Deliverable D3.2 (DN3.2.1) Annual Report on Campus Best Practice

Transcription

1 Contractual Date: Actual Date: Grant Agreement No.: Activity: NA3 Task Item: Task 2 Nature of Deliverable: R (Report) Dissemination Level: PU (Public) Lead Partner: CSC Authors: Jari Miettinen (CSC/Funet), Tom Myren (UNINETT), Juha Hopia (CSC/Funet), Jiri Navratil (CESNET), Jovana Palibrk (AMRES), Vanessa Pierne (RENATER), Vangel Ajanovski (MARnet), Radoslav Yoshinov (BREN), Carlos Friacas (FCT-FCCN), Vladimir Gazivoda (MREN), Michal Przybylski (CEENET) DANTE on behalf of the GÉANT project. The research leading to these results has received funding from the European Community s Seventh Framework Programme (FP ) under Grant Agreement No (GN3plus). Abstract Campus Best Practice is the name of one of the Tasks (Task 2) in Networking Activity 3, Status and Trends (NA3), of the GN3plus project. The overall objective of the Task is to address the key challenges for European campus networks, organise working groups and provide an evolving and to-the-point set of best practice documents for the community. The current GN3plus deliverable reports on the work carried out in the Task during the first year of the GN3plus project (April 2013 March 2014) and the results of that work.

2 Table of Contents Executive Summary 1 1 Introduction 2 2 Approach Technical focus areas Writing process for best practice documents Translation into English and publication Task management 6 3 Results Best Practice Documents Dissemination Presentations at Conferences National workshops European-level workshops Summary of NRENs CBP activities AMRES BREN CEENET CESNET CSC (Funet) FCT-FCCN MARnet MREN RENATER UNINETT 20 4 Conclusions 21 Appendix A Working Groups 22 A.1 AMRES 22 A.2 BREN 22 A.3 CESNET 23 A.4 CSC (Funet) 23 ii

3 A.5 FCT FCCN 23 A.6 MARnet 24 A.7 MREN 24 A.8 RENATER 24 A.9 UNINETT 25 Appendix B Abstracts of GN3plus Year 1 Best Practice Documents 26 B.1 NAT Using Source Routing through BGP Gateways (CESNET) 26 B.2 Deployment of Services on IPv6 (RENATER) 26 B.3 Improving DNS Reliability and Security (RENATER) 26 B.4 Reference Data and Large-Scale Network Management Automation (RENATER) 27 B.5 Virtual Switching (RENATER) 27 B.6 Virtualisation of Network Devices (CESNET) 27 B.7 Monitoring and Access Control for Campus Computer Labs (MARnet) 27 B.8 Implementation and Monitoring of eduroam Infrastructure using FortiGate Wireless Controller (MARnet) 28 B.9 Guidelines for Deploying DNSSEC (CSC/Funet) 28 Appendix C Workshops Organised at the National Level 29 Appendix D European-Level Workshops and Training Events 31 D.1 Campus Best Practices in the GN3plus Symposium D.2 CEENGINE NRENs Technology Workshop 4-7 December 2013, Tbilisi 32 References 33 Glossary 34 Table of Figures Figure 2.1: Writing process for best practice documents (BPDs) 5 Figure 2.2: NA3 T2 kick-off workshop 6 Figure 3.1: CBP method presentation at the CEENGINE training event in Tbilisi, Georgia 12 Figure 3.2: AMRES Administrator Conference in December iii

4 Table of Tables Table 2.1: List of focus areas applicable in GN3plus Y1 3 Table 3.1: Overview of documents published in English in each area in GN3plus Y1 8 Table 3.2: Best practice documents published in GN3plus Y1 9 Table 3.3: Presentations at conferences in GN3plus Y1 10 Table 3.4: Campus Best Practice European-level workshops and training events in GN3plus Y1 11 Table A.1: Serbian working groups 22 Table A.2: Bulgarian working groups 22 Table A.3: Czech working groups 23 Table A.4: Finnish working groups 23 Table A.5: Portuguese working groups 23 Table A.6: Macedonian working groups 24 Table A.7: Montenegrin working groups 24 Table A.8: French working groups 25 Table A.9: Norwegian working groups 25 Table C.1: Workshops organised at the national level 30 Table D.1: CBP workshop agenda at the GN3plus Symposium Table D.2: CEENGINE NRENs Technology Workshop agenda 4-7 December 2013, Tbilisi 32 iv

5 Executive Summary Campus Best Practice is the name of one of the Tasks (T2) of Networking Activity 3, Status and Trends (NA3), of the GN3plus project. Its predecessor, the GN3 Campus Best Practices task (NA3T4), led by UNINETT, successfully established CBP teams in the Czech, Finnish and Serbian NRENs. The French NREN, RENATER, joined the task during the last project year, GN3 Y4. With the support of UNINETT, during GN3 the five NRENs were able to organise numerous workshops, disseminate their work at several conferences, and write 58 best practice documents (BPDs), just to name their major achievements. Four new NRENs have joined the CBP task for GN3plus. These are BREN (Bulgaria), FCT-FCCN (Portugal), MARNET (F.Y.R of Macedonia) and MREN (Montenegro). In addition, CEENET (Central and East European Networking Association) and TERENA (Trans-European Research and Networking Association) have joined the task in a supporting role. The mandate of the task was widened to include training events as a new activity. The BPD overall focus areas remained the same. During the first project year task management and working methods were established for the new CBP groups that were founded both in the NRENs that were already involved in CBP activities in GN3, and in NRENs newly joining the activity during GN3plus. NA3 T2 was able to deliver nine new BPDs in Year 1 of GN3plus. Several national workshops were held in the member countries, and dissemination continued at international events. The group arranged a CBP workshop at the GÉANT Symposium 2013 and held its first training event at the CEENGINE NRENs technology Workshop in Tbilisi. 1

6 1 Introduction Campus Best Practice is the name of one of the Tasks (T2) of Networking Activity 3, Status and Trends (NA3), of the GN3plus project. The task is based on the previous work carried out for the GN3 project [DN3.4.1,1, DN3.4.1,2, DN3.4.1,3, DN3.4.1,4]. The origins of the Campus Best Practices lie in the UNINETT GigaCampus project [GIGACAMPUS]. The importance of the development of campus networks and services was also raised in the EARNEST report [CampusIssues]. The experiences of the GigaCampus project and the EARNEST report recommendations greatly influenced the establishment of the Campus Best Practices task as part of the GÉANT project. Further reasoning for applying the CBP method in an NREN can be found in [AMRES-CBP]. This deliverable reports on NA3 T2 for the first year of the GN3plus project. The objectives of NA3 T2 are to address the current challenges for campus networks by; Writing best practice documents in collaboration groups. Organising workshops and training events. Disseminating best practices and best practice documents. The work of the task aims to promote cooperation between peer groups, encourage the development of expertise within the NRENs and the community in general, and support the deployment of best practices in the campuses. Five NRENs had already participated in the task as part of the GN3 project, these were UNINETT (Norway), CSC/Funet (Finland), CESNET (Czech Republic), AMRES (Serbia), and RENATER (France), which had joined GN3 in Year 4. At the start of the GN3plus project the number of participating NRENs had increased to nine, with the addition of BREN (Bulgaria), FCT-FCCN (Portugal), MARnet (F.Y.R. of Macedonia, hereafter Macedonia), and MREN (Montenegro). In addition, TERENA and CEENET joined the task in a supporting role. The assignment of the task was also broadened to include training events as a new function besides the activities pursued in GN3. NA3 T2 s approach and working methods are described in Section 2 of this report. Section 3 summarizes its key results and also includes national summaries of CBP activities in the member countries. Section 4 summarises and draws conclusions on the work carried out. The Appendices include a list of the national campus working groups (Appendix A), abstracts of the best practice documents written during GN3plus Y1 (Appendix B), a list of workshops organised at the national level (Appendix C) and short programs of the international workshops and training events held by the task (Appendix D). 2

7 2 Approach 2.1 Technical focus areas The NA3 Task 2 team inherited six work areas from the GN3 mother task. The focus areas were discussed and negotiated in the task establishment phase. After lengthy debate the workgroup settled on six areas of focus, essentially identical to those for GN3. However, although the only visible change may be the internal reference numbering, there have been important shifts in the areas of interest within the focus areas themselves. Table 2.1 gives an overview of the focus areas and the NRENs that are contributing to them. Area Ref Name AMRES BREN CESNET CSC/ Funet FCT- FCCN MARnet MREN RENATER UNINETT Task management and dissemination Physical infrastructure: Virtualisation and datacentre Real-time communications and AV Campus networking: LAN and IPv6 4 Wireless 5 Network monitoring 6 Security Number of technical focus areas: Table 2.1: List of focus areas applicable in GN3plus Y1 1 Not counting area 0 (task management and dissemination). 3

8 Approach A brief description of the focus areas follows alongside the icons identifying each area. Physical infrastructure. This area addresses the requirements for generic cabling systems on campus, both fibre and twisted pair. The requirements of the infrastructure in telecommunications and server rooms are also dealt with. This includes power supply, ventilation and cooling, and fire protection, as well as general Information and Communications Technology (ICT) room-plan guidelines. Recommendations for building an audio-visual (AV) infrastructure in lecture halls and meeting rooms are also covered. GN3plus added virtualisation technologies to this area. Campus networking. This area deals with the campus network itself, and with the routers and switches as its basic building blocks. Requirements for both Layer 2 and Layer 3 are covered. Recommendations for a redundant design are given. Metropolitan area networking and virtual switching is covered. There is a particular emphasis on guidelines for implementing IPv6 on campus. Lightpaths on campus are also dealt with. Wireless. This area focuses on the wireless infrastructure on campus. Radio planning, design of the wireless network, security considerations, including the implementation of IEEE 802.1X are covered. eduroam requirements and Remote Authentication Dial-In User Service (RADIUS) setup are dealt with. Cookbooks for controller-based implementations are given. Legal aspects are examined. Network monitoring. This area focuses on network monitoring of the campus network. General requirements and framework conditions for monitoring are given. NetFlow/ Internet Protocol Flow Information Export (IPFIX) analysis is covered. Security monitoring, anomaly detection and behaviour analysis are also dealt with. Particular considerations for IPv6 monitoring are given. References to a number of open source tools, many of which have been developed within the GÉANT community, are given. Real-time communications. This area recommends infrastructures for real-time communications with an emphasis on open standards and Session Initiation Protocol (SIP) in particular. The infrastructure itself should be media transparent, coping with voice, video, messaging, document sharing, and presence. Particular focus is given to Voice over IP (VoIP) and IP telephony. Best practices from a number of NRENs in Europe are given. Security concerns are discussed and implementation solutions are recommended. Performance issues are also covered. Security. This area deals with security considerations for the campus network. A template for security policy is proposed, based on core principles, as defined in International Organisation for Standardisation / International Electrotechnical Commission (ISO/IEC) An ICT security architecture for higher education is recommended. Traffic filtering technologies are discussed and general applications are recommended. Adoption of digital certificates in a public key infrastructure (PKI) is covered. Secure Domain Name System (DNSSEC) is also dealt with. 4

9 Approach 2.2 Writing process for best practice documents The basic writing process for the best practice documents has continued unchanged from the GN3 project. The working groups are coordinated by the NRENs in their respective countries. The same working method has been adopted by the new NRENs that joined the work with the start of GN3plus. Appendix A gives an overview of the active working groups within each area in the contributing countries. Figure 2.1 captures this process. Figure 2.1: Writing process for best practice documents (BPDs) Some of the NRENs which joined later have preferred to write their initial versions of the best practice documents in English and not in their native language. As a related new development, task members have peer-reviewed BPDs written by other NRENs. The peer reviews have been aimed at finding some additional viewpoints and use cases, as the original documents are already quite accurate in the details. The peer reviews took place once the English language documents were available, whether in the original or in translation where needed. In addition, some of the NRENs liaised during the early writing phase of the BPDs, working jointly in shared work areas. It is expected that by collaborating in this way all partners involved will be able to benefit where their fields of expertise complement each other. For example, RENATER and CSC/Funet collaborated on DNS security where the topic was included in both the BPDs that they delivered. 2.3 Translation into English and publication There was a requirement for translation services to be tendered for GN3plus. The call was conducted in two phases, with the call for Bulgarian, Czech, French, Norwegian and Serbian taking place first. In the second phase, the Finnish and Montenegrin services were tendered. FCT-FCCN and MARnet did not express a need for translation services. An internal process and a bookkeeping system for the translation service were set up for the group, in order to clarify procedures for all partners and enable those involved to manage the translation process. This means that now the translation of a single document can be concluded easily. The GN3 approach to translation and web publishing was maintained by the NA3 T2 team for GN3plus; once a document is approved at the national level, it is translated into English and published on both the GÉANT and TERENA websites [GÉANT-BP, TERENA-BP]. 5

10 Approach As for publications, a short article about the first training event in Tbilisi was published in the GÉANT CONNECT magazine [CONNECT], the NA3 T2 poster and flyer were updated to cover the new partners, and plans for a new GÉANT CBP micro site [GÉANT-CBP] were drafted. New documents are announced when they become available through an open-announcement mailing list, campus-bp-announcements@terena.org. 2.4 Task management The workgroup and its procedures were established at a kick-off meeting in Paris on April The event was hosted by RENATER. The workgroup decided on the technical focus areas (Section 2.1) and developed a two-year plan to guide the related actions. The plans were summarised in an official GN3plus Project Initiation Document (PID). Figure 2.2: NA3 T2 kick-off workshop 6

11 Approach Cooperation within the workgroup is ensured by monthly videoconference meetings where the work is reported and topical items are discussed. Monthly progress and milestones achieved are documented in monthly reports made available on the workgroup intranet. This reporting mechanism provides an information base which is utilised for the project s administrative monthly and yearly reporting. NA3 T2 has a mailing list for official announcements, information exchange and discussion. IMS tools and videoconferencing are used quite frequently as needed. NA3 T2 searched for liaisons and cooperation partners not only among task member NRENs but also from other tasks in the GN3plus community. The aim was to join efforts and resources in completing major tasks, such as for example in organising training events. Cooperation also makes it possible to reach wider audiences by making new contacts during co-located events. 7

12 3 Results NA3 T2 is producing a growing toolkit of best practice documents (BPDs). Dissemination efforts are also of complementary importance as the Task needs to get the message out to campus network managers across Europe. In this process, it is important to establish contact with more NRENs and inform them of the Task s results and working methods. This is achieved through various methods: talks at conferences, direct dialogue with NRENs, and national and European-level expert workshops and training events. The following sections detail NA3 T2 s achievements in Year 1 of GN3plus in terms of published BPDs and CBP dissemination events, followed by a summary report of each NREN s activities. 3.1 Best Practice Documents Nine best practice documents (BPDs) were published during the first project year. Table 3.1 below shows the BPD distribution between the six technical focus areas. Ref Name Area Documents published 1 Physical infrastructure: Virtualisation and datacentre 0 2 Real-time communications and AV 0 3 LAN and IPv6 6 4 Network monitoring 1 5 Wireless 1 6 Security 1 Total 9 Table 3.1: Overview of documents published in English in each area in GN3plus Y1 Five NRENs produced BPDs and all NRENs discussed the BPDs during the monthly workgroup meetings and exchanged reviews by . The BPDs titles, their focus areas and the NRENs that produced them are shown in Table 3.2. The abstracts of the BPDs can be found in Appendix B 8

13 Results No. Document NREN Area Completed 1 NAT Using Source Routing through BGP Gateways CESNET LAN and IPv6 Nov Deployment of Services on IPv6 RENATER LAN and IPv6 Feb Improving DNS Reliability and Security RENATER Security Feb Reference Data and Large-Scale Network Management Automation RENATER LAN and IPv6 Feb Guidelines for Deploying DNSSEC CSC/Funet LAN and IPv6 Feb Virtualisation of Network Devices CESNET LAN and IPv6 Mar Virtual Switching RENATER LAN and IPv6 Mar Monitoring and Access Control for Campus MARnet Infrastructure, Mar 2014 Computer Labs monitoring, security 9 Implementation and Monitoring of eduroam Infrastructure using FortiGate Wireless Controller Table 3.2: Best practice documents published in GN3plus Y1 MARnet Wireless Mar 2014 The Year 1 BPDs will be publicly available on the project website [GÉANT-BDPs] from 1 June Dissemination Presentations at Conferences A total of ten presentations on the Campus Best Practice six defined focus areas were given at international conferences during project Year 1. These presentations are listed in Table 3.3 below. Presentations were given by UNINETT, UBCC/AMRES, CESNET, BREN and RENATER. Further details on each presentation are provided in the NREN activities summaries in Section 3.3. No. Date Event Presentation Presenter 1 16 April 2013 SUNET-dagarna, Östersund Sweden eduroam operations in Norway - monitoring, debugging and future plans Tom Myren, UNINETT 2 12 June 2013 EUNIS 2013, Riga Latvia Improving Infrastructure, Service and Knowledge by Campus Best Practices Model Mara Bukvic, UBCC/AMRES 3 4 June 2013 EUNIS workshop, Špindlerův Mlýn VŠB-TU Ostrava Data Centre Martin Pustka, CESNET 9

14 Results No. Date Event Presentation Presenter 4 18 September 2013 NORDUnet Technical Workshop 2013, Copenhagen Denmark Utilization monitoring of delegated IPv4 blocks Morten Brekkevold, UNINETT 5 18 September 2013 NORDUnet Technical Workshop 2013, Copenhagen Denmark Norwegian airports Tom Myren, UNINETT 6 27 September th RoEduNet Conference: Networking in Education and Research, Constanta Romania Distribution of web traffic toward the centralized cloud firewall system Ivan Ivanovic, UBCC/AMRES 7 27 September 2013 XI International Conference ETAI 2013, Ohrid Macedonia Definition and elements of best practice, used in campus best practice example Radoslav Yoshinov, BREN 8 27 September 2013 XI International Conference ETAI 2013, Ohrid Macedonia The e-facilitator as key player for e- Inclusion Radoslav Yoshinov, BREN October, 2013 ITCN '13, Antalya, Turkey Development of Bulgarian e- government National Model of Data and Processes in Administration Roumen Trifonov BREN December, émees Journées Réseaux, Montpelier, France Campus Best Practice (CBP) Vanessa Pierne, RENATER Table 3.3: Presentations at conferences in GN3plus Y National workshops National workshops are the backbone of CBP work, as they provide the opportunity for CBP working groups to meet, discuss the writing of the BPDs, present recent results and build local community relations. 18 national conferences, which directly reached over 700 people, were held in the first project year of GN3plus. A full list of all the national workshops organised in Year 1 is provided in Appendix C European-level workshops CBP results are also disseminated at European-level workshops where experts from different countries meet to present and exchange experiences. NA3 T2 organised two European-level expert events in Year 1 of GN3plus, shown in Table 3.4 below. The agendas for these workshops can be found in Appendix D. 10

15 Results Topic Workshop site Hosted by Date Participants GN3plus Symposium 2013 CEENGINE NRENs Technology Workshop Vienna, Austria GN3plus project 8-10 October Tbilisi, Georgia GRENA, CEENET 4-7 December Table 3.4: Campus Best Practice European-level workshops and training events in GN3plus Y Campus Best Practices in the GN3plus Symposium NA3 T2 organised a half-day workshop as a part of the GN3pus Symposium The workshop started with an overview of the practical CBP work carried out by various NA3 T2 member NRENs. The latter part of the workshop focused on the community discussion for the potential next steps and co-operation possibilities. The practical aspects of collaborative writing of the BPDs were covered. The community members present suggested an early sharing of the prepared documents and an adaptation of additional review procedures. Extra measures for disseminating the documents and steps to make them more accessible were also requested CEENGINE NRENs Technology Workshop CEENGINE and GÉANT jointly organised a security workshop in Tbilisi, Georgia. The program included a Campus Best Practice section based on the available BPDs in the focus area of security. The presentations covered practices from the application of the local legislation to security policies for academia and practical configurations and implementations with devices. Some demonstrations were also provided to the audience, which consisted of 61 security experts from all the NRENs in the local area. 11

16 Results Figure 3.1: CBP method presentation at the CEENGINE training event in Tbilisi, Georgia 3.3 Summary of NRENs CBP activities Five NRENs had participated in NA3 T2 as part of the GN3 project. These were UNINETT (Norway), CSC/Funet (Finland), CESNET (Czech Republic), AMRES (Serbia), and RENATER (France), which joined GN3 in Year 4. Four new NRENs joined the Task in the first project year of GN3plus project including BREN (Bulgaria), FCT- FCCN (Portugal), MARNET (Macedonia) and MREN (Montenegro), bringing the total number of participating NRENs in the CBP activity to nine. TERENA and CEENET also joined in a supporting role to organise training events. Nine BPDs were written by the national campus best practice groups. The NRENs cooperated in the process by peer reviewing some of the BPDs in their preparation phase. For example, FCCN reviewed the first Czech BPD. RENATER and CSC/Funet also collaborated when working on their respective BPDs in the area of DNS. NRENs also collaborated in the organisation of European-level workshops, and worked to raise awareness about CBP at a country level through national workshops. RENATER hosted the kick-off event for NA3 T2 in Paris in April 2013, which focused on summarising the needs and expectations of each of the NRENs and on establishing 12

17 Results the work areas for the activity. CEENET, supported by the NRENs, organised the first CBP European-level training event in Tbilisi, Georgia. The first year of GN3plus has shown how NA3 T2 can provide opportunities for NRENs to promote campus best practices within their communities and even influence local policy. For example, the Campus Best Practice activity was a real opportunity for RENATER to link up the French user community around a project dedicated to the enhancement and exchange of best practices, while BREN participated in the definition of the Bulgarian Ministry of Science and Education s ICT Strategy, which included the implementation of CBP principles AMRES The primary focus of AMRES s activities in the first year of the GN3plus project was to involve the IT staff from AMRES institutions to work on the best practice documents, initially by inviting Belgrade University IT staff to select the areas they would like to contribute to. As a result of this initiative, two existing working groups, Network monitoring and Security, gained new members and a new working group was created, Multimedia VoIP. Owing to the need for this preparatory work, and the fact that some changes have taken place in the internal organisation of AMRES s CPB task, the production of the best practice documents is planned for the second year of the GN3plus project. The Securing Linux Servers document was completed at the end of April It has now been translated into English and the translation is being reviewed by AMRES. The table of contents for this BPD was initially drafted at a meeting organised by the Security working group with the network and system administrators of the AMRES institutions who expressed an interest in contributing to writing the document. The administrators discussed the different solutions they were currently using and their reasons for using them, as well as their advantages and disadvantages, on the basis of which the document would be written. The draft was then shared among meeting participants to collect and share comments and suggestions for the writing process. The best practice documents produced by the AMRES CBP team for the previous GÉANT projects were presented at two international conferences, at EUNIS 2013, in Latvia, in June 2013, and at the 12th RoEduNet Conference: Networking in Education and Research, in Romania, in September 2013, as well as at the Europeanlevel CEENGINE NRENs Technology Workshop in Georgia, in December In addition, AMRES organised an AMRES Administrator Conference in December This was an internal conference at which AMRES presented the results of its work to the IT staff of AMRES institutions. The AMRES CBP team results were also presented. The new best practice documents and web portal were also introduced to the participants. 13

18 Results Figure 3.2: AMRES Administrator Conference in December 2013 The new web portal for AMRES CBP, which should replace the old dokuwiki pages, was published [AMRES] in order to improve information availability and sharing. Best practice documents written in Serbian and English are made available on the portal. News relating to the working groups activities and to AMRES s work on the GÉANT CBP project will also be published here. In addition, a new mailing list has been created including the administrators of AMRES and of AMRES institutions who are involved in working on the best practice documents. Finally, since Audiovisual and IP telephony services are not widespread in AMRES institutions, the Multimedia VoIP working group is working on promoting these services to the rest of the academic community and will produce documentation to help AMRES institutions exploit their potential for deploying A/V and VoIP services in their network BREN The work of BREN in the area of CBP for the first year of GN3plus has focused on the areas of physical infrastructure, network architecture, network monitoring, security, consulting and supporting National IT strategies (in education, e-governance, Information-resource infrastructures, etc.), as well as on contributing to the preparation of the BPDs. 14

19 Results A consulting and support workshop for setting up internet hot spots on student campuses was organised in Darvenitza on 22 May 2013, and resulted in getting the hotspots in working condition by June BREN also provided consulting and support for the preparation of the tender documentation and procedure for hardware and connectivity as part of the information-resource platform for an e-learning platform for schools in Bulgaria. Based on this experience, a BPD Requirements for the e-learning platform for Bulgarian education, was produced, the English translation of which is currently awaiting review. BREN also participated in the definition of the ICT Strategy up to 2020 of the Bulgarian Ministry of Education and Science (MES), which includes the implementation of CBP principles. The preparation of a project for innovative network infrastructure has reached the first stage of the strategy and it is expected to be realised in BREN has contributed to the dissemination of GÉANT CBP through national workshops as well as on international forums and at scientific conferences. A national workshop on University network infrastructure (BREN, Velingrad May 2013) was organised with the participation of deputy rectors, IT directors and specialists from Bulgarian Universities. The main presentations given were: MES/BAS - ICT in Higher education, Operative program for science and education, Executive Agency Electronic Communication Networks and Information Systems, National ICT infrastructures BREN, The Bulgarian education cloud, Development of the education and research network and The Campus Best Practice example. The main discussions were related to the architecture and development of the education and research network, and the problems and development of the university network infrastructure. Awareness of GÉANT campus best practices was raised with the task force of the CEPIS (50 CEPIS meeting for Best Practice for IT professionals, held in Dubrovnik on 20 April 2013). A presentation of CBP principles was also given at the kick-off meeting for the VET Qualification Practice for e-inclusion / QONIAon project on November 2013 in Konya. The CBP method was also presented at the National workshop on teaching methodology, which was held on 20 December 2013 at the Institute of Mathematics and Informatics BAS in Sofia CEENET The work of CEENET in Year 1 of GN3plus focused mainly on team integration and on planning and executing events devoted to the dissemination of CBP activities to Eastern European NRENs. Training was also delivered based on NRENs demand in the areas that are the focus of BPDs, where CBP trainers were available. CEENET organised the CEENGINE NRENs security workshop, a first European-level CBP dissemination event, in December 2013 in Tbilisi, Georgia. The advantages of the synergy between the workshop s objectives and the availability of quality BPDs were soon realised and the decision was made to dedicate one day of the three-day workshop to CBP. The role of CEENET here was to guarantee the logistics and programme preparation and execution, while the actual presentations of CBP practices were delivered by other CBP personnel. The success of the CBP day in Tbilisi led to the decision to co-locate future workshop activities (to achieve synergy and optimise travel costs) with GÉANT s NA4 T4 activity (Digital Inclusion), so that the workshops, where possible, exploit existing BPDs and encourage their authors to provide lectures on the relevant subject matters. This means that other resources are only used where issues cannot be addressed by CBP. CEENET liaised this 15

20 Results process and future CBP events in Eastern Europe are now being planned in collaboration with NA4 T4. Moreover, it has been agreed that each of these events will have a dedicated pool of seats for Eastern European Countries. At the time of this deliverable, CEENET (together with TERENA) has drawn up detailed programmes for two further workshops in 2014, the CBP/NA4T4 Workshop on Security and GÉANT services in Sofia, Bulgaria (16-18 June, 2014), and the CBP/NA4T4 Workshop on Backbone Technologies and GÉANT services in Chisinau, Moldova (8-10 September, 2014). Planning of a third workshop to be held in 2014 is also underway, with candidates for hosting organisations being considered in Montenegro and Azerbaijan, and with a provisional date to be set in November CESNET CESNET has been a member of the NA3 activity Campus Best Practice task since it started in GN3. In the past, CESNET published many BPDs in different fields and participated in all events organised as part of the task. The capability to write and publish BPDs was provided by the nationwide research plans funded by the Czech Ministry of Education and Youth in the period , and focused on the networking aspect. Since 2012 CESNET has assumed different goals and priorities and the research aspect is not its primary focus, nonetheless the GN3plus project remains important for CESNET because it connects the experiences of national and international communities to which CESNET is also able to make a contribution. However, due to limited resources allocated for participation in this task, the activity had to be reduced in GN3plus and take on fewer tasks than in the previous period. CESNET keeps two working groups in operation under NA3- T2, IPv6 and Monitoring, which carry out regular work, organise meetings and maintain their own web site. They also have their own mailing list and publish papers on international or national events and/or articles in electronic journals and blogs. In Year 1 of GN3plus, CESNET prepared two BPDs, NAT Using Source Routing through BGP Gateways and Virtualisation of Network Devices and also took part in the Kick-off meeting in Paris, in April 2013, and the GN3plus Symposium in Vienna, in October In December 2013, CESNET held an IPv6 meeting in Olomouc (national level event), during which six talks and fruitful discussions were held with the participation of more than 50 specialists from 9 organisations [CESNET IPv6 seminar]. It also reported regularly on its activities at general CESNET meetings held twice a year, in which more than 100 visitors from 25 universities and research institutions participate. The members of the Czech NA3 T2 working group also prepared several talks and papers for national conferences [EUNIS]. During the last period of Y1, CESNET worked to organise the logistics for a 2-day Monitoring and Security workshop which was held in Prague on April 2014, and which will fall under Y2 activities. CESNET now also runs external coordination groups under their own budget for example its own security, IPtel, Videoconferencing, Mobility and optical groups whose work areas are related to NA3 T2 and which fell under the scope of the CBP activity in GN3. Each of these groups organise their own meetings and workshops focused on the practical use of the e-infrastructure and on the latest trends relative to their specialisation. 16

21 Results CSC (Funet) In Finland, several mergers have been taking place between polytechnics and between other higher education organisations that are Funet customers, and in some instances between different types of institutions. The ICT environment is changing rapidly, and requires the establishment of best practices for data centres and service availability. Funet participates in the GN3plus project with two working groups, AccessFunet and MobileFunet, which were established during the first year of GN3 and are well-known in the Funet community. The focus areas for the working groups are Virtualisation and Data Centres, Local Area Networking and IPv6, and Wireless and Security. These areas were identified to be those where the best practice documents could help the community the most. CSC produced two BPDs in these areas during the first year of GN3plus, the eduroam Authentication Debugging BPD, which will be finalised soon, and the Guidelines for Deploying DNSSEC BPD that is currently being translated into English. CSC coordinated the translation call for tender that was an important part in the development of the overall translation process for the GN3plus CBP activity. As part of Y1 of the GN3plus CBP activity, CSC attended a series of several monthly videoconferences, for which it was responsible for keeping the minutes. CSC also took part in the activity kick-off meeting held in Paris in April Two CSC speakers, one of whom chaired the Campus Best Practice session and delivered the secretariat services, participated in the GN3plus Symposium in in Vienna in October Two CSC participants attended the Tbilisi training event in Georgia in December Their main duty, together with other members of the task, was to prepare and organise the workshop, at which they also gave two presentations. CSC held four different national workshops organised by the Funet working groups as part of Y1 of the GN3plus CBP activity. AccessFunet ran the physical infrastructure, LAN and IPv6 workshop in May 2013 (30 participants) and another Data Centre, LAN Infra Security workshop in November 2013 (11 participants). The MobileFunet working group held two wireless workshops in May (30 participants) and November 2013 (14 participants) respectively. These national workshops were all deemed to be successful. As regards upcoming CBP activities, CSC is currently planning the organisation of the international Data Centre IaaS workshop, which will be held in Finland in the autumn of FCT-FCCN FCT-FCCN joined NA3 T2 at the beginning of the GN3plus project, for which purposes it set up the Campus Networking Working group. The goal of the work for NA3 T2 was to provide support in terms of CBP to the FCT- FCCN member organisations, who steered the choice of the work areas that were selected, namely physical infrastructure and campus networking. In particular FCT-FCCN focuses on dissemination to the Portuguese community and institutions, which it seeks to benefit by sharing CBP knowledge and experiences. The first national Campus Networking Working Group meeting was held via videoconference on 12 July 2013, with 15 attendees from 12 different organisations. After the meeting, the more relevant issues for Portuguese 17

22 Results campuses were cross-referenced with the material already available (from GN3), in order to decide which issues would be the subject of future work. As the start of CBP work in Portugal, FCT-FCCN liaised with Video Services and Voice-over-IP teams from the national member community in order to evaluate the possibility of writing new BPDs. FCT-FCCN also reviewed the NAT Using Source Routing through BGP Gateways BPD produced by CESNET, and began preparing the first Portuguese BPD, by the title Dynamic Routing Protocols for Campuses. As part of Y1 GN3plus CBP dissemination activities, FCT-FCCN attended a series of several videoconferences, as well as the activity kick-off meeting held in Paris in April An FCT-FCCN speaker gave a presentation during Session 1 and co-chaired session 2 of the GN3plus Symposium in in Vienna October In February 2014, two CBP Sessions were held at Jornadas FCCN in Évora, a yearly RCTS community event. The first Session was used to discuss future CBP work, and the second session to provide IPv6 hands-on experience to Campus network and systems administrators, using remote routing labs. A mailing list has been set up for the national Campus Networking Working Group, hosted at FCT-FCCN. The mailing list (cbp-networking@fccn.pt) is a closed distribution list, but open to new subscribers MARnet Prior to the GN3plus project, MARnet was not involved in the campus best practice task activities and had no general process in place for specific areas of campus networking. It also had no experience in national level working groups or in the production of best practice documents. Therefore MARnet decided to begin work on CBP with the formation of a an initial smaller task core based at the Ss Cyril and Methodius University in Skopje and the Faculty of Computer Science and Engineering in Skopje, that comprise the largest user-base in Macedonia with technical experience. Several meetings were conducted within the initial core during which all previous BPDs of interest were analysed and discussed, and an initial list of four proposed best practice documents was drawn up. In the summer of 2013 two separate groups began work on the preparation, testing and experimental activities regarding the practices to be documented in the first two BPDs. The document writing process began in January 2014 and the BPDs are at present undergoing final revision. It was agreed that, after the production of the first best practice documents, a first national CBP dissemination event would be organised to present the initial results and potential benefits in order to encourage the formation of similar CBP groups in other campuses throughout Macedonia. MARnet began work on organising the event in 2014, which was held in the form of a conference workshop as part of the International Conference on Informatics and Information Technology [CIIT 2014], near the city of Bitola, Macedonia on April All members of networking staff from all higher-education campuses in Macedonia were invited to the workshop in order to further collaboration in the production of national best practice documents and expand the existing groups through the addition of new members. 18

23 Results To facilitate communication between working groups, a wiki-based group site was set up using the Trac opensource system, which was identified as being the most suitable platform for the purpose. The wiki was populated with initial task objectives and the proposed local-level document production. Currently access to the wiki is restricted, but there are plans to give free access to all parts of the process and all documents relevant to the general public after the first iteration and official acceptance and publication of the first best practice documents as part of NA3 T MREN Campus Best Practice is a relatively new area for MREN, which it was introduced to when, during the GN3 project, MREN members participated as guest speakers in a Network Monitoring Systems workshop held in Belgrade in October GN3plus then provided MREN with the chance to contribute to this area in an active way. During the first part of Year 1 of GN3plus, MREN s focused on becoming acquainted with the concept of CBP and the relative working processes, and on drawing up a description and definition of the national Campus Best Practice Initiative and a two-year plan for MREN CBP activities in the project. Work on the activity then began with the initial support of CSC and AMRES. Two working groups, the Network Monitoring working group and the Security working group were set up. MREN produced a first BPD in Year 1 of GN3plus, Analysis of Traffic Control Devices based on NetFlow Data in AMUCG, which is currently being translated from Montenegrin to English. Mailing lists and an MREN CBP Wiki page were also set up for the two Network Monitoring and Security working groups RENATER RENATER joined the CBP activity at the end of Year 4 of GN3. The Campus Best Practice activity was a real opportunity for RENATER to link up the French user community around a project dedicated to the enhancement and exchange of best practices. Besides collaboration and exchanges with the French and European research and education community, RENATER also intends to disseminate best practices to WACREN (West and Central African Research and Education Network), and in view of this introduced the CBP activity and best practice documents at a WACREN meeting in Lome (Togo) in March RENATER is in charge of managing and coordinating the working group for NA3 T2, which is composed of participants from universities, research centres and metropolitan or regional networks. This variety of profiles allows the working group to choose many hot topics, covering the needs of the community. Most of the institutions involved are connected to the RENATER backbone through a metropolitan network. RENATER hosted the GN3plus Campus Best Practice kick-off meeting in Paris in April The meeting provided an opportunity to meet the other NRENs involved in the project and draw up a draft two-year plan. 19

24 Results During this first year, the French CBP working groups delivered four best practice documents, three in the area of LAN and IPv6, Deployment of Services on IPv6, Reference Data and Large-Scale Network Management Automation and Virtual Switching, and one in the area of Security, Improving DNS Reliability and Security. These documents are available in French and English. One of the documents, Improving DNS Reliability and Security, was revised by FUNET, providing a good example of cross-collaboration within the Task. The French documents were presented during a Lightning Talk session at the JRES conference, organised by RENATER in December 2013 in Montpellier, in which 1500 people from the education and research community took part. The next step began in January The French working group defined new technical areas on which work was started in February 2014 (Identity management, QoS, how to deploy a CERT service, ToIP, how to deploy a SYMPA mailing list server). Some of these new topics were defined to present feedback and recommendations on the applicative services UNINETT UNINETT has carried on work from GN3 in GN3plus on four technical focus areas; LAN and IPv6, Wireless, Network Monitoring and Security. During the first year of GN3plus, UNINETT has seen some changes in the participants in the CBP activity, including a change in task leader. In Norway, an increasing number of institutions face challenges related to IPv4 address exhaustion (wireless clients), leading to the adoption of NAT solutions, with wireless networks being redefined as primary networks and ongoing migration from telephony to SIP / Lync. As in previous years, UNINETT is encouraging all institutions to extend IPv6 usage. During the first year of GN3plus, UNINETT did not publish any new BPDs. However, three documents are in preparation and will be finalised during the last year of GN3plus: Campus Resilience with BGP, eduroam with Aruba Controllers and Using Win / NPS RADIUS in eduroam. UNINETT attended a series of several monthly videoconferences and a few international activities during the first year of the GN3plus CBP activity. It presented parts of its wireless activities at a national conference in Sweden in April 2013, participated in the GN3plus Symposium in Vienna in October 2013, and presented its information security policy at the Tbilisi training event in December UNINETT also organised several national workshops and events for the first year of the GN3plus CBP activity; two on the subject of real-time communications and AV, both with around 60 participants, one on Network monitoring (30 participants), and a wireless workshop in October 2013 (30+ participants). 20

25 4 Conclusions During the first year of GN3plus, NA3 T2 Campus Best Practices delivered nine new BPDs. Activities carried out on the national level were very versatile. In particular, the new NRENs joining the project were able to kick-start their campus activities very effectively. International dissemination was active and a first training event was organised. The workgroup approached the CBP working method in an open-minded fashion and found ways to improve cooperation even further. NA3 T2 is gaining momentum. The planning and preparation conducted during project Year 1 will result in workshops and training events being held during project Year 2. CESNET is due to organise an international workshop on monitoring and security. CSC will hold a workshop on Data Centre IaaS challenges. CEENET has a major role in continuing to organise training on security, backbone infrastructure, wireless technologies and GÉANT services. NA3 T2 expects the second project year to yield ten additional best practice documents. In addition, some NRENs are likely to revisit, revise and update some of their existing BPDs to reflect the experiences gained during deployment after publication, and as new technical solutions become available. Knowledge of the best practices is being disseminated to wider audiences thanks to cooperation between the NA3 T2 NRENs, other GN3plus tasks and partners from the community. Cooperation and information sharing is contributing to the growth in expertise of the individuals who are participating in the task s various activities, while open dissemination of the GN3plus best practices increases public know-how and supports experts working in the CBP focus areas. 21

26 Appendix A Working Groups A list of active working groups in each country is given below. The leaders listed are those that are active at the time of writing. Working group leaders that are marked with an asterisk in the tables below are not members of the NA3 Task 2 team. This means that the costs of their work are not charged to the GN3 project budget, but are borne entirely by the NREN. A.1 AMRES Task coordinator: Jovana Palibrk Area Group Current leader Founded 1 Physical infrastructure Nemanja Ninkovic Nov Network monitoring Milos Kukoleca Sep Security Jovana Palibrk Sep Multimedia VoiP Ana Cukteras* Jun 2013 Table A.1: Serbian working groups A.2 BREN Task coordinator: Radoslav Yoshinov Area Group Current leader Founded 1 Network architecture Krasimir Simonski Mar Physical infrastructure Vassil Vassilev Mar Security Roumen Trifonov May Network Monitoring Deyan Stoykov Apr 2011 Table A.2: Bulgarian working groups 22