Cyber Caf Network

Solution

1. Introduction
Cyber Caf Network Solution

Since the emergence of the rst cyber caf in the early 1990s, cyber cafes have become very popular
worldwide. In cyber cafes, people can enjoy entertainment, conveniently communicate with each other, and
get the latest information from the world. Cyber cafes use different operation modes and various services.
Users in cyber cafes can access Internet services, video chat with friends, play network games, watch lms
and TV shows, and send and receive email. Recent years have seen the emergence of cyber caf chains and
intelligent cyber cafs that provide differentiated services, such as business and VIP services. As laws and
regulations are increasingly strengthened, cyber cafes will develop positively.

in Cyber Caf
2. Challenges
Network Operation
As competition between cyber cafes increases,
user experience, differentiated services, operational
costs, network stability, performance, and
maintenance and management are key factors
that affect cyber caf survival. Therefore, building
a stable, secure, reliable, and cost-efcient cyber
caf network with simple maintenance and

Network security
Network security is critical for a cyber caf. Any
program that a user downloads may potentially
be infected with a virus. If cyber caf servers
are attacked by hackers, user accounts may be
compromised and data may be tampered with by
unauthorized users. The entire cyber caf network
may even fail.

management is a must.

Network access is critical to the business of a cyber

caf. Any interruption in service will result in lost
business. Stability of the network is critical for a
cyber caf.

Network broadband
The network of a typical cyber caf can be carrying
a wide variety of services including streaming
video and audio, network games, video chat,
and download and search services. If network
bandwidth is insufficient, pages load slowly,
pictures are displayed slowly, video playback is not
smooth and voice services are delayed. Cyber cafs
need to actively manage bandwidth to make full
use of what they have available.

Network operation and maintenance

A cyber caf network consists of network devices,
such as switches and routers, servers, PCs, video
devices, and software. It is difficult to maintain
and manage all these different devices. Because
a cyber caf is short of skilled network operation
and maintenance personnel, preventing potential
risks and take precautionary measures are difcult.
Usually, the cyber caf network administrator
troubleshoots faults only after a network device
fails. It can take several hours for the fault to be
rectified and for services to return to normal,
causing user loss and affecting business operations.
The cyber caf network should be easy to deploy,
configure and maintain so that skilled network
operation and maintenance personnel are not
required.

Cyber Caf Network Solution

Network stability

Cyber Caf Network

3. Huawei
Solution
3.1 Solution Description
Based on the findings of market research performed on cyber caf services, Huawei uses a three-layer
architecture: egress router, core switch, and access layer.
ISP 2

Server area

Cyber Caf Network Solution

Egress
router

eSight

Core
layer

ISP 1

AR3200/2200/
1200 series

XX area

S7700/5700
series

NMS, monitoring, video, game, accounting,

and log servers

Film and TV area

Video area

Game area

Business area

Common area
WA600!series

S2700/1700!series

Bandwidth

Wire-speed
forwarding

High speed

Wird and wireless

coverage, and QoS

Refined bandwidth
management

Egress router
The router is the network egress. It is connected
to the ISP network and core switch. A 10/100M
leased link is used between the egress router
and the ISP network. The egress router must
provide security, NAT, and good forwarding
performance. Huawei AR3200/2200/1200 routers
are recommended.

Core switch
Core switches must provide wire-speed forwarding,
stability, short delay, and high port density. Huawei
S7700/5700 switches are recommended.

Access layer
A cyber caf network uses different access switches
and wireless devices in different areas to meet

various service requirements. The following table

lists the service and network device requirements
in different areas.

Service Area

Service Requirements

Network Device Requirements

Internet access

Intelligent bandwidth
allocation and dynamic
bandwidth adjustment

Business
area

Convenient and high-quality service for VIP users

Wired and wireless

coverage and QoS

Game area

Guaranteed bandwidth and a high network

transmission rate

Guaranteed bandwidth

Video area

Heavy two-way trafc that is transmitted continuously

Guaranteed bandwidth
and two-way wire-speed
forwarding

Film and TV
area

Heavy downlink trafc and good image quality

Multicast technology and

QoS

Server area

High security

Firewall, IPS, and IDS

Private room
or couples
space

Flexible access

Wired and wireless

coverage

Huawei S2700/1700 switches are recommended to provide 100 Mbit/s access rate for terminals, Huawei
SS5700/2700/1700 switches are recommended to provide 1000 Mbit/s access rate for terminals, and
WA600 series are recommended to provide WLAN services.

Customized Cyber Caf Network Solution

Huawei cyber caf network solution can be customized to meet customer requirements and to t the scale
of customer operations. It is stable, high-speed, secure, and easy to operate and maintain.

Recommended Solution
Network Scale
(PC Quantity)

<100

100300

Egress router

AR1200

AR2200/1200

Core switch

Access switch

Network
management
system

AP

Use the router as

S1700
the core device

e S i g h t ( f r e e Use the router as

version)
the AP

S5700

S2700/1700

eSight (free
version or
simplied
version)

WA600 series

WA600 series

300500

AR3200/2200

S5700

S2700/1700

eSight (free
version or
simplied
version)

>500

AR3200

S7700/5700

S2700/1700

eSight (simplied
WA600 series
version)

Cyber Caf Network Solution

Common
area

3.2 Cyber Caf Networks with

Fewer than 100 PCs
1) Network Requirements

2) Solution

Cyber caf networks with fewer than 100 PCs have

simple service requirements, and must be costeffective.

The AR1200 integrates the functions of the egress

router, core switch, and AP, and connects to the
ISP network. The AR1200 can function as the
firewall and provides edge security. The cyber
caf can add low-cost switches to connect more
devices, improving scalability.
ISP 1

Server area

eSight

AR1200series

Egress router Core layer

Cyber Caf Network Solution

NMS, monitoring, video, game, accounting,

and log servers

Access layer
XX!area

VIParea
S1700series

Common area

3) Solution Characteristics
Cost-efcient: a low-cost and high performance network. The AR1200 integrates the functions of the egress
router, core switch, and AP, and the S1700 switch is cost-efcient.
Network stability and easy deployment: simple network topology. The router supports a web-based network
management system and provides various security functions, including ACL, gratuitous ARP, and firewall
functions.

3.3 Cyber Caf Networks with

100300 PCs
1) Network Requirements

2) Solution

Cyber caf networks of this size must provide services

and the cyber caf egress must be stable. Customers
can enjoy high-speed bandwidth, high-speed Internet
surfing, and smooth video viewing. Differentiated
services are provided for customers. The network is
simple, reliable, stable, and manageable.

The AR2200/1200 functions as the egress router.

It integrates the firewall function and connects
to two ISP networks to ensure Internet access
stability. The S5700 functions a core switch and
provides 1000M high-speed switching. Three-layer
architecture is used, and core switches work with
access devices. Network deployment is simple and
facilitates the partitioning of different areas within
the cyber caf. The WA600 provides wireless
access for an improved customer experience.
eSight is used to manage the network.
ISP 2

Egress
router

eSight

S5700 series

Core
layer

NMS, monitoring, video, game, accounting,

and log servers

Video area

AR2200/1200 series

Game area

Business area

Common area
WA600 series

S2700/1700 series

3) Solution Characteristics
Stable egress: Multiple WAN interfaces, load

Easy manageability: Devices are easy to

balancing and line backup, ensuring network

deploy and congure, and support the web-based

stability

network management system (NMS), statistics

High-speed bandwidth: 1000M switch, port

reporting, SNMP, and early alarm identication

wire-speed forwarding, ensuring QoS for key

Wireless access: Convenient and fast Internet

services

access

Easy scalability: Typical three-layer structure,

exibly deployed core and access devices, facilitating
network expansion and area partitioning, providing
differentiated services

Cyber Caf Network Solution

Server area

ISP 1

3.4 Cyber Caf Networks with

300500 PCs
1) Network Requirements

2) Solution

Cyber caf networks of this size are divided into

different areas, such as the video area, business
area, and game area. The network provides
differentiated services (for example, 1000M, 100M,
and wireless services) for customers based on the
area from which they access the network.

The AR3200/2200 functions as the egress router.

It integrates the firewall function and connects
to two ISP networks to ensure Internet access
stability. The S5700 functions a core switch and
provides 1000M high-speed switching. Threelayer architecture is used, and core switches work
with access devices. Network deployment is simple
and facilitates the partitioning of different areas
within the cyber caf. The WA600 provides the
wireless access function for an improved customer
experience. eSight is used to manage the network.
ISP 2

Cyber Caf Network Solution

Server area

Egress
router

eSight

ISP 1

AR3200/2200 series

XX area
S5700 series

Core
layer

NMS, monitoring, video, game, accounting,

and log servers

Film and TV area

Video area

Access layer
Game area
Business area

Common area
WA600 series

S2700/1700 series

3) Solution Characteristics
Stable egress: Multiple WAN interfaces, load

Easy manageability: Devices are easy to

balancing and line backup, ensuring network

deploy and congure, and support the web-based

stability

network management system (NMS), statistics

High-speed bandwidth: 1000M switch, port

wire-speed forwarding, ensuring QoS for key
services

reporting, SNMP, and early alarm identication

3.5 Cyber Caf Networks with

More than 500 PCs
1) Network Requirements
Cyber caf networks of this size must be secure,
reliable, and stable. The network is divided into
different areas, such as the video area, business
area, and game area. It provides differentiated
services (for example, 1000M, 100M, and wireless
services) for customers based on the area from
which they access the network.

2) Solution

two ISP networks to ensure Internet access stability.

Alternatively, a dedicated firewall device can be
used to improve network security. The S7700/5700
functions a core switch and provides 1000M highspeed switching. Three-layer architecture is used,
and core switches work with access devices.
Network deployment is simple and facilitates the
partitioning of different areas within the cyber caf.
The WA600 provides the wireless access function
for an improved customer experience. eSight is
used to manage the network.

The AR3200 functions as the egress router. It

integrates the firewall function and connects to
ISP 2

eSight

Core
layer

NMS, monitoring, video, game, accounting,

and log servers

Film and TV area

AR3200 series

XX area
S7700/5700
series

Access layer
Game area
Business area

Video area

Common area
WA600 series

S2700/1700 series

3) Solution Characteristics
Secure and stable egress: multiple WAN interfaces,
load balancing and line backup, ensuring network
stability

High reliability and scalability: The S7700 is a modular

device with redundant key components. It is easy to
congure, upgrade, and expand, maximizing ROI.

Cyber Caf Network Solution

Server area

Egress
router

ISP 1

3.6 Recommended Devices

Cyber Caf Network Solution

Type

Device

Characteristics

Egress
router

AR3200/
2200/
1200 series

Provides LAN ports and xDSL ports, and integrates functions such as
rewall, IPSec tunnel, NAT, DHCP server, and fat AP.

Core switch

S7700/5700
series

Supports ARP and DHCP attack defense, port isolation, and MFF.

Access
switch

S2700/1700
series

Supports ACLs, QoS, and rate limiting, securely isolates services, and ensures
the quality of key services.

AP

WA600 series

Supports Fat AP and integrated Fat/Fit AP. Suitable for indoor deployment
and has an elegant appearance.

Network
management
system

eSight
(simplied
version)

Uses dedicated network management software to perform network

topology management, alarm management, fast service deployment, and
rapid fault location.

3.7 Highly-Recommended Products

1) Enterprise-class S1700 access switch

similar industry products, sets low-power ports to

idle state, and allows ports to switch between the
normal state and idle state.
Advanced surge protection: uses the Huawei
patented built-in surge protection method that
protects devices against lightning strikes and
increases device survivability 30 fold compared
with devices not using this technique.

Product specications
S1728GWR-4P: Layer 2 1000M switch that
provides 24x10/100/1000M Base-T interfaces
and 4 SFP GE interfaces and supports web-based
network management
S1724G: Layer 2 1000M switch that provides
24x10/100/1000M Base-T interfaces without NMS

Product characteristics
Secure SMB switch: uses next-generation chips with
industry-leading security specifications, supports
security self-defense, IP+MAC+interface+VLAN
check, ARP anti-spoong, and secure MAC address.
802.3az Energy Efficient Ethernet: uses nextgeneration energy-saving technology, reduces
power consumption by 30% compared with

Intelligent one-key restoration: sets the restart

button to restart the system or restore the device
to the factory settings.

2) AR G3 router
Product specications
AR1200

Processing performance: 350 kpps

Default interfaces: 2x10M/100M/1000M

electrical interfaces, 8x10M/100M electrical
interfaces, 2 USB ports, 2 SIC slots

Dimensions: 390 mm x 220 mm x 44.5 mm

AR2200

Processing performance: 1 Mpps

Default interfaces: 3x10M/100M/1000M

Ethernet interfaces (any one can be connected

degrading forwarding performance. This

cards, 4 SIC slots, 2 WSIC slots

function is used on both Huawei AR G3 series

routers and high-end routers.

Dimensions: 442 mm x 420 mm x 44.5 mm

Reliability: uses redundant key components

and hot swappable boards and implements

Huawei AR G3 series router: uses a multi-core

50 ms switchover to speed up network

processor and high-speed SFUs, providing

convergence.

double the industry-standard performance

capabilities.

Hardware QoS: ensures service quality without

to the fiber), 2 USB ports, 2 GB Micro SD

Product characteristics

ALL IN ONE: provides various wired interfaces

and supports 3G link backup and various
service features, including routing, switching,

3) eSight enterprise NMS

Huawei eSight is a next-generation network
management system designed for enterprise
networks. eSight is offered in a free or simplified
version to help SMEs manage key services.

and security.

Topology management
Alarm management
Resource management

Manages up to 40 devices

Simplified version
Functions provided by
a free version
Performance
management
Customized device
Manages up to 60 devices

Standard version
Functions provided by
a simplified version
Report management
Configuration management
Service component expansion
Manages up to 2K devices

Professional version
Functions provided by
a standard version
Hierarchical network
management
Manages up to 20K devices

eSight enterprise NMS

eSight (free version): manages a maximum of 40 devices, provides topology management, alarm
management, and resource management.

eSight (simplied version): manages a maximum of 60 devices, supports single device management
and network management, and provides topology management, alarm management, performance
management, and resource management.

Cyber Caf Network Solution

Free version

10

Copyright Huawei Technologies Co., Ltd. 2011. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei
Technologies Co., Ltd.
Trademark Notice
, HUAWEI,
and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property of their respective owners.
General Disclaimer
The information in this document may contain predictive statements including,
without limitation, statements regarding the future financial and operating results,
future product portfolio, new technology, etc. There are a number of factors that
could cause actual results and developments to differ materially from those
expressed or implied in the predictive statements. Therefore, such information is
provided for reference purpose only and constitutes neither an offer nor an
acceptance. Huawei may change the information at any time without notice.