Campus Area Network

Modern switch architectures
for your campus network.

What is a Campus Area Network?

A Campus Area Network, or CAN for short, is a type of network that spans a large, yet confined geographical area. This typically includes organizational or educational campuses with multiple buildings, such as those found in companies, industrial complexes, universities, or research facilities. A CAN connects several local area networks (LANs) through high-speed backbone connections, making it smaller in scope than a metropolitan area network (MAN). The connections are typically established using Ethernet or, more commonly, fiber optics to ensure high speeds and reliability for users.

For efficient and secure data management in campus networks, the use of a hierarchical switch network topology based on the three-tier design is critical. In this structure, redundantly connected switches ideally perform distinct roles and functions within the network architecture.

For whom is campus networking interesting?

Application examples for a Campus Area Network (CAN)

Use case 1: companies with multiple locations

For companies with several buildings on a campus, fail-safe networking is crucial. A scalable CAN network with redundancies enables seamless, secure and, above all, faster access to shared resources via the Internet by linking multiple LANs. New buildings or departments can be easily integrated into the network.

Use case 2: education and research centers

A campus network enables the low-latency exchange of large volumes of data between different school buildings, institutes, or laboratories. High-throughput LAN networks ensure stable connections and optimize data flow, even during peak usage times. The shared use of IT resources, such as servers and databases, reduces operating costs.

Use case 3: public institutions / administrations

Cities and municipalities use campus area networks to connect administrative buildings and public services in a resource-efficient manner. A stable and scalable network architecture supporting real-time communication is essential – especially for initiatives involving smart city technologies, traffic management, or environmental monitoring.

Features of a campus area network

An area network is a general term for networks that cover geographical areas and connect devices within these areas. The term is often used in combination with a specific prefix that indicates the geographical scope of the network, such as local (LAN), campus (CAN), and metropolitan area networks (MAN). You can find out which network type is suitable for your application in the following overview:

* resulting from geographical distances or split ratio for point-to-multi-point distribution
 

Local area network (LAN)

Campus area network (CAN)

Metropolitan area network (MAN)

Network provider

Private

Private

Private or public

Geographical area *

Small, buildings up to a few hundred meters

Moderate, campus up to a few kilometers

Large, city up to 80 kilometers

Speeds / data rates

High

Moderate

Low

Delays (latencies)

Low

Relatively low

Moderate

Costs

Relatively low

Moderate, depending on the size of the campus

High, due to the large geographical coverage

Network management

Simple, partially managed locally

Centralized management required

Complex, often managed by specialized IT departments or service providers

Background: What does a three-tier switch architecture look like?

Hierarchical switch networks are used in campus networks to enable better scalability and increased network performance. By clearly separating tasks and structuring them into different layers (core, aggregation, access), data traffic is distributed more efficiently and the causes of errors can be identified more quickly. While two layers are often sufficient in small networks (“collapsed backbone”), three-layer structures have proven their worth in campus networks:

1. Core layer

The top layer is the backbone of the network. The core switches used here are designed for high speeds and reliability in order to control the data flow with as little latency as possible and ensure redundant connections. Core switches are often located in data centers connected to the campus.

2. Aggregation or distribution layer

Aggregation switches connect the core layer with the access layer and bundle (aggregate) the data traffic. To relieve routers and firewalls, they also take on routing tasks, including the predefinition of network routes, and implement security and management guidelines. Availability is increased through stacking (redundant interconnection).

3. Access layer

End devices, such as access points, PCs, IP telephones or IoT sensors, are connected to the network via the access layer. Switches in this layer are the first connection to the network and require high port density for all clients as well as high reliability and security mechanisms.

Advantages of the three-tier design at a glance

Icon: Clock with the numbers "24 / 7" to represent round-the-clock availability
High reliability

Redundant switches, particularly at core and aggregation layer, ensure fast switchover in the event of failures.

Icon: Two rectangles with an arrow indicating a magnification
Scalability

No matter whether your campus grows or requirements change, a three-tier architecture can be easily adapted and expanded.

Icon: Circle with speed indicator and arrows
High performance

Optimized data flows and load distribution ensure that your network remains efficient without bottlenecks, even with high data traffic.

Icon: Desktop window with gear wheel
Simplified management

Management that is independent of the specific switch operating systems provides control and facilitates tasks, such as administration, monitoring, and maintenance, ideally from a central location.

Icon: Safety shield with safety lock
Security functions

By clearly separating and managing the various network layers, security policies can be effectively enforced and implemented more easily.

How do you design a campus network?

A campus architecture is based on core switches, aggregation / distribution switches, and access switches. This infrastructure forms the basis for the seamless connection of Wi-Fi 6 and Wi-Fi 7 end devices. In addition, connected SD-WAN gateways and routers (DSL or fiber-optic) and / or a dedicated firewall ensure a reliable high-speed WAN Internet connection and maximum IT security for the entire network.

Setting up a campus area network in practice

By connecting to a data center using core switches linked via VPC, a professional and optimally functioning campus network can be established. Ideally, the core switches should be redundantly connected to the aggregation switches via fiber-optics to ensure stable communication across buildings, while maintaining network reliability and bandwidth performance. Aggregation switches can also be connected to each other through VPC for increased reliability, or alternatively, stacking technology can be used.

The backbone cabling within a building, connecting to the access switches, is crucial for the organization and efficiency of network connections.

Equally important is the copper cabling between the access switch and access point. For existing installations, this should at least correspond to category Cat 6a in order to guarantee 10G performance over the standardized 100 m distance for Wi-Fi 7, for example. For new installations, it is advisable to consider Cat 7 cabling. The advantage here is the improved shielding of the cable.

Redundancies in the network for reliability

With Virtual Port Channel (VPC) virtualization technology, also known as MC-LAG (Multi-chassis link aggregation group), two interconnected switches form a virtual unit. However, both switches remain independently manageable devices that can be restarted or updated individually. In this way, 100% network uptime (also known as zero downtime) can be achieved via in-service software upgrades (ISSU).

A cost-efficient alternative to VPC is stacking at the aggregation and access layer, which groups a significantly higher number of switches that physically behave like one device. Thanks to fast detection and link recovery technologies, stack connections are transferred to other switches in the event of a fault using “hitless failover”, i.e. without data loss and for almost 100% uptime of the network with minimal interruption. This significantly minimizes the risk of a total failure and ensures business continuity. Only ISSU is not supported in the stack network, meaning that network operation must be briefly interrupted for the duration of a firmware update. Stacking is therefore ideal wherever maintenance windows are possible.

Discover: Switching solutions series

From switching basics and network design suggestions to specific configuration instructions, this series of topics offers bundled expertise on the efficient use of LANCOM access, aggregation / distribution, and core switches. Whether you are a beginner or an expert, you will find detailed explanations tailored to your personal level of knowledge.

Start now for free and build up your switch expertise!

Icon: 3 lines with the lettering “100% LANCOM” above and below them

Which LANCOM access switch is right for your infrastructure?

Use the free matchmaker!

Choosing the right switch can be challenging, especially at the access level, given the wide range of options available. To help you seamlessly integrate LANCOM access switches into your campus infrastructure, you can select from various models based on your specific needs – whether that is network availability, functionality, speed, or port density.

The LANCOM access switch matchmaker is designed to help you quickly and easily find the ideal switch by answering just a few simple questions. Try it out and discover the right access switch for your use case!

Use the access switch matchmaker

Why a scalable switch architecture is worth it for you

5 reasons for core & aggregation switches from LANCOM

LANCOM aggregation / distribution switches and the LANCOM core switch play a central role in large and complex networks by establishing a stable connection between the various network segments. But what specific functions and advantages do the models offer?

Easy changeover
  • Low TCO due to industry-standard ports without proprietary interfaces and industry-standard CLI
  • Low operating costs with high availability due  to centralized switch rollout and 24/7 network management, monitoring, and altering via LANCOM Management Cloud
100% uptime of the network
  • Redundancy and load distribution through seamless takeover in the event of device failure thanks to Virtual Port Channel (VPC / MC-LAG)
  • This enables uninterrupted in-service software upgrades (ISSU)
  • Alternatively, if a maintenance window is possible: use of stacking
  • Maximum reliability thanks to redundant, hot-swappable power supply units and fans
  • Redundancy up to access point level with dual PoE
Flexible hardware design
  • High operational flexibility due to selectable ventilation concept with front-to-back (F2B) or back-to-front (B2F) airflow
  • Integrated function and memory extensions for the use of third-party software such as monitoring applications
  • Easy installation in server racks with integrated rack rails
High investment protection
  • Limited Lifetime Warranty for up to 10 years free replacement service
  • Proprietary LCOS SX switch operating system family with regular, free feature and security updates
  • Fast support through bilingual in-house support and free accessible documentation as well as specialized training on request
  • No hidden license costs and no time-consuming and expensive retrofitting of modules
Everything from a single source
  • Comprehensive switching portfolio with access, aggregation / distribution, and core switches
  • Single sourcing via complete network structures with firewalls, routers, switches, and access points – centrally managed via a management interface (LANCOM Management Cloud)
  • Digital sovereignty with true GDPR compliance, no backdoors, and "Engineered in Germany"

Responsible site connectivity: NIS2 and Digital Sovereignty

Digital networking is enriching companies worldwide and constantly transforming the workplace. However, network and information security, as well as Digital Sovereignty, must not be overlooked. That is why cybersecurity is now more precisely defined and regulated by the EU NIS2 Directive. Its provisions also support Digital Sovereignty. Find out what this means and whether the new requirements impact your company.

Learn more about NIS2 and Digital Sovereignty with LANCOM

More about


We answer your questions

Your direct line to us

Most questions can be resolved best in direct contact.

We look forward to answering your questions and requests by phone or via the contact form.

Inside Sales International Team
+49 (0)2405 49936 122