Network Transformation Supported by H3C for Guangzhou First People's Hospital - Quick and Efficient Integration of Wired and Wireless Networks

Guangzhou First People's Hospital, formerly known as Guangzhou Convenience Hospital, was established in 1899 with a history of over a century. With more than 1.5 million yearly outpatients, it has developed into a large Grade A tertiary hospital. In 1997, a computer network was created. However, it is no longer able to meet service needs. Guangzhou First People's Hospital urgently requires a thorough renovation of the current network to increase the reliability and security of the network and meet service needs such as wireless ward rounds, video teaching, and remote consultation.

Because the computer network system is an important component of Guangzhou First People's Hospital's information system, the hospital selected the H3C network solution to transform the current network system.

Considering the data transmission volume and data security of the hospital service system, the H3C solution provided a dual-star structure, with two H3C S9508E routing switch hosts serving as core switches and three H3C S5500-28F-EI Ethernet switches serving as aggregation switches in the network central server room. All aggregation switches support redundant configuration of key components such as the power supply.

To conduct wireless ward rounds and offer patients a great medical environment, Guangzhou First People's Hospital also deployed WLANs in the internal and external networks of the hospital, respectively.

The wireless network is divided into an internal network and an external network, with the internal network primarily meeting the needs of wireless ward rounds. The wireless internal network deployed an S95E core switch wireless controller and an 802.11n wireless AP WA2610E, as well as a POE switch to achieve wired and wireless integration. The external network offers administrative staff and patients wireless access to the Internet. The wireless controller + Fit AP architecture is deployed in both wireless internal network and wireless external network.

To improve internal network security, an EAD endpoint access system with 1000 points is deployed throughout the network. By combining the 802.1x authentication method, EAD can work in conjunction with the S31 access switch and wireless AP to implement endpoint access control of access users. This allows EAD to isolate users who do not strictly adhere to the security policy, effectively preventing security threats from the network.