Application of Our Industrial Switch in Hospital Intranet

With the continuous increase in the number of registered and waiting patients, a large number of mobile terminals can easily lead to slow network access, which not only reduces the work efficiency of hospital personnel, but also exacerbates network security issues such as doctor-patient privacy and hospital data leakage. In response, many hospitals are gradually starting to upgrade and transform their networks.

The hospital's internal network generally adopts a high-speed Ethernet layer 2 or layer 3 architecture design with 10 Gigabit core and gigabit access. It can achieve smooth upgrade from 10 Gigabit to core access by adding modules, meeting the needs of future business expansion in the next 3-5 years.

1. Two layer network architecture

The entire network access layer is directly connected to the core or connected to the core through a second layer device. Its characteristic is that the entire network topology is simple, and all terminal network management is located on the core switch. The core switch is deployed through MSTP (Multi Service Transfer Platform)+VRRP (Virtual RouterRedundancy Protocol), ring network technology, or hardware virtualization technology to increase redundancy and robustness. However, it can easily cause significant pressure on the core switch and be vulnerable to attacks from terminals in various regions, leading to network instability, The stability of the network has decreased.

2. Three layer network architecture

The entire network is strictly divided into three layers: core, aggregation, and access. The access layer is mainly responsible for access control, VLAN division, and isolation and interworking of the second layer network; The aggregation layer device serves as the gateway for each aggregation area, performing three-layer network access control, reducing core switch pressure, dividing network turbulence areas, so that local problems do not affect the overall situation. Above the aggregation layer, it is interconnected with the core switch through three-layer interfaces, running dynamic or static routing protocols, and improving network self-healing ability; The core layer switch is mainly responsible for high-speed three-layer forwarding. Due to the control domain division on the aggregation layer, the core layer has fewer policies enabled, higher performance, and reduced risk.

Network Architecture Design of Our Industrial Switch in Hospital Intranet

(1) Core backbone network design

The core backbone network uses two 10GbE core switches to interconnect through 10GbE multimode optical fiber to realize 10GbE core network and can be smoothly upgraded to the future 10GbE core. Two core switches are virtualized into one through virtualization technology for management, achieving link load balancing and hot backup for accessing the core. Once a core switch fails, the link switching time is within 50ms, ensuring uninterrupted forwarding of all business data.

⑵ Selection of core switches

In order to ensure future business expansion, the core switch should have at least 3 business slots and support dual engine thermal redundancy; The switching capacity should be at least 4.8Tbps or above, and the packet forwarding should be at least 1400Mpps or above; The core switch must support virtualization technology, virtualizing two core switches in the internal network into one for management, while achieving load balancing; The core switch must support hardware based CPU protection technology and automatic issuance of security policies to fully ensure the safe operation of the core switch;

⑶ Access layer design

Considering the centralized access of information points to the imaging center and the diversified application of hospitals, the PACS system has a high demand for high traffic and performance. The equipment of the image center access layer is required to have high port density and the characteristics of high performance, high security, and multifunctional devices. The access layer adopts a fully gigabit intelligent access industrial switch, which meets the needs of doubled network traffic and rapid growth of multimedia services. While providing high-performance and high bandwidth, the fully gigabit intelligent access industrial switch provides intelligent flow classification, comprehensive quality of service (QoS), and multicast application management features. It can also implement flexible and diverse security control strategies based on the actual usage environment of the network, effectively preventing and controlling virus transmission and network attacks, controlling illegal user access and use of the network, and ensuring that legitimate users use network resources reasonably, fully ensuring the efficient and secure use and operation of the network.

The hospital's internal network access design adopts gigabit industrial switches, which must support anti ARP, DHCP SNOOPING and other attacks; And supports functions such as 802.1x and WEB authentication; Connect to the core switch through two gigabit multimode optical fibers. Realize thermal redundancy of links through virtual switching technology of core switches. And connect to the desktop computer through gigabit Category 6 twisted pair to achieve gigabit to desktop access.

The hospital uses our industrial switches to achieve unified management through the network, with a graphical interface that clearly displays the type, location, and network operation status of the access terminal. It quickly locates network problems and easily solves problems such as cumbersome network terminal management and operation and maintenance in the hospital. At the same time, when the industrial switch detects infected files or inserts infected external devices, it will block the spread of the virus in the internal network, and at the same time, locate the risk terminal and give an alarm. Facilitate administrators to quickly adopt management measures, minimize impact, and ensure internal network security.