Overview
Service Overview {#service}
Cloud Secured SD-LAN is a LAN construction and operation service for business sites based on user authentication. Based on SDN (Software Defined Network) and an integrated authentication solution, it centrally manages wired and wireless networks within the site, and can logically segment the network for operation according to the work characteristics of users and devices. It also provides IP Mobility functionality, allowing users to maintain the same network environment even when moving within the site, and offers an efficient network operation environment through centralized policy management and operational automation.
| Category | Option | Content |
|---|---|---|
| Network Authentication | SaaS type |
|
| Network Access | service-type | Provision of network equipment and operational services for workplace LAN configuration |
Service diagram {#service-1}
Provided features {#feature}
Cloud Secured SD-LAN provides the following features.
Network authentication: It can control network connection and access based on user/device authentication. Logical network segmentation: You can separate networks by business/purpose and apply security policies. IP Mobility: Provides the same network environment even when the user’s location changes. Policy Management: You can manage network and security policies per user and device. Operations automation: You can automate network configuration and policy deployment. Service Portal: Provides user application and administrator operation portals. Network Operations: Able to design, deploy, operate, and manage wired and wireless networks.
Component {#configuration}
Cloud Secured SD-LAN consists of the following elements.
Network Authentication: User/device authentication, network segmentation, and security policy management can be performed. SDN Controller: It can manage network policies, automate configuration, and perform monitoring. User Portal: Provides a portal that allows users to use self‑service functions such as network change requests and authentication status inquiries. Admin Portal: Provides a portal for monitoring authentication status, managing policies, and using operational dashboards. Wired/Wireless Network: Provides network infrastructure such as wired switches and wireless APs within the premises. Operational Services: We provide network design, construction, operation, and technical support services.
Constraints {#constraints}
The limitations of the Cloud Secured SD-LAN service are as follows.
To use SaaS-type NW Authentication, network communication/connection between the customer’s site and the Samsung Cloud Platform region is required. Cloud Last Mile, dedicated line, VPN, etc. usage After creating the service to configure equipment within the facility, the start and end times of the service will be finalized after consultation with the responsible manager. VMs are allocated per user, and an additional VM usage fee for solution installation is incurred. User authentication methods require separate discussion.
Preliminary Service {#service-1} Cloud Secured SD-LAN has no prerequisite service.