Beijing Subway and the 2008 Beijing Olympics With the continuous increase in urban population, the development of rapid rail transit is a consensus reached by many countries around the world. Subways/light rail, with their outstanding advantages of safety, comfort, convenience, and speed, have become the best solution for large cities to improve their transportation structure, build a three-dimensional transportation network, solve traffic congestion problems, and improve the urban environment. As a world-class megacity, Beijing's subway system plays a crucial role in urban transportation, currently carrying over 1.5 million passengers daily. Beijing's existing subway lines include Line 1, Line 2, Line 13, and the Batong Line, with a total operating length of 114 kilometers and 70 operating stations. With the 2008 Beijing Olympics approaching, rail transit, due to its lack of exhaust fumes and pollution, has become an important embodiment of Beijing's "Humanistic Olympics, Green Olympics, and Technological Olympics." In cities around the world that have hosted the Olympics, the main venues and stadiums are all connected by subways. Seoul, for example, built its first subway line for the 1988 Olympics. As a crucial component of the city's infrastructure for the Olympic Games, Beijing will commence construction in 2006 on three subway lines: Line 10, the Olympic Branch Line, and Line 5, forming a north-south underground transportation corridor. Ensuring absolute reliability, H3C safeguards the subway traffic control system. Due to the high speeds of subway operations, safety requirements are extremely high. The TCC system, serving as the subway's rail transit control center, cannot afford any errors or interruptions. The critical role of the TCC dictates that its bearer network must provide 24/7 service with sufficient robustness. The system design incorporates redundancy, fault tolerance, and self-recovery technologies, while fully considering system performance requirements. Simultaneously, the maintenance and operation of the TCC bearer network should be simple, convenient, and easy to use, with a user-friendly interface. This minimizes unnecessary troubles caused by the system's high complexity during operation, enabling maintenance personnel to quickly locate and resolve problems in case of unexpected events. In addition to connecting existing subway lines, the Beijing Subway TCC system will also be subject to unified dispatching for all newly added lines in the future. Simultaneously, the TCC network will connect with external systems such as the Beijing Municipal Government's e-government network, the Beijing Smart Card system, the ACC system, and the business information reporting system. To ensure system reliability, the Beijing Subway TCC system has established remote, mutually redundant main control centers in Xizhimen and Xiaoying. The network adopts a dual-core design, logically forming a dual-plane structure. Under normal circumstances, data flows through the primary plane; when the primary plane equipment fails, data flows through the backup plane. Real-time hot-switching between the two planes is possible. The core equipment S6506R selected for the Xizhimen and Xiaoying control centers is equipped with redundant engines, redundant power supplies, and other key modules. To ensure network security for the TCC system, H3C's SecPath 1000F firewall is also installed when the TCC network interconnects with external systems such as government networks and smart cards. SecPath, based on H3C's proprietary Commware software platform and using a dedicated IP forwarding hardware platform, supports multiple functions including external attack prevention, internal network security, traffic monitoring, email filtering, webpage filtering, and application layer filtering, featuring high security and reliability. "Making it more convenient for passengers to enter and exit stations," H3C undertook the construction of the AFC systems for Metro Lines 10 and 4. To improve metro operational efficiency and enable passengers to quickly enter and exit metro stations, the sophistication of the Automatic Fare Collection (AFC) system has become an important indicator of the level of informatization in rail transit. Hong Kong's Octopus AFC system, in addition to initially covering public transportation such as buses, ferries, light rail, and the metro, has now expanded to small-amount transactions in places such as parking lots, swimming pools, Maxim's fast food restaurants, and 7-Eleven convenience stores, with a cumulative issuance of over 7.2 million cards and more than 5 million transactions per day, amounting to over HK$40 million. Guangzhou Metro and Shanghai Metro have successively launched AFC (Automatic Fare Collection) systems, enabling the fare collection and ticket checking processes to be truly digitized and automated. Beijing Rail Transit's AFC system adopts a three-level network and four-layer architecture. The first layer, the ACC (Account Control Center), is the clearing and management center for the networked fare collection system. The second layer, the LC (Local Line Control Center), is the control and management center for its respective lines. The third layer, the SC (Station Management Center), manages and monitors station terminal equipment. The fourth layer, the station terminal equipment, directly serves passengers, executing system commands, completing various transactions, and generating various transaction data. AFC is a key system for metro fare calculation, and the AFC bearer network is the foundational platform for the entire system. The performance and reliability requirements of the bearer network are extremely high, needing to support daily peak hour passenger flow and full-day passenger flow, and meet the AFC system's 99.99% reliability design specifications. The AFC (Automatic Fare Collection) systems of Beijing Metro Lines 10 and 4 are based on a highly reliable ring-based MSTP transmission network. Redundant dual-core S6506R switches are deployed at the line center, while each station is equipped with an S39 switch providing dual uplinks to the core, constructing a highly reliable dual-star topology. To facilitate passenger transfers between multiple lines with a single ticket purchase, the AFC line centers of Lines 10 and 4 are also equipped with an H3C AR4640 router connected to the Beijing Metro ACC (Access Control System). The ACC enables settlement between this line and other lines in the rail transit network, as well as the Beijing Municipal Transportation Card. To ensure network security for the AFC system, two Secpath 500F firewalls and a SecEngine D200 IDS (Intrusion Detection System) are configured after the AFC exit router. Through the联动 (interconnection/coordination) function of the IDS with the firewalls, routers, and switches, proactive defense against network attacks can be achieved. "Turning the train carriages into information and entertainment centers," H3C is responsible for building the PIS system for Beijing Metro Line 10. During normal train operation, the PIS system uses LCD screens inside the carriages to display real-time dynamic information such as passenger instructions, service hours, train arrival and departure times, train timetables, management announcements, government announcements, travel guides, stock information, media news, live sports broadcasts, and advertisements. In case of emergencies such as fires, traffic jams, or terrorist attacks, the PIS system can also provide dynamic emergency evacuation prompts. Beijing Metro Line 10 Phase I (including the Olympic branch line) is a strategically important Olympic project. It is a semi-circular rail transit line running from northwest to southeast in Beijing's rail transit network, with a total length of 30.462 kilometers and 26 stations, connecting with eight other lines. It will directly serve the Olympics and the public; its importance and urgency are self-evident. The Line 10 PIS system, as an information system directly serving Olympic passengers, has become a representative project of the Beijing Olympics, and its operational stability and reliability will be directly demonstrated to the public. The PIS system's bearer network comprises three parts: a wired network, a wireless network, and an onboard local area network. The wired network provides the data channel from the control center to each station and wireless access points along the line, serving as the foundational platform for the entire PIS system and playing a decisive role in its reliability. Based on the characteristics of Beijing Metro Line 10, the line's wired network adopts a highly reliable three-core mesh topology: The wired network of Metro Line 10 consists of a control center, a backup center, and stations (depot and parking lot). The control center, located in Xiaoying, is the core of the entire PIS system. It is equipped with two H3C S8512 10 Gigabit core switches, interconnected with S56 switches in each station via gigabit fiber optic cables, meeting the efficient and secure transmission requirements of the massive multimedia information in the PIS system. To ensure network security, in addition to the SecPath firewall and SecEngine IDS, an H3C IPS 100E IPS system from H3C has been added to the Metro Line 10 PIS system as an antivirus gateway. H3C IPS can perform in-depth analysis and detection of network traffic from Layer 2 to Layer 7, effectively detecting and blocking viruses, attacks, and abuses hidden in massive amounts of network traffic in real time. To ensure the high reliability of the entire PIS system, the three S85 10 Gigabit switches in the Xiaoying Control Center and Wanliu Backup Center run the VRRP protocol. One core switch in the main control center is set to Active and is in working state. The other core switch in the main control center and the core switch in the backup center are set to "first backup state" and "second backup state," respectively. When the main core switch fails, the "first backup" in the main control center takes over the task first. When both core switches in the main control center fail, or when the main control center experiences a catastrophic accident, the "second backup" in the backup center will take over the task of the entire system. Since this switchover is completely automatic and very fast, without changing IP addresses and MAC addresses, it is transparent to the end-user system and will not affect the normal operation of the business system. Serving the Beijing Subway and Contributing to the Olympics Besides providing highly reliable network products and solutions to meet the needs of the Beijing Subway, H3C's customized and localized service system is a key reason why Beijing Subway users choose H3C. As a local manufacturer, H3C possesses unparalleled advantages in service support and business response. H3C's after-sales service headquarters is located in Beijing, ensuring the most timely and effective after-sales service for Beijing Subway users. H3C will contribute to the Beijing Subway and the Beijing Olympics through its concrete actions!