Mall Wireless Coverage Solution

1. Background Analysis

With the rapid development of society, people's consumption habits have changed. People's consumption methods in shopping malls have also become diversified, cash, card payment, mobile payment and other online payment methods exist at the same time, and mobile payment as a new payment method is becoming more and more popular all over the world, and ultimately, many countries will become a cashless society, for example, China has already done this. A large number of people buy in shopping malls and pay through mobile network, so it can be seen that the construction of a good and safe shopping mall network is a necessary means for shopping malls to increase revenue and attract customers!

2. Demand Analysis

The wireless network covers the whole mall to achieve the effect of no dead angle.
Peak malls have a high volume of traffic and need to meet the peak pressure.
Use security policies to avoid/reduce conflicts, viruses and attacks.
Reasonable bandwidth planning, smooth wireless Internet access, to meet the dense access.
Access devices include: laptops, tablets, smart phones and other devices.
Need to do access authentication: SMS authentication, WeChat authentication.

3.Network Design

4.Program Features

Cost-effective: No need to install additional special cables and optical fibers, it can supply continuous and stable power to the Ethernet devices through twisted pair cables. Energy-saving and environmental protection: It supports intelligent adjustment of current, voltage and power consumption according to traffic flow, thus reducing power consumption.
Centralized management of equipment: AC automatically identifies APs, monitors the operating status of APs in real time, and uniformly sends down parameters such as AP working channel and power, which is convenient for later debugging.
Different authentication methods for users: Hosecom wireless network cooperates with smart WiFi and local WEB authentication to realize different authentication methods for users. The smart wifi platform has six authentication methods for users to choose from, such as cell phone number authentication and user name authentication.
Security features: support built-in firewall, real-time monitoring after and protection network security;
Seamless roaming: support L2/L3 seamless roaming to maintain hotel network reliability;
Micro-marketing data statistics: membership cards, graphic messages, micro-activities.

5. Related equipment list

name	model	describe
gateway	HS -MAC2000	●19-inch iron shell, multi-WAN access , supports up to 2,000 terminals online at the same time. It is a multi-functional firewall router designed for enterprises, schools, Internet cafes, and rental houses that highlights Internet behavior management, bandwidth overlay, intelligent QoS, and integrated PPP0E authentication server. Bandwidth superposition: Simultaneously access 7 ( can be expanded to 200 ) wide area networks, using multi-threading tools , you can achieve the superimposed network speed. Line backup: When the main line goes offline, the backup line takes over to ensure smooth network operation. Line distribution: Line distribution can be performed based on source IP, destination IP, source port, destination port, and domain name. Policy routing: Simultaneously access different operators such as China Telecom and China Unicom to solve the embarrassment of north-south communication on the Internet. ●Super powerful behavior management function Block Xunlei, block games, filter Kaixin.com, control QQ chat and guide reasonable Internet access... Provide comprehensive professional online behavior management functions. Through the settings of IP groups and time groups, you can establish more flexible and user-friendly management rules to help you make good use of the network, manage the network well, and improve work efficiency. ●Intelligent flow control Intelligent flow control can analyze various conditions of active hosts in the network and automatically adjust the bandwidth. When the network is busy, small packets are given priority to ensure that other users can access the Internet smoothly; when the network is idle, segmentation allows users to break through the speed limit for high-speed downloads, effectively utilizing network resources. . The new QOS architecture is 5 times faster than the original QOS, and the web page is smoother. The new flow control module breaks through to the seventh layer of the network and can specify applications for management, restriction and rate limiting. ●Network protection is stable Hardware firewall implements more security protection. Prevent shock wave viruses and add different planned preventions for future Internet viruses. Supports ARP protection and DOS attack protection functions. Bind MAC address with one click to effectively utilize network bandwidth and isolate the office network. ●Flow control management Application protocol speed limiting: Precisely control application protocol speed and network access Application protocol strategy: multiple applications specify line directions and control priorities Application protocol monitoring: Able to accurately monitor 95% of application protocol traffic and types in real time more than 2000 controllable application protocols Priority application protocol management: Prioritize execution of application protocols such as web pages, games, videos, music, communications, etc.
core switch	SX6348-ADCB	●19-inch standard rack-mounted, 48-port 10G managed data center switch; ●Ultra-high-density 10G optical port access, 48 10G optical ports, 2 40G optical ports, and 4 100G optical ports; ● 1.92T ultra-large switching capacity, meeting the ultra-high bandwidth application requirements of operator aggregation, enterprise networks, and data centers; ●Supports rich business features, including L2, L3, MPLS, VxLAN, OAM/APS and other features; ●Supports security and flow control features, hardware-based NetFlow, and high-precision clock features; ●Support elastic stacking function to realize unified management, upgrade and maintenance of multiple devices; ●The whole machine has a modular design, and the fan and power supply components are pluggable; ●Supports IPv4/IPv6 dual protocol stack platform, supports routing protocols such as RIP/OSPF/RIPng/OSPFv3/PIM; ●Support multiple link redundancy and network redundancy protocols such as VRRP/ERPS/MSTP/FlexLink/MonitorLink; ●Supports ACL security filtering mechanism and provides security control functions based on MAC, IP, L4 port and port level; ●Supports multiple Ethernet link detection mechanisms such as Ethernet OAM 802.3ag (CFM), 802.3ah (EFM); ●Support remote user authentication based on Tacacs+/Radius, and support Local local user authentication; ●Supports SP/WRR/SP+WRR priority algorithm to ensure the transmission of various priority service flows on demand; ●Support IPv4/IPv6 static routing function; ●Supports multi-port mirroring analysis function and business flow-based mirroring analysis; ●Support static and flexible QinQ functions; ●Supports policy-based IPV4/6 unicast routing and flexible forwarding strategies; ●Support CLI command line management based on serial port, Telnet, and SSHv2; ●Support RFC1213 SNMP network management; ●Support configuration management based on WEB page;
POE switch	SZ6324-ACPB	●19-inch standard rack-mounted, 2 4- port 2.5G POE power supply switch ●24 2.5G electrical ports (with PoE) + 6 1 0G optical ports uplink, supporting IEEE 802.3af/at standard, 10G optical port can adapt to Gigabit; ●Ultra-high switching capacity, supporting full-port line-speed forwarding performance; ●Supports weak layer 3 access and supports full-port hardware layer 3 line-speed forwarding performance; ●High-performance and low-power network processor, supporting green Ethernet line sleep capability, and low device power consumption; ●Supports IPv4/IPv6 dual protocol stack platform, supports routing protocols such as RIP/OSPF; ●Support multiple link redundancy and network redundancy protocols such as VRRP/ERPS/MSTP/FlexLink/MonitorLink; ●Supports ACL security filtering mechanism and provides security control functions based on MAC, IP, L4 port and port level; ●Supports multiple Ethernet link detection mechanisms such as Ethernet OAM 802.3ag (CFM), 802.3ah (EFM); ●Support remote user authentication based on Tacacs+/Radius, and support Local local user authentication; ●Supports SP/WRR/SP+WRR priority algorithm to ensure the transmission of various priority service flows on demand; ●Support IPv4/IPv6 static routing function; ●Supports multi-port mirroring analysis function and business flow-based mirroring analysis; ●Support static and flexible QinQ functions; ●Supports policy-based IPV4/6 unicast routing and flexible forwarding strategies; ●Support CLI command line management based on serial port, Telnet, and SSHv2; ●Support RFC1213 SNMP network management; ●Support configuration management based on WEB page;
Wireless AP	AR930 - PCB	●Qualcomm solution, high-power ceiling AP, WIFI6 11AX 30 0 0M; ●This product has better transmission quality and higher transmission rate, and the concurrent rate of the whole machine can reach up to 3000Mbps. ●Adopts Qualcomm IPQ5018 high-performance chip, supports 160Mhz bandwidth, greatly expands user access capacity, and can support a maximum of 128 users. ●The heat sink adopts snap-on structure design and special surface coating treatment, which makes the heat dissipation effect more ideal. ●The wireless radio frequency adopts high-power external FEM, which has stable performance, wide wireless range and farther transmission.