This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

If you need help, please click here:

Huawei Secures Insurance Co. Customer Data

2013/12/12 17:45:00


Founded in December 2006, Ancheng Insurance, headquartered in Chongqing, southwest China, is a large company, with 113 branches across the country. It has made significant investments in building out the company’s communications infrastructure in order to provide high-quality customer services. Ancheng continually ranks among the best insurance companies in handling automobile claims.

Ancheng Insurance has maintained its fast growth. However, its original production center infrastructure could not keep pace with the bandwidth required to handle the massive amount of data brought in by new business.


A major problem was the legacy Ethernet technologies. Network resources could not be virtualized or automatically configured, leading to such problems as inefficient use of resources, maintenance and management difficulties, and low flexibility and scalability.

What’s more, intranet security was weak, and there were many security risks, especially when the company’s employees accessed the Internet. Network devices in the Internet access zone and the third-party organization access zone (banks, industry platform providers, and supervisory organizations) were incomplete and could not defend against viruses.

Core devices on the company’s original production center network provided only single-gigabit performance, so access to the company’s systems and Web pages was slow. Some parts of the original links had Single Points of Failure (SPoFs) that easily brought down the network.

To solve these problems, Ancheng planned to build a new production center infrastructure network to serve the company headquarters as well as the company’s core production and office systems. The new infrastructure network needed to implement 24/7 continuous, stable operations to ensure security for all core production data.


Huawei systematically evaluated Ancheng’s live network, then formulated a suite of solutions to develop data center services over the next 5 to 10 years. Huawei won the bid for the production center network upgrade and reconstruction project.

Huawei planned modular design divided the production center network into specific zones: Wireless Access Network (WAN) access zone, third-party organization access zone, public network access zone, core switching control zone, database service zone, application service zone, and Web service zone. This enabled Ancheng Insurance’s production system to transmit multiple services and applications. The modular design also will accommodate future network development.

The flattened two-layer (core and access) network architecture included a core layer featuring Huawei’s industry-leading CE12808 data center switch. The access layer employed the energy-saving, full gigabit S5700 Ethernet switch for more-efficient data transmission.

CE12808 features:

  • Forwarding capacity of 2 Tbit/s per slot, four times the industry average
  • 24 x 40 GE or 96 x 10 GE interface cards
  • Switching capacity of 48 Tbit/s, three times the industry average, can be smoothly expanded to 100 Tbit/s, satisfying the requirement for a stable networking platform for the next five to ten years
  • Dynamic Clos architecture implements large-scale, non-blocking switching in data centers

To solve Ancheng Insurance’s service interruption problem due to SPoFs on the network, Huawei configured redundant devices. The main components of each ensure high network reliability. For example, the CE12808 uses industry-leading Cluster Switch System (CSS) technology, which virtualizes a maximum of two physical switches into one logical switch to better facilitate network management and improve reliability. Network devices in each zone are cross-connected to the core switch in the data center.

To help Ancheng Insurance enhance its intranet security, Huawei created a global security design for the data center in which the core switching control zone logically isolates database, Web, and application services:

  • The CE12808 uses Virtual System (VS) technology to provide a virtualization capability of 1:8 so that one switch can be virtualized into a maximum of eight logical switches
  • One USG5560 core firewall can be virtualized into a maximum of 100 virtual firewalls The public network access zone is deployed with high-performance Unified Threat Management (UTM) products (USG5150 series) and SSL VPN (SVN) products (SVN2260 series)
  • The third-party access zone uses high-performance UTM products (USG5150 series), which also protect the production center system from virus attacks


  • Network security and scalability have significantly increased
  • The new network is unified, open, and scalable
  • All devices in the new production center network use innovative energy-saving technologies, substantially reducing power consumption
  • Huawei’s core switching control zone uses a full array of core device virtualization technologies to ensure security and confidentiality among service systems
  • UTM and SVN products protect the production center system from malware attacks and ensure access security for mobile office employees

Huawei provided the infrastructure design and products to ensure improved performance. As a result, Ancheng Insurance can focus on developing new customer services. 

0 readers

(0 scores)

Like the story? Give your score.


Write your comment here.


    More comments

      You have scored successfully.

      You have submitted successfully.

      Evaluation failed.

      Submission failed.

      Please write your comment first.

      Share link to: