Virtual LAN Research Articles

Applications of Intelligent Artificial and Communication Technologies in Intelligent Buildings

With the development of society and the progress of science and technology, more and more technologies are being applied to the intelligent building system. The study summarizes and analyzes the development status of intelligent buildings, then analyzes and generalizes the advantages, disadvantages, and applications of several artificial intelligence and communication technologies in the intelligent building system. Results show that this paper introduces the three applications of artificial intelligence systems in intelligent buildings, including expert control systems, artificial neural systems, and intelligent decision systems, as well as the application of communication technology in intelligent buildings, including virtual LAN technology, communication network technology and broadband network technology. Artificial intelligence technology can reflect the current situation of buildings to people in real-time, judge emergencies instead of experts, and make the best choice to prolong the service life and stability of buildings. Communication technology can help users realize remote offices and home offices. The application of these technologies in intelligent buildings may not be mature at this stage, but the development and application potential are still very considerable.

IMPLEMENTASI ACCESS CONTROL LIST DALAM PERANCANGAN VIRTUAL LOCAL AREA NETWORK PADA PT CAKRAMEDIA INDOCYBER

The limited network resources make the company network managers have to act more wisely in the use of these resources, one of which is by limiting the use of resources and prioritizing their use only for the company's main interests. Implementing a Virtual Local Area Network (VLAN) and switch port security can be done to limit user access between networks in the company and to implement access role's, router access list's (ACL's) are applied so that the network only forwards permitted data based on the company's communication needs. The ACL's router used in this study uses the ACL's standard because it is not yet known the specific needs for TCP and UDP data restrictions in the company. The results of this implementation are expected to improve the security and effectiveness of network use at the PT. Chakramedia Indocyber. The method used in this research is to use the observation method and the interview method to get to the problems that exist in the company and analyze the availability and needs of network hardware. As well as using laboratory research to get a suitable configuration solution

Real-Time Temperature Distribution Monitoring in Chinese Solar Greenhouse Using Virtual LAN

The internal air temperature of Chinese solar greenhouse (CSG) has the problem of uneven spatial and temporal distribution. To determine temperature distribution at different locations, we designed a greenhouse temperature real-time monitoring system based on virtual local area network (VLAN) and estimate, including interpolation estimation module, data acquisition, and transmission module. The temperature data were obtained from 24 sensors, and the Ordinary Kriging algorithm estimated the temperature distribution of the whole plane according to the data. The results showed that the real-time temperature distribution monitoring method established was fast and robust. In addition, data validity rate for VLAN technology deployed for data transmission was 2.64% higher than that of cellular network technology. The following results are obtained by interpolation estimation of temperature data using gaussian model. The average relative error (ARE) of estimate, mean absolute error (MAE), root mean square error (RMSE), and determination coefficient (R2) were −0.12 °C, 0.42 °C, 0.56 °C, and 0.9964, respectively. After simple optimization of the number of sensors, the following conclusions are drawn. When the number of sensors were decreased to 12~16, MAE, RMSE, and R2 were 0.40~0.60 °C, 0.60~0.80 °C, and >0.99, respectively. Furthermore, temperature distribution in the greenhouse varied in the east–west and north–south directions and had strong regularity. The calculation speed of estimate interpolation algorithm was 50~150 ms, and greenhouse Temperature Distribution Real-time Monitoring System (TDRMS) realized simultaneous acquisition, processing, and fast estimate.

Data communications network for real-time industrial control systems

The advancements in network technologies and the evolution of the Internet of Things (IoT) have made supporting industrial control systems over probabilistic data networks promising. However, control systems’ communication over the traditional data networks is faced with problems of instability in feedback control and poor quality of performance due to time-varying data propagation delay. This paper presents two approaches that can enable real-time industrial control over non-deterministic computer networks allowing control system designers to take advantage of the existing communication infrastructures. The first approach is based on system-level interaction over two wires network called the collaboration network. The second approach is based on the implementation of the virtual local area network (VLAN). This method allows real-time control of industrial equipment or systems over IP-based networks while other computers are connected. Nodes providing real-time control services have the same PortID on the VLAN switch. This approach minimizes data traffic and reduces time-varying delay in system control over IP networks. The first approach was modeled and simulated using Proteus ISIS software. Two PIC16F877A microcontrollers were used to represent two nodes. CISCO packet tracer was used in the second approach to model and simulate IP-based control system communications over the traditional data network. Results indicate that the use of a two-wire collaborative network approach to a real-time control system is effective but requires an additional network alongside the main data traffic channel. VLAN, therefore, presents a more flexible approach that relies on the same infrastructures.

Effect of VLAN configuration on IEC 61850 sampled values

IEC 61850, the standard for communication in power utility, has solved the interoperability problems between different vendors in substation communication networks (SCNs). However, most studies on SCN that use IEC 61850 were conducted using computer-based simulations or commercial equipment with fixed functions. In this study, an experiment on an SCN was conducted using real equipment such as a network switch, Raspberry Pi, and a mini PC. A cyclic data model was used for the traffic generation of sampled values (SVs) according to IEC 61850. The effect of applying a virtual local area network (VLAN) in the SCN on the transfer time and throughput of the SV frames was measured. In addition, when using IEEE 1588 in the time synchronization process, it was verified that the clock offset remained unaffected irrespective of the use of VLANs or changes in the sampling frequency. The experimental results can serve as guidance for the actual planning and construction process of SCNs.

Issues and Challenges for Network Virtualisation

In recent years, network virtualisation has been of great interest to researchers, being a relatively new and major paradigm in networking. This has been reflected in the IT industry where many virtualisation solutions are being marketed as revolutionary and purchased by enterprises to exploit these promised performances. Adversely, there are certain drawbacks like security, isolation and others that have conceded the network virtualisation. In this study, an investigation of the different state-of-the-art virtualisation technologies, their issues and challenges are addressed and besides, a guideline for a quintessential Network Virtualisation Environment (NVE) is been proposed. A systematic review was effectuated on selectively picked research papers and technical reports. Moreover a comparative study is performed on different Network Virtualisation technologies which include features like security, isolation, stability, convergence, outlay, scalability, robustness, manageability, resource management, programmability, flexibility, heterogeneity, legacy Support, and ease of deployment. The virtualisation technologies comprise Virtual Private Network (VPN), Virtual Local Area Network (VLAN), Virtual Extensible Local Area Network (VXLAN), Software Defined Networking (SDN) and Network Function Virtualisation (NFV). Conclusively the results exhibited the disparity as to the gaps of creating an ideal network virtualisation model which can be circumvented using these as a benchmark.

Novel Record Replacement Algorithm and Architecture for QoS Management over Local Area Networks.

An effective System-on-Chip (SoC) for smart Quality-of-Service (QoS) management over a virtual local area network (LAN) is presented in this study. The SoC is implemented by field programmable gate array (FPGA) for accelerating the delivery quality prediction for a service. The quality prediction is carried out by the general regression neural network (GRNN) algorithm based on a time-varying profile consisting of the past delivery records of the service. A novel record replacement algorithm is presented to update the profile, so that the bandwidth usage of the service can be effectively tracked by GRNN. Experimental results show that the SoC provides self-aware QoS management with low computation costs for applications over virtual LAN.

High-performance reliable network-multicast over a trial deployment

A continuing trend in many scientific disciplines is the growth in the volume of data collected by scientific instruments and the desire to rapidly and efficiently distribute this data to the scientific community. As both the data volume and number of subscribers grows, a reliable network multicast is a promising approach to alleviate the demand for the bandwidth needed to support efficient data distribution to multiple, geographically-distributed, research communities. In prior work, we identified the need for a reliable network multicast: scientists engaged in atmospheric research subscribing to meteorological file-streams. An application called Local Data Manager (LDM) is used to disseminate meteorological data to hundreds of subscribers. This paper presents a high-performance, reliable network multicast solution, Dynamic Reliable File-Stream Multicast Service (DRFSM), and describes a trial deployment comprising eight university campuses connected via Research-and-Education Networks (RENs) and Internet2 and a DRFSM-enabled LDM (LDM7). Using this deployment, we evaluated the DRFSM architecture, which uses network multicast with a reliable transport protocol, and leverages Layer-2 (L2) multipoint Virtual LAN (VLAN/MPLS). A performance monitoring system was developed to collect the real-time performance of LDM7. The measurements showed that our proof-of-concept prototype worked significantly better than the current production LDM (LDM6) in two ways. First, LDM7 distributes data faster than LDM6. With six subscribers and a 100 Mbps bandwidth limit setting, an almost 22-fold improvement in delivery time was observed with LDM7. Second, LDM7 significantly reduces the bandwidth requirement needed to deliver data to subscribers. LDM7 needed 90% less bandwidth than LDM6 to achieve a 20 Mbps average throughput across four subscribers.

Spanning Tree Protocol (STP) Based Computer Network Performance Analysis on BPDU Config Attacks and Take Over Root Bridge Using the Linear Regression Method

Spanning Tree Protocol (STP) is used in manageable switch devices that apply more than one path to the connection between switches. This study aims to assist engineer staff in improving STP network security. Furthermore, the benefit is to improve the STP network security system by using the Spanning Tree Protocol and Virtual Local Area Network (VLAN) trunking mitigation techniques. The results of testing data before STP is attacked, after STP attacked, and anticipatory data. Then a simple linear regression analysis is carried out by the result of that there is not a significant relationship between time and size in the DoS attack, which 48.6% of the time variable is influenced by the size of variable, while the remaining 51.4% by other variables. Root attack is 43.8%-time variable is influenced by size variable, the remaining 56.2% by other variables. Correlation between Karl Pearson DoS and root, there is a significant relationship between time and size, with the DoS correlation coefficient (-0.697) in contrast root (-0.662), and paired sample t-test (paired sample t-test) can be concluded the anticipation which is done by using BPDU guard and root guard mitigation.

Precision timing and communication networking experiments in a real-time power grid hardware-in-the-loop laboratory

The growing wave of digitization in power grids is bringing increased reliance on information and communication technologies (ICT) for the operation of the grid. Such cyber–physical power systems (CPPS) involve the interaction of the physics of the power grid with the performance of other engineered systems, such as communications and time-synchronization. To understand the interplay of such interactions, experimentation is required. However, there are very limited opportunities to perform experiments on actual CPPS systems, due to safety and security concerns. Nevertheless, the demand for more functionalities on cyber components will continue to rise, and thus, other means to understand CPPS behavior for design, implementation and testing are needed. To address this gap, a real-time simulator-based power system laboratory was implemented with the objective of facilitating experiments involving precision timing and communication networking systems which are coupled with power grid models running in real-time. These are integrated in three layers: (a) Precise Timing Layer, (b) Communication/Network Layer, and (c) Electrical Component Layer. This paper reports on detailed experiments performed on the precision timing and communication layers of the laboratory. It shows how to couple the different layers together, and how to conduct experiments to tamper with both the precision timing and communication layers, along with their interactions with the simulated grid. Finally, the paper shows how to validate the Quality of Service (QoS) rules implemented in virtual local area networks (VLANs) in the laboratory environment when using different power system communication protocols.

Image Processing Technology in Remote Monitoring and Intelligent Medical System.

In order to study the application of image processing technology in remote monitoring and intelligent medical systems, the principle and implementation method of a remote intelligent image monitoring system based on virtual local area network is proposed; this method analyzes the key technologies to be considered in the remote realization of image monitoring, adopts advanced digital image compression coding and decoding technology and digital image transmission technology, and applies intelligent image processing and recognition technology to display, adjust, and track images; it overcomes the defects that the general monitoring system requires excessive intervention by monitoring personnel and low intelligence. After verification, the experimental results show that the proposed model can accurately and efficiently segment nonoverlapping cervical cell images, and compared with other existing models, this model has both higher segmentation accuracy and faster calculation speed. The application of multicast is still only in the laboratory or small local area network; with the further development of network technology, its application prospects will be very broad.

A Survey on the Implementation and Management of Secure Virtual Private Networks (VPNs) and Virtual LANs (VLANs) in Static and Mobile Scenarios

Nowadays, the demand for connection between the remote offices of a company, or between research locations, and constantly increasing work mobility (partly due to the current pandemic emergency) have grown hand in hand with the quality and speed of broadband connections. The logical consequence of this scenario is the increasingly widespread use of Virtual Private Network (VPN) connections. They allow one to securely connect the two ends of a connection via a dedicated network, typically using the Internet and reducing the costs of Content Delivery Network (CDN) lines (dedicated connections). At the same time, Virtual Local Area Networks (VLANs) are able to decrease the impact of some scalability issues of large networks. Given the background above, this paper is focused on overviewing and surveying the main progresses related to VPNs and VLANs in wireless networks, by collecting the most important contributions in this area and describing how they can be implemented. We state that security issues in VLANs can be effectively mitigated through the combination of good network-management practices, effective network design and the application of advanced security products. However, obviously, the implementation of VPNs and VLANs poses specific issues regarding information and network security; thus some good solutions are also surveyed.

Performance evaluation of campus network involving VLAN and broadband multimedia wireless networks using OPNET modeler

Modern technology is essential for all healthy, economic, and educational sectors. Using modern technology involves high-performance networks in terms of quality of service (QoS) parameters such as delay, throughput, bandwidth, and security. A campus network involves wire and the wireless environment with and without virtual local area network (VLAN) technology has been simulated using optimized network engineering tools (OPNET). The simulation model includes four scenarios that involve heavy-loaded File transfer protocol (FTP) and web browsing applications with two logical groups of users. The simulation results show that the VLAN overcome LAN networks in terms of bandwidth and security. This has been done by reducing the throughput in both sending and receiving levels to the confidential servers. The VLAN has also reduced the broadcast domain which results in a high-power efficiency. Moreover, the VLAN network technology has been proved to have lower values of delay in transferring files and packets than LAN network technology. In addition, VLAN technology generally has been decreased values of throughput regardless of the way of connection between servers and workstations. This, in turn, allows taking advantage of wireless connection features in terms of flexibility of installation and speed of configuration.

A Great Approach for Medium Size Hospital Network Infrastructure Architecture

Abstract: To get first-hand experience for setting up a network infrastructure in a medium size hospital to manage the patient’s services, check-ups, follow-up plans from different parts of the hospital primes and store the data into the secured and safe manner in the database and use the data whenever required from the management team for their references. The network architecture based on the concept of the Three- layer network architecture combination of Mesh topology & Bus topology taking into the consideration of the primary data security, remote access to the network, size of the hospital organization, cost-effective, user-friendly and most importantly scalability required in the network architecture for future changes based on the size of the database, utilization of applications remotely, and for security of the data, changing technology etc. The goal of any network architecture is to protect the DATA from any attacks both internally and externally. For internal DATA security it is protected through various user permissions in different layers in the network for the end users. For Outside threat VPN tunnel, Policies, traffic filtering configured at the firewall level. Keywords: HIS-Hospital Information System, VPN- virtual private network tunnel, VLAN- Virtual LAN, HL7- Health Level Seven International, L3- Layer 3, ISP- Internet service provider

Cognitive load considerations for Augmented Reality in network security training

This paper presents an Augmented Reality (AR)-based network cabling tutoring system that trains users how to interconnect cables within a Virtual Local Area Network (VLAN) on a physical switching rack. AR arrows combined with text-based instruction and a checklist provided assistance during practical learning. When learners made a mistake, an Intelligent Tutoring System (ITS) identified the source of the mistake and provided real-time feedback using text, AR and text-to-speech mechanisms. The design was motivated by the human-cognitive architecture and its five evolutionary principles (proposed by Sweller and Sweller (2006)). Users performed four consecutive network cabling training tasks with assistance from our ITS. We found that users made fewer errors when the AR cues, text-based instruction and checklist solutions were replaced with summarised information and then removed completely in the final task compared to those who used an identical system with fixed instruction. Cognitive Load Theory (CLT) explains our results by suggesting that the instructional mechanisms become redundant as knowledge increases. Implications of the study are discussed as well as how AR can help facilitate knowledge transfer in the network cabling domain.

SDN Based Management Platform for Intranet Services

Telecom operators experience difficulties in applications such as virtual local area network (VLAN) management, bandwidth management and access management while providing intranet services in traditional networks. In this study, open network operating system (ONOS) based software defined network (SDN) platform is developed for intranet services in order to address these problems. The developed platform has been integrated onto an existing network and a new topology has been created. In this proposed topology, intranet network elements are connected to the new generation SDN switches instead of the legacy switches. The proposed solution has been tested on a live network. According to test results where the proposed SDN platform is compared with the traditional intranet network in a live network scenario under varying traffic load, the SDN based platform achieved very successful results in terms of latency, jitter, packet loss and flow setup times. Overall, the proposed SDN platform provides a good alternative to traditional solutions in large scale intranet networks, minimizing the workload spent by the operators in controlling the network, while achieving cost savings and eliminating vendor dependency.

Megalos: A Scalable Architecture for the Virtualization of Large Network Scenarios

We introduce an open-source, scalable, and distributed architecture, called Megalos, that supports the implementation of virtual network scenarios consisting of virtual devices (VDs) where each VD may have several Layer 2 interfaces assigned to virtual LANs. We rely on Docker containers to realize vendor-independent VDs and we leverage Kubernetes for the management of the nodes of a distributed cluster. Our architecture does not require platform-specific configurations and supports a seamless interconnection between the virtual environment and the physical one. Also, it guarantees the segregation of each virtual LAN traffic from the traffic of other LANs, from the cluster traffic, and from Internet traffic. Further, a packet is only sent to the cluster node containing the recipient VD. We produce several example applications where we emulate large network scenarios, with thousands of VDs and LANs. Finally, we experimentally show the scalability potential of Megalos by measuring the overhead of the distributed environment and of its signaling protocols.

Issues and Challenges for Network Virtualisation

In recent years, network virtualisation has been of great interest to researchers, being a relatively new and major paradigm in networking. This has been reflected in the IT industry where many virtualisation solutions are being marketed as revolutionary and purchased by enterprises to exploit these promised performances. Adversely, there are certain drawbacks like security, isolation and others that have conceded the network virtualisation. In this study, an investigation of the different state-of-the-art virtualisation technologies, their issues and challenges are addressed and besides, a guideline for a quintessential Network Virtualisation Environment (NVE) is been proposed. A systematic review was effectuated on selectively picked research papers and technical reports. Moreover a comparative study is performed on different Network Virtualisation technologies which include features like security, isolation, stability, convergence, outlay, scalability, robustness, manageability, resource management, programmability, flexibility, heterogeneity, legacy Support, and ease of deployment. The virtualisation technologies comprise Virtual Private Network (VPN), Virtual Local Area Network (VLAN), Virtual Extensible Local Area Network (VXLAN), Software Defined Networking (SDN) and Network Function Virtualisation (NFV). Conclusively the results exhibited the disparity as to the gaps of creating an ideal network virtualisation model which can be circumvented using these as a benchmark.

Design of Dual Homing Backup Link on Routing Border Gateway Protocol With Method Hot-Swap Routing Protocol

The importance of the role of the network at this time makes companies and organizations look for ways to keep data flows running without downtime. Application of link backup is one way to overcome this. The need for the use of backup links at this time is expected to ensure the smooth running of the company is running its business. In this study, a design that will use BGP routing as well as using the methods HSRP and VLAN (Virtual Local Area Network) on the switch as supporters. The results obtained from the tests that have been carried out have resulted in the application of a backup link using BGP routing with the method HSRP can provide network availability of almost 0 percent in overcoming interference.

Cyber Security for Multi-Station Integrated Smart Energy Stations: Architecture and Solutions

Multi-station integration is motivated by the requirements of distributed energies interconnection and improvements in the efficiency of energy systems. Due to the diversity of communication services and the complexity of data exchanges between in-of-station and out-of-station, multi-station integrated systems have high security requirements. However, issues related to cyber security for multi-station integrated systems are seldom explored. Hence, this paper designs the secondary system architecture and proposes cyber security protection solutions for smart energy stations (SESt) that integrate the substation, photovoltaic station, energy storage station, electric vehicle charging station, and data center station. Firstly, the composition of SESt and functions of each substation are presented, a layered architecture of SESt is designed, and data exchanges of SESt are analyzed. Then, the cyber security threats and requirements of SESt are illustrated. Moreover, the cyber security protection principle and a cyber security protection system for SESt are proposed. On this basis, a security zoning and isolation scheme for SESt is designed. Finally, a traffic isolation scheme based on virtual local area networks (VLANs), a real-time guarantee scheme for communications based on service priority, and an enhancing cyber security scheme based on improved IEC 62351 are proposed for SESt.