Access control project of the headquarters building of a large-size enterprise

Project background

The main tower building of an international financial center has 103 floors on the ground and 4 floors underground. The network of this international financial center is essential to the enterprise. Due to virus infection, authority control and lack of management personnel, the network system is usually vulnerable to various impacts from desktop PCs. The maintenance personnel are kept busy in blocking and isolating such impacts.

In order to guarantee the proper running of the network, the IT Department decided to adopt access control technology and check the authority and health conditions of the equipment connected to the network. The equipment that passes the checks can be securely connected while the equipment that fails to pass will be placed in guest vlan region where it will undergo patching, authority upgrade and other recovery measures before it is allowed to access the enterprise's sensitive data.

Project scale

The network of the international financial center controls cabled and wireless equipment accesses. The system awards different network authorities to all connected equipment after validation of username and password, health conditions and other factors.

The project involves the following network products: CISCO ASA5500 firewalls, CISCO 4500 switches, CISCO 2960 POE switches, CISCO 2960G switches, CISCO AIR-CT5500 wireless controllers, CISCO AIR-LAP1140 wireless APs and Leagsoft access control software.

Topology