H3C SeerEngine-Campus

Flexible deployment

HA (high availability)

AD-Campus can be deployed either in standalone mode or cluster mode with high level of reliability. Disaster Recovery function brings the reliability of AD-Campus to a much higher level. AD-Campus also supports both being deployed on physical server and virtual machine platform. And the installation process is guided through an instructive wizard.

Advanced architecture

AD-Campus components are developed in the modular form. All components can be deployed on the same Unified Platform. This architecture allows AD-Campus to achieve integrated deployment of all components. Integrated deployment can reduce customers' investment in server, eliminating the need to purchase multiple sets of servers for different components. This design also provides a customized and most suitable and cost-effective solutions according to different customer scenarios and needs.

All-scenario automation

Device onboarding automation

Simplifies network configurations based on the Spine-(Aggr)-Leaf-Access layer network design to deploy the configuration file on devices at different layers. SeerEngine-Campus can complete configuration file generation without any CLI command execution and can load the configuration file for the devices automatically.

Automatic expansion and replacement

Automatically identifies newly added and replacement devices, assigns configuration to the new devices, restores configuration on the replacement devices, even when the replacement devices are not the same model as the previous ones.

End-to-end SDN

SeerEngine Campus provides end-to-end service deployment in an automatic manner. SeerEngine-Campus can automatically setup both the underlay and overlay network, and can also automatically deploy related configuration on network devices based on private networks, security groups and inter group policies. This can greatly reduce service deployment time and improve efficiency.

As shown in the following table, to deploy 2 spine devices, 40 leaf devices, and 500 access devices in a campus network with 10000 access users, a total of 132 hours are required for deploying the configurations listed in the table, with 10 minutes for each device. However, with SeerEngine-Campus, deployment can be finished within one hour.

Application-driven orchestration

SeerEngine-Campus can dynamically orchestrate network resources to achieve on-demand service allocation. It abstracts the complexity of network resources to simplify network infrastructure and provides easy but highly efficient management. By defining virtualized network resources as virtual objects, SeerEngine-Campus allows you to use an easy drag-and-drop process to orchestrate them.

General device group

Allows you to place devices or interfaces at the same layer in one group. SeerEngine-Campus has created device groups and interface groups based on device roles and their relationships in the Spine-(Aggr)-Leaf-Access structure. You can adjust the groups as needed.

Security group

Restricts user privileges by security groups instead of legacy VLAN and ACL combinations. It allows you to define security groups, resource groups, and inter-group policies and orchestrate user privileges to implement flexible and coherent user access anywhere.

Inter-group policies

Controls east-west traffic between users and between users and servers within the campus network.

Egress policies

Manage firewall/IPS, bandwidth, and NAT settings and control north-south traffic for granular access control and security protection of external and Internet access.

Service chains

Allows flexible configuration and application of inter-group policies and egress policies based on service chains to meet policy orchestration requirements on campus networks.

Account-IP binding

Allows users to access the network from anywhere, anytime, and any endpoint with the IP address and access rights unchanged.

IP-SGT

Based on IP-SGT subscription and Micro segmentation technology, AD-Campus can achieve IP and security group decoupling, authentication point and policy execution point decoupling, increasing the security group number to 4K, which can meet the requirements in large-scaled network.

Free mobility

The security group resources, IP resources, access policies are no longer correlated with users’ location, truly making the AD-Campus network an automatically adaptive network for users, achieving free mobility with fluent and consistent use experience no matter where and when the users accessing the network.

Comprehensive management

Device management

AD-Campus provides management of diverse types of devices such as Switches, Routers, Wireless AC, Access points, Security devices, PON, with features including graphical display of device panel with real-time status, presentation of device information, interface information, table entry, performance data, alarms and etc. In addition to H3C's devices, AD-Campus is also able to include third-party devices into AD-Campus’s network, such as Huawei, Cisco, Aruba.

Topology management

Provides multiple topology views for multi-dimensional network management and allows you to view topologies of all fabrics and the topologies of all devices in a specific fabric.

Configuration management

SeerEngine provides centralized management for configuration files and software files. In terms of configuration, it supports both configuration templates and configuration segments; In terms of software versions, it provides software library management functions for various devices; Based on the configuration backup history and software upgrade history, changes in configuration files can be compared, tracked and audited, changes in software versions can be audited, and version recovery can be performed, improving the maintainability.

Wireless management

AD-Campus can manage wireless AC, FIT AP, and FAT AP, provides detailed visualization for terminals, SSID, Radio, location and etc. AD-Campus provides AP start and stop schedule, radio start and stop schedule, radio power adjustment, SSID start and stop schedule to save energy consumption; The signal coverage status can also be displayed based on AP locations to help customers better design and deploy the wireless networks.

End terminal management

AD-Campus integrates EIA to deliver complete NAC solution based on user & scenario-based control strategies. AD-Campus supports multiple NAC methods such as 802.1x, Portal, MAC, SSL VPN, visitor QR code, SMS, etc. It can work with AD domains, LDAP, third party Radius and database.

DHCP and IP management

Assigns IP addresses automatically to devices and users that come online and allows administrators to view and control IP address allocation on the entire network by displaying the usage of IP address pool, reserved IPs, excluded IPs, and other detailed information from a cinema seating plan-like panel.

Overlay management

Provides VLAN-VXLAN mapping, and other overlay network management functions.

PON network management

AD-Campus provides a unified entrance for the comprehensive configuration and management of OLT devices, OLT cards, OLT interfaces, splitters, ONU, UNI downstream ports in the PON network. The SNMP protocol can be used to check the operation and maintenance configurations of OLT, ONU and other devices on OLT devices. Configuration deployment for PON devices is also supported, including configuration setup for splitters, ONU, OLT interface, splitting ratio, transmission distance and manufacturer information, and can be displayed through topology, greatly simplifying the deployment and maintenance for PON networks.

Network O&M and system management

Dashboard

Displays network resource statistics as well as statistics about endpoints, online users, IP address pool usage, real-time alarms, application health, network health, and user health.

Resources capacity management

Provides resources usage status for devices across the network for you to have a quick look at the overall status of the network.

Log management

Allows you to query, filter, export, and delete operation logs, system logs, and running logs, so that you can quickly find, locate, and resolve faults.

Role-based control of permission and domain

AD-Campus can allocate system permissions for different administrators according to their needs. Administrators logging in AD-Campus will only be assigned corresponding permissions based on their roles. This feature ensures the safe and reliable operation of the system, achieving clear responsibilities, avoiding management authority overstepping, and making each administrator to only be able to manage certain intended group of devices. Effectively improve the overall management efficiency and security of the network, reduce operational risks.