Railway two network integration solution

The data communication network and comprehensive computer network of the railway industry are large in scale. However, due to the separate construction of the communication and information departments and the lack of unified planning, the two networks are basically operated independently and carry related railway services, resulting in a global information network as a whole The performance is not strong, and the utilization rate of network resources is low. In order to solve this problem, the Railway Corporation issued a two-network integration specification for railway data network and railway integrated computer network in 2015. According to this specification, Ruijie Networks launched a targeted railway two-network integration solution.

As shown in the figure above, Ruijie Railway's two-network integration solution is connected at three levels: each railway bureau, railway data network and integrated computer network:

Road office center: docking at the information office, connecting the integrated computer network of the road office to the data network;

Convergence layer: Connect the integrated computer network of each information branch to the data network;

Access layer: In the early stage, the integrated computer network of each station is mainly connected to the data network, and then it can be expanded to connect the integrated computer network of each station section to the data network.

At each docking point, a firewall and access router need to be deployed:

Deploy border firewalls for flow control and border security protection;

Deploy CE access routers for multi-service access to ensure the advancement of key services;

At the same time, it is recommended to deploy the following in the center of the road bureau:

(1) Deploy a unified operation and maintenance monitoring platform to realize unified operation and maintenance management of all network equipment, servers, computer room environment, business systems, etc., and unified management of IP addresses;

(2) Deploy a unified identity access system to authenticate users at the network level, so that network access can be traced, checked, and managed;

(3) Deploy a big data security platform, sort out security incidents, and achieve dynamic awareness of security incidents.