第三醫(yī)院無線技術方案

成都第三人民醫(yī)院無線解決方案HPE

andAruba…BetterTogether“Clients

globally

shouldconsider

HP

Aruba

for

allwired

/

WLAN

accesslayer

opportunities.”Gartner

MQ

for

Wired

and

Wireless

LANAccess

Infrastructure,

August

2015Source:

Gartner

Magic

Quadrant

for

the

Wired

and

Wireless

LAN

Access

Infrastructure

September

2015.

Tim

Zimmerman,

Bill

Menezes,

Andrew

Lerner,

ID

Number:

G00277052

This

Magic

Quadrant

graphic

was

published

by

Gartner

Inc.

as

part

of

a

larger

research

note

and

should

be

evaluated

in

the

context

of

the

entire

report.

The

Gartner

report

is

available

upon

request

from

HP.

The

Magic

Quadrant

is

a

graphical

representation

of

a

marketplace

at

and

for

a

specific

time

period.

It

depicts

Gartner's

analysis

of

how

certain

vendors

measure

against

criteria

for

that

marketplace,

as

defined

by

Gartner.

Gartner

does

not

endorse

any

vendor,

product

or

service

depicted

in

the

Magic

Quadrant,

and

does

not

advise

technology

users

to

select

only

those

vendors

placed

in

the

"Leaders"

quadrant.

The

Magic

Quadrant

is

intended

solely

as

a

research

tool,

and

is

not

meant

to

be

a

specific

guide

to

action.

Gartner

disclaims

all

warranties,

express

or

implied,

with

respect

to

this

research,

including

any

warranties

of

merchantability

or

fitness

for

a

particular

purpose.Leader

in

CampusNetworks2015

關鍵能力報告Wired

and

Wireless

LAN

Access

InfrastructureEnterprise

UnifiedWired

and

WLANAccessEnterprise

Wired-Only

ConnectivityCisco4.24HPE

Aruba4.15Juniper3.91Brocade3.74EnterpriseWireless-OnlyConnectivitySMB

and/orSmall

or

RemoteBranch

OfficeVoice

OverWLANIaaS

or

ManagedServiceHPE

ArubaHPE

ArubaHPE

ArubaHPE

ArubaHPE

Aruba4.144.114.124.104.14CiscoCiscoCiscoCiscoCisco4.144.064.114.054.11AvayaAerohiveAvayaAerohiveAerohive3.643.823.623.813.63ExtremeAvayaExtremeAvayaAvaya3.633.553.613.533.61Source:

Gartner

Critical

Capabilities

for

the

Wired

and

Wireless

LAN

Access

Infrastructure

September

2015.

Bill

Menezes,

Tim

Zimmerman,

Andrew

Lerner,

Michelle

A.

Brosnahan,

ID

Number:

G00270164.

The

data

used

in

creation

of

this

table

was

published

by

Gartner

Inc.

as

part

of

a

larger

research

note

and

should

be

evaluated

in

the

context

of

the

entire

report.

The

Gartner

report

is

available

upon

request

from

HP.

Gartner

does

not

endorse

any

vendor,

product

or

service

depicted

in

its

research

publications,

and

does

not

advise

technology

users

to

select

only

those

vendors

with

the

highest

ratings

or

other

designation.

Gartner

research

publications

consist

of

the

opinions

of

Gartner's

research

organization

and

should

not

be

construed

as

statements

of

fact.

Gartner

disclaims

all

warranties,

expressed

or

implied,

with

respect

to

this

research,

including

any

warranties

of

merchantability

or

fitness

for

a

particular

purpose.全球超過500家高端醫(yī)院正在使用Aruba的無線解決方案是多家專業(yè)醫(yī)療廠商的合作解決方案提供商NewIEC

80001-2

Standardmends

against multiple

SSIDSStresses

airtime

fairnessHighlights

spectrum

analysisDropouts

aslowas0.02%整體網(wǎng)絡架構INTERNETAC7200-1AC7200-2核心交換機核心交換機POE接入交換機POE接入交換機AP-325AP-325醫(yī)療內網(wǎng)防火墻/網(wǎng)閘防火墻核心交換機AC7000醫(yī)療外網(wǎng)WAN/4GRAP-3家/酒店/救護車服務器群內外網(wǎng)融合方案—內網(wǎng)流量INTERNETAC7200-1AC7200-2核心交換機核心交換機POE接入交換機POE接入交換機AP-325AP-325醫(yī)療內網(wǎng)防火墻/網(wǎng)閘防火墻核心交換機AC7000醫(yī)療外網(wǎng)WAN/4GRAP-3家/酒店/救護車服務器群內外網(wǎng)融合方案—外網(wǎng)流量INTERNETAC7200-1AC7200-2核心交換機核心交換機POE接入交換機POE接入交換機AP-325AP-325醫(yī)療內網(wǎng)防火墻/網(wǎng)閘防火墻核心交換機AC7000醫(yī)療外網(wǎng)WAN/4GRAP-3家/酒店/救護車服務器群GRE隧道遠程VPN訪問方案—如遠程會診INTERNETAC7200-1AC7200-2核心交換機核心交換機POE接入交換機POE接入交換機AP-325AP-325醫(yī)療內網(wǎng)防火墻/網(wǎng)閘防火墻核心交換機AC7000醫(yī)療外網(wǎng)WAN/4GRAP-3家/酒店/救護車服務器群GRE隧道IPSEC隧道AP點位設計示意內網(wǎng)SSID認證方式802.1x認證，EAP-PEAP或EAP-TLS醫(yī)生護士移動終端、醫(yī)療設備和語音視頻終端外網(wǎng)SSID認證方式MAC+portal雙因素認證首次portal認證成功后，后臺自動將用戶名和MAC地址綁定后續(xù)連接做無感知認證（MAC認證）住院病人MAC地址綁定有效期為5天，每個帳號只能綁定一個終端病人家屬通過注冊手機號接收密碼短信或微信認證，MAC地址綁定有效期為1天，每個帳號只能綁定一個終端醫(yī)生MAC地址綁定有效期為1個月，每個帳號可綁定兩個終端部分醫(yī)生和病人及家屬終端啟用終端隔離SSID

設計針對患者、家屬的自注冊訪客接入頁面可定制化，嵌入醫(yī)院推廣信息可引導患者下載醫(yī)院APP支持社交網(wǎng)絡登錄支持無感知認證登錄ClearPass

Guest傳統(tǒng)安全架構Enterprise

PerimeterEmployeesEmployeesWANBranchOfficeBranchEmployeesInternetData

CenterVisitorsContractorsEnterprise

PerimeterHomeOfficesPartner

SitesAruba基于角色和內容感知的策略執(zhí)行Data

CenterBillTammyPartnersBranchEmployeesSteveBobJaneScottKimContractorsVisitorsJane實現(xiàn)基于角色的用戶接入控制ApplicationServices外來訪客醫(yī)生護士醫(yī)療設備患者、家屬醫(yī)院領導Virtual

AP

1SSID:

HospitalVirtual

AP

2SSID:

GUESTDMZRADIUSLDAP

ADCaptive

Portal基于角色的接入控制接入權限Secure

TunnelTo

DMZ基于SSID的接入控制醫(yī)院領導醫(yī)生護士醫(yī)療設備患者、家屬外來訪客更加直觀的用戶體驗Aruba方法：基于角色的動態(tài)策略傳統(tǒng)方法：基于SSID實現(xiàn)權限分離不間斷的無線醫(yī)療網(wǎng)絡接入智能優(yōu)化終端與AP之間的無線連接非優(yōu)化連接問題的消除=>大幅減少醫(yī)生護士投訴基于802.11標準，不需要安裝任何終端軟件實時的射頻校準DEVICE

TYPEINTERFERENCELOCATIONCONGESTION‘MU-MIMO

Aware’Aruba

ClientMatch?專利技術—漫游優(yōu)化設計Aruba

ClientMatch

極大改善“粘滯”終端問題終端漫游后自動優(yōu)化到最佳AP終端漫游后仍然“粘滯”在原來的AP上不具備CLIENTMATCH智能應用流量控制AppRF?EHR

and

communication

prioritizedBandwidth

allocated

to

HealthcareapplicationsHigh

priority

real-timeMedium

priorityhealthcare

appsLow

priority

personal320

Series: 802.11ac

Wave

2最高性能802.11ac

Wave

2MU-MIMO

可同時支持3個終端傳輸數(shù)據(jù)增強版ClientMatch?

with

MU-MIMO

grouping4空間流最大支持1.7

Gbps;

80MHz

channels內置Aruba

Beacon(BLE)雙GigE

上聯(lián)口with

LACP

and

802.3af/atArubaOS

6.4.4

/

InstantOS

4.2.1基于Beacon的位置定位設計Way-Finding室內導航信息推送基于時間位置的信息推送Aruba

Beacons

withBluetooth

Low

Energy

(BLE)企業(yè)級且易于部署電池壽命1.5

到2

年或者通過AP

USB接口供電兼容iBeacon

API定位精度(<1m)保護用戶隱私低延遲的信息推送(<2sec)CONFIDENTIAL

?

Copyright

2015.

Aruba

Networks,

an

HP

Company.

All

rightsreservedAruba

Beacons

室內定位醫(yī)院移動App信息推送及室內導航Aruba

Beacons基于藍牙的實時位置定位和信息推送Aruba

AP

325內置Beacon與其它ArubaBeacons通訊以實現(xiàn)集中管理23定位引擎服務器與APP通訊提供位置定位、導航和信息推送定位引擎電磁兼容性設計—對電子醫(yī)療設備無電磁干擾認證機構：TUV

Rheinland

of

North

AmericaTUVRheinland

ofNorthAmerica是一家知名的對全球產(chǎn)品提供美國和加拿大市場準入認證的服務公司，擁有美國職業(yè)安全與健康管理局（OSHA）授權的全國公認測試實驗室（Nationally

Recognized

TestingLaboratory），NRTL對特定的產(chǎn)品或材料進行測定，并擔保這些產(chǎn)品或材料滿足OSHA所要求的相關安全標準，以確保這些產(chǎn)品在美國市場的使用是足夠安全的。TUV有權依據(jù)美國國家標準為全球產(chǎn)品提供合法的認證，成功通過測試并獲得美國市場準入證書的產(chǎn)品將獲得TUVus標識。加拿大標準委員會（Standards

Council

of

Canada）也授權TUV

Rheinland

of

North

America依據(jù)加拿大國家標準對產(chǎn)品進行測試和認證，成功通過測試并獲得加拿大市場準入證書的產(chǎn)品將獲得cTUV標識。成功通過測試并獲得美國市場和加拿大市場認證的產(chǎn)品將獲得cTUVus