This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Overview

    Service Overview

    Cloud LAN-Campus is a service that provides a wired and wireless integrated network usage environment based on user authentication within the customer’s business site. It provides a variety of wired and wireless integrated network access environments that can be used freely regardless of the location within the business site through simple user/device authentication, based on SDN (Software Defined Network). It minimizes existing physical network equipment and enables easy connection to multiple locations geographically distributed using the cloud. This allows companies to reduce the complexity of infrastructure construction and operation, and build a flexible and expandable network environment. Additionally, it enables the operation of business site networks in a more stable and efficient manner through optimized network design/configuration for customer environments, professional operating systems, and enhanced security management.

    Provided Features

    Cloud LAN-Campus provides the following functions.

    • Campus Network: Provides a wireless network usage environment and integrated authentication service for the workplace
    • NW Access: Infrastructure for business network usage (AP, NW Switch, etc.) and SDN system services
    • NW Authentication: User/device authentication-based network separation, multi-office authentication/security policy integrated management, support for various authentication methods (AD, certificate, etc.) and policy operation/management through service portal (user/administrator)
    Configuration Diagram
    Figure. Cloud LAN-Campus Configuration Diagram

    Features

    • Rapid Business Network Work Environment: Provides a wired and wireless integrated network usage environment through a user authentication-based SDN (Software Defined Network) solution. IP Mobility and separate networks according to terminal purpose are applied immediately, and users can easily change the network through the service portal.
    • Network Security Enhancement: Logical network separation and authentication-based wired/wireless integrated security management system enable consistent security policy operation for users/devices. Even in environments where users access multiple headquarters and business sites, the same network access environment and security policy application are possible, and authentication information is safely managed under the Samsung Cloud Platform security system.
    • Multi-vendor accommodation and network total service provision: The configuration of SDN equipment in the business place becomes more flexible due to the multi-vendor network integrated authentication. Additionally, instead of customers designing, building, operating, and managing their own network infrastructure, a total service system is provided, thereby improving operational and management efficiency. Optimized network design for each business place and fast and stable network services are provided through a dedicated team.
    • Service-based integrated billing system: The service billing system can reduce initial investment costs and enable network infrastructure expansion and capacity increase when needed. It provides usage-based authentication services, and no separate operating personnel or maintenance contract is required.
    • Various authentication methods and extensibility: We provide optimal authentication solutions with various authentication methods. Additionally, functional extension and differential policy management according to the security level of each business site are possible through linkage with customer systems (groupware, security systems, etc.).

    Component

    Cloud LAN-Campus provides services across the entire network within the workplace. The components are as follows, and related service creation is possible.

    DivisionDetailed Content
    Network Authentication
    • Network access authentication and network separation, security policy management
    • Multi-vendor network integrated authentication management
    • Headquarters/branch integrated policy application, roaming support
    • Providing various authentication methods (certificate, AD, account/MAC, etc.) and extensibility
    Service PortalWired/Wireless Integrated Authentication Service Portal Provided
    • User Portal: User Policy Creation/Change/Management
    • Admin Portal: Authentication Policy Management and Monitoring
    Wired/Wireless NetworkSDN-based Wired/Wireless Network Design and Integrated Configuration/Operation/Management
    WIPSWireless Intrusion Prevention System configuration/operation/management
    Network SolutionDHCP, NMS etc. network solution configuration/operation/management
    Fig. Cloud LAN-Campus Components

    Constraints

    When using the Cloud LAN-Campus service, there are the following restrictions.

    • Network communication/connection between the customer’s business site and the Samsung Cloud Platform region is required for CLAN authentication use.
      • Cloud Last Mile, dedicated line, VPN, etc. used In case of using network equipment from a specific vendor, prior consultation is required.
    • The start and end points of the service created for the equipment configuration in the business place are determined after consultation with the person in charge of AM.
    • When using AD integration as the authentication method, authentication-related policy rules must be normally deployed in advance on the user’s PC.
      • AD functionality issues require management by the customer’s AD administrator.
    • The network separation certificate method is supported for the specified OS type (currently limited to Windows), and additional costs are added excluding the authentication fee.

    Regional Provision Status

    Cloud LAN-Campus is available in the following environments.

    RegionAvailability
    Western Korea(kr-west1)Provided
    South Korea southern region 1(kr-south1)Not provided
    South Korea, southern region 2(kr-south2)Not provided
    South Korea southern region 3(kr-south3)Not provided
    Table. Cloud LAN-Campus Region-based Provisioning Status

    Preceding Service

    Cloud LAN-Campus has no preceding service.