2)||802.11n+802.11ac Wave 2 indoor enhanced AP (2.4GHz & 5GHz dual mode dual band, 2*2, fat/fit, PoE 15.4W, default no power adapter)|
|DCME-320||8*10/100/1000Base-T ports, 2*1000M Combo ports, 2*USB2.0. support SSL, IPSec VPN, Web management, wireless controller. Default/max number of APs can be managed is 2/32, 300-400 users.|
|DCME-520||6*10/100/1000Base-T ports, 2*USB2.0. support SSL, IPSec VPN, Web management, wireless controller. Default/max number of APs can be managed is 6/256, 1000-1200users.|
|SCC-F||One DICC registration license for a hardware device (each hardware device, such as DCME, need to install this license to use DICC for WeChat/SMS authentication or page push)|