A complete set of wireless network system design materials

Hello everyone, I'm Brother Xue. The readers of our VIP member group consulted the design scheme of the wireless network system, and today we share a good scheme material, which can be referred to and recommended to be collected for later use.

This complete set of word program materials, VIP members download!

Wi-Fi system

1. The need for wireless network

With the continuous expansion of the business scale of the hospital, the requirements for the hospital to improve the operational efficiency are also increasing, and with the continuous development of WIFI technology, it can carry medical applications more stably and efficiently. Many hospitals expand wireless networks on the basis of wired networks to carry out daily business, and even a large number of hospitals consider the cost of construction and the cumbersomeness of traditional networks when building new sites, and also hope to achieve their goals through WIFI access technology. The wireless network coverage system realizes full coverage of the wireless network, sets up indoor AP and outdoor AP in indoor and outdoor areas respectively, adopts WIFI6 standard to meet the needs of network development, and authorizes and manages all wireless access equipment through the wireless controller.

2. Design principles

When planning a WLAN network, the first consideration is to meet the interaction between the AP and the wireless network card signal, and the user can effectively access the network. The coverage planning of the system should mainly consider the location and configuration of the AP antenna to ensure the effective coverage of the AP wireless signal. When selecting the placement of APs, you need to follow the following principles:

(1) If only one AP is installed in a hall, try to place the AP in the center of the hall, and preferably on the ceiling of the hall; If two APs are installed in the same space, they can be placed on two diagonal sides.

(2) Keep the number of signals passing through walls and ceilings to a minimum. WLAN signals are able to penetrate walls and ceilings, however, the signal has a large penetration loss. The AP and computer should be placed in a suitable position so that the wall and ceiling obstruct the signal path to the shortest and minimize the loss.

(3) Consider the straight connection between the AP and the coverage area. Pay attention to the placement of the AP so that the signal can pass vertically through the wall or ceiling.

(4) The direction of the AP antenna is adjustable, and the position of the AP should ensure that the direction of the main beam of the antenna is facing the target area to ensure good coverage.

(5) The AP installation location should be far away from electronic equipment, and electronic equipment such as microwave ovens, wireless cameras, and cordless phones should be avoided in the coverage area.

3. System design

The wireless network adopts the AC+AP architecture of centralized management, the wireless architecture has a simple and powerful wireless LAN centralized management function, the AP itself does not store any configuration files, the configuration of the AP is obtained from the wireless controller, and the AP of the entire wireless network can be uniformly managed through the wireless controller. Network administrators can simply configure the wireless switch to provision, manage, and maintain all AP devices and mobile terminals, including radio spectrum, wireless security, access authentication, mobile roaming, and access users.

Extranet wireless AP covers public areas such as outpatient halls, which can provide free wifi for patients during queuing, and at the same time, through wireless, the hospital's WeChat public account promotion, health education, department navigation, personnel positioning, doctor-patient information disclosure, assistance in Internet payment and other needs can be realized.

Intranet wireless APs are deployed in various wards of the inpatient building and other intranet areas to provide mobile medical care and mobile ward rounds.

Topology diagram of indoor wireless APs

WLAN planning

(1) Constructed in accordance with government network standards and IPv4/6 dual-stack construction standards, reaching WIFI6 technical standards.

(2) Formulate a unified backbone network security strategy and consider the security of the network platform as a whole. You can use VPN and VLAN to isolate the subnets of each service, plan IP addresses for the entire network, divide different subnets according to different services, isolate the same physical LAN through VLANs, and determine the interoperability between different subnets by routing policies.

(3) Ensure that the hardware equipment can meet the needs of general business without upgrading within 5 years, and the operation is stable and reliable.

（4）具有保证系统安全，防止系统被人为破坏的能力。 支持AAA功能、ACL、IPSEC、NAT、ISPkeeper、路由验证、CHAP、PAP、CA、MD5、DES、3DES、日志等安全功能以及MPLS VPN。

(5) It can provide different levels of services according to the requirements of the service and ensure the quality of service, and provide powerful IP QOS functions such as resource reservation, congestion control, packet classification, and traffic shaping.

(6) It has a high fault tolerance ability, and has the ability to resist the external environment and human operation errors, so as to ensure that any single point of failure will not affect the normal operation of the entire network.

AC 1+1备份流程说明：

In 1+1 hot standby, a standby AC is configured at the AC peer location with the standby AC powered on and the active AC configuration and dynamic information backed up. When the active AC fails, the standby AC quickly takes over from the active AC. Also known as dual-link technology.

Because the AC is located in a high position in the network, one AC often controls thousands of APs and tens of thousands of users (STAs), so the reliability of the AC is particularly important. You can configure 1+1 hot backup to ensure the stable operation of services on the WLAN network.

Requirements for the coexistence of multiple WLAN networks:

In the user scenario, there is a carrier WLAN network or the possibility of carrier WLAN network construction later, which leads to the coexistence of user-built WLAN and operator WLAN, and there are only three wireless channels in the 2.4 GHz frequency band that do not interfere with each other, and insufficient channels will also lead to problems such as multiple APs working on the same channel, that is, co-channel interference. In the construction of wireless networks, it is necessary to consider how to realize the coexistence of multiple WLAN networks on the premise of ensuring the normal use of wireless networks.

Signal Interference Requirements:

In the user scenario, the number of rooms is large, and in order to achieve comprehensive and effective wireless signal coverage, it is necessary to deploy wireless access points intensively. Mobile healthcare services require that the wireless network must be free of interference and that services can be carried out in a clean and effective wireless network.

Data transmission performance requirements:

The network application of users in the mobile medical wireless network is not complicated, generally in the inpatient department, a ward is in one floor, and the number of people who carry out mobile medical care business in a ward at the same time is not more than 6 people, and the number of concurrent users is small. However, due to the limitations of mobile terminals (mobile terminals have low sensitivity to roaming, or even no roaming), the wireless network in a ward is required to have no roaming phenomenon, and the problem of business interruption can not occur in the process of moving medical staff.

Cyber Security Requirements:

In terms of wireless security, on the basis of the hospital-wide classified protection 2.0, a three-dimensional protection is built, WIPS is enabled at the link layer to detect phishing APs and spoofing attacks, and at the same time, the association/reassociation DoS attack detection is carried out. At the network layer, IP and address are double-checked to ensure the security of the source address. At the application layer, all dangerous terminals are prohibited from accessing the network and all security risks are blocked from the wireless network through the linkage of wireless devices with the security situational awareness platform, saving the wireless spectrum resources of the air interface, improving the security of the wireless network, and allowing the wireless network to have the protection capabilities of professional security equipment such as IPS and firewalls.

Wireless Roaming:

The second floor of the AC roams

1) The terminal is associated with the AC through AP1, and the AC determines that the terminal is the first-time access user, and creates and saves the relevant user data information for the terminal for future roaming.

2) the terminal moves from the AP1 coverage area to the AP2 coverage area; The endpoint disconnects from AP1 and roams to AP2 connected to the same AC.

3) The terminal is re-associated with the AC through AP2, and the AC judges that the terminal is a roaming user, because it is in the same subnet (also belongs to VLANX) before and after roaming, the AC only needs to update the user database information and change the data path to be forwarded by AP2 to achieve the purpose of roaming.

The AC roams on three floors

1) The terminal applies to associate with the AC through AP1 (which belongs to VLANX), and the AC determines that the terminal is the first-time access user, and creates and saves the relevant user data information for the terminal for future roaming.

2) the terminal moves from the AP1 coverage area to the AP2 (VLANY) coverage area; The endpoint disconnects from AP1 and roams to AP2 connected to the same AC.

3) The terminal is re-associated with the AC through AP2, and the AC judges that the terminal is a roaming user and updates the user database information; Even though they are not in the same subnet before and after roaming, the AC still treats the endpoints as if they were connected from the original subnet (VLANX), allowing the endpoints to keep their original IP and support the established IP traffic.

1. Network planning parameters

Penetration loss

Regardless of whether an indoor or outdoor AP is used, the coverage area will show obvious signal attenuation characteristics due to the structural characteristics of the building, resulting in signal blind spots. Empirical values of 2.4GHz microwave penetration loss for various materials:

8mm木板：1~1.8dB

38mm木板：1.5~3dB

40mm wooden door: 2~3dB

12mm glass: 2~3dB

250mm水泥墙：20~30dB

Brick wall: 10~15dB

Floor blocking: 20~30dB

Elevator blocking: 20~40dB

Path loss

Calculation formula for indoor environmental path loss:

L=20*lg(f)+10*D*lg(d)+p-28

Where, L: path loss (dB); f: working frequency (MHz); D: Attenuation factor; d: distance (m); p: Floor penetration factor.

In an indoor semi-open environment, the propagation model for the same floor is simplified as:

2.4GHz Frequency Band: (Attenuation Factor=2.5; Floor Penetration Factor=6)

L=20*lg(f)+10*D*lg(d)+p-28=46+25*lg(d)

5GHz Band: (Attenuation Factor=3;Floor Penetration Factor=6)

L=20*lg(f)+10*D*lg(d)+p-28=53+30*lg(d)

Table 5-3-2-1 Path loss as a function of distance in indoor semi-open environment

Distance:	1m	2m	5m	10m	20m	40m	80m	100m	200m
2.4G：	46dB	53.5dB	63.5dB	71dB	78.5dB	86dB	93.6dB	96dB	103.5dB
5.8G：	53dB	62dB	74dB	83dB	92dB	101dB	110.1dB	113dB	122dB

Link operations

Indoor Environment Link Budget Formula:

RSSI(dBm)=P+Tx+Rx-L-S

其中，RSSI：场强(dBm)； P：发射功率(dBm)； Tx：发射天线增益(dB)； Rx：接收天线增益(dB)； L：路径损耗(dB)； S：穿透损耗(dB)。

The link budget is only used as a theoretical reference, and appropriate adjustments should be made in the actual network construction based on the building type, on-site wireless environment, and simulation test conditions.

Introduction to the latest boutique information

There are more than 5,700 documents in total, and it is recommended to get a set, which is definitely helpful!

The PPT scheme in the article was all given, a total of 457 PPT, 6 sets of complete drawings, 343 industry standard specifications and construction drawing sets, 60 word schemes, 20 construction organization designs, 23 bills of quantities (with reference prices), 196 drawings and materials, 141 VISIO tiles and topology diagrams, project management and construction plans, 84 practical excel sheets, bidding plans and construction organization design, etc.