Attachment A - SDCCD Current Hardware and Software Environment

Transcription

1 Page 1 of 8 Attachment A - SDCCD Current Hardware and Software Environment SOFTWARE ENVIRONMENT: Administrative Systems SDCCD s current administrative systems are comprised of Ellucian s Colleague Finance and Human Resources modules and Ellucian/SunGard/SCT s Integrated Student Information System (ISIS) and Sigma s Student Aid Module (SAM) modules. The Colleague applications operate on an IBM RS 6000 minicomputer platform, Unidata database, and AIX/UNIX operating system. Some enhancements have been completed for the Colleague applications but with minimal impact to the core application code. Users access the Colleague applications through the thick client UI as SDCCD has not migrated to the web interface and infrastructure. Employee self-service is facilitated through Colleague WebAdvisor for access to various HR, Payroll, and budget information. The ISIS and SAM COBOL applications operate on an IBM 2096-I01 z9 Mainframe running ZOS, CICS, TSO Server with the DB2 database. Both ISIS and SAM have been heavily customized over the past 23 plus years and significant development work has been completed for web self-service applications for students and faculty. Staff client connectivity is currently via TCP/IP connectivity using Attachmate s Extra! terminal emulator. Data is easily transferred between the IBM mainframe and RS6000 minicomputer environments through a shared (common) IBM Shark Storage Network Array which is nearing its end of life cycle for support and maintenance. The District s Information Technology department is responsible for the systems administration, operations, applications development, security and network connectivity for all of the administrative systems. Currently, none of the administrative systems utilize Active Directory or any directory services. However, the District does utilize Active Directory for Microsoft Exchange and Windows Network accounts. Administrative System Interfaces The District utilizes many other software applications that read data, download data, or upload data to the core Administrative system database tables (Finance, HR/PY, Student and Financial Aid). For a complete list of this software: See Attachment B: SDCCD Software for ERP Integration and Interfaces

2 Page 2 of 8 Web Applications The District has internally developed several web enabled self-service applications to help faculty, staff and students manage data or provide functionality that is not usually included in the core Administrative application modules (Finance, HR/PY, Student and Financial Aid). For a complete list of this software: See Attachment B: SDCCD Software for ERP Integration and Interfaces HARDWARE ENVIRONMENT WAN and Internet Connectivity The District utilizes a hub and spoke configuration for its wide area network connectivity from the Data Center located at Miramar College to City and Mesa College, the six Continuing Education sites, the District Office and the District Service Center (College Police Dispatch). The WAN data circuits are AT&T OpteMAN and GigaMAN circuits of various speeds. The District network is then connected to the Internet via a primary Gigabit (AT&T GigaMAN) circuit and a secondary 45 megabit ATM circuit to CENIC, our Internet Service Provider. The secondary circuit will be upgraded to an alternate carrier gigabit circuit in the next 12 months. Intentionally left blank, continue on next page

3 Page 3 of 8 Data Center Network The Data Center is primarily switched 10 gigabit (10G) backbone connectivity with Enterasys Core S4-Series network chassis transport, Enterasys N7-Series distribution chassis equipment and Brocade Foundry Load balancing switches for managing the redundant real web server to virtual IP connectivity. The firewall appliances are Checkpoint s Enterprise Security Gateways. The Data Center storage array networks (SANs) include HP Model P4500 iscsi SAN Infrastructure, an older HP EVA5000 for webserver database storage, and an IBM Shark SAN used for the IBM mainframe and Colleague servers. Intentionally left blank, continue on next page

4 Page 4 of 8 College Campus Networks The three main college campuses within SDCCD; Mesa College, City College, and Miramar College, each have similar networks of the hub and spoke design. The primary Main Distribution Facility (MDF) connects the WAN circuit (250MB) to a core Enterasys S4-Series router with each Intermediate Distribution Facility (IDF) housing Enterasys K10-Series or C5-Series switches linked over single mode fiber-optics (1 Gbit/s). Configured on each switch are VLANs to support Administration systems, Instructional networks, Utility

5 networks, Active Directory servers, and Voice over IP. The Enterasys switches support 10/100/1000 Mbit/s connectivity to all desktop and VoIP end-nodes. Continuing Education Site Network Infrastructure Page 5 of 8 At the six SDCCD Continuing Education sites, the network infrastructures are either a hub and spoke design if the site has multiple buildings, or one centralized MDF with Enterasys N7-Series (10/100 Mbit/s) or K10-Series (10/100/1000 Mbit/s) switches providing all desktop and VoIP end-nodes. District Office/District Service Center Network Infrastructure The District Office and the District Service Center administrative networks are currently undergoing upgrades with the installation of newer Enterasys K10-Series or C5-Series switches which support 10/100/1000 Mbit/s connectivity to all desktop and VoIP end-nodes. SDCCD Wireless Network Infrastructure The SDCCD wireless network infrastructure design consists of dual redundant Enterasys Thin-Wireless Controllers in the Data Center where each site wireless SSID is defined and each wireless policy is configured to manage over 200 Enterasys Wireless Access Points (WAPs) across all locations. Coverage on each campus is primary 100% in the new buildings, and in quad type areas identified by each campus. All wireless traffic is isolated from all other traffic and tunneled out to the Internet through dedicated Palo Alto Firewalls. No access to any Internal Student, Financial, or related system is accessible via wireless at this time for security reasons. Voice over Internet Protocol (VoIP) Network Infrastructure The SDCCD is currently undergoing a complete migration of their PBX telephony to VoIP. All newly planned and completed buildings at all locations are fully configured with VoIP handsets in office spaces and VoIP Blazecast Emergency broadcast units in each classroom using Mitel 3300 VoIP controllers. Unified Messaging is in the planning stages. SERVER INFRASTRUCTURE Web Server Infrastructure The web server environment is made up of a combination of physical and virtual servers running mostly Windows Server 2003/2008 and Microsoft Internet Information server (IIS) with a few others running Red Hat Enterprise Linux. The standard physical server web server is usually a multiprocessor HP ProLiant DL 380 Series server with 8 or more gigabytes (GB) of RAM and RAID 5 disk storage. The standard database server for web server support is a multiprocessor HP DL380 model with GB of RAM and 15+ terabytes of RAID 1+0 and 5 disk storage or SAN connectivity.

6 Page 6 of 8 Most of the District s web servers are configured with two or more redundant physical or virtual servers mapped to virtual IPs in a load balanced configuration. Middleware Servers/Connectivity The District web applications communicate with the ISIS and SAM systems through middleware servers running Inventu s Screen Surfer software. Inventu maps the coordinates of a terminal screen, enabling web applications to launch ISIS and SAM CICS transactions and read the screen results and error codes. The District also utilizes IBM s DB2 Connect middleware servers for web applications accessing ISIS, SAM and DB2 tables directly. When improved performance is needed, DB2 Connect (ODBC driver) is installed directly on the web server. Microsoft Active Directory and Desktop Support Infrastructure The District Active Directory and Desktop Support Infrastructure currently consists of an Active Directory Domain Controller at each location running DHCP and DNS services. In addition to the Domain Controllers, desktop computers are also managed and updated using Windows Server Update Services (WSUS), Windows System Center Configurations Manager (SCCM) and Windows System Center Operations Manager (SCOM) support systems to provide monthly Windows OS updates, push Adobe Reader updates and to push Adobe Flash Media updates. DESKTOP COMPUTING Desktop Computer Environment The District has approximately 3000 administrative computers of which, about ten percent or 300 are Apple imac or MacBook computers. The balance is Southland Technologies IBM compatibles with approximately 40 percent running Windows 7 and the rest running Windows XP. The Standard software image is primarily comprised of Microsoft Office suite, Outlook configured for MS Exchange connection, Attachmate Extra terminal emulation, Colleague 2.3 UI, Adobe Reader and Flash, Oracle Java, Roxio Creator LE, and Avast antivirus. The District also has approximately 4800 academic computers with around 10% or 480 Apple computers. Most of the academic computers are running Windows 7 or OSX. Anti-Virus All administrative desktop computers in the District currently run Avast! Anti-Virus. In addition, all IT staff are required to run MalWareBytes in active scan mode. Migration to a different Anti-Virus solution is currently being considered.

7 Page 7 of 8 BACKUP SYSTEMS File Servers, Application Servers, and SQL Database These backups are currently managed using HP s DataProtector suite of backup software and agents to HP 48-Tape and 8-Tape changers with LTO-3, LTO-4 and LTO-5 tape backup drives. All backup tapes are rotated to an off-site monthly storage provided by Iron Mountain Storage and Information Management Services. Mainframe and Colleague Backups Student System: Weekly full volume backups and daily differential backups of selected data on the production partition. Full volume backups on the test partition are done when requested by Technical staff. The backup media is stored off-site with Iron Mountain. Colleague System: Daily backups of file systems on the Colleague Production server, Colleague Training server, and the TSM Backup server. The file system backups are written to media using TSM daily. There is a weekly merge by TSM to consolidate the media. The backup media is stored off-site with Iron Mountain. UPS SYSTEMS Data Center The Data Center power is protected by a 225kVA PowerWare UPS system and 200kVA Detroit Diesel generator. The system is fully automated with the UPS always in line providing power conditioning to one of four Power Distribution Units (PDUs). Upon loss of main electrical power, the generator automatically starts and comes on-line in less than 10 seconds at which point the Automatic Transfer Switch (ATS) transfers input power to the generator. When main electrical power is restored, the ATS automatically detects when main electrical power is restored and transfers input power back to the main source after the UPS determines that the main power source is once again providing full voltage at the required phasing. The power distribution design in the Data Center provides for two separate circuits from a PDU, distributed to each server rack. The HP DL380 Series servers are all configured with dual redundant power supplies each fed from a different circuit. Should there be a failure in one circuit, all systems and servers will continue to run on a single power supply while the issue is resolved. College Campuses College Campus UPS systems consist of a primary APC 16kVA UPS in the core distribution Main Distribution Facility (MDF), with Mitsubishi 10-12kVA or APC 4-8kVA UPS systems.

8 Page 8 of 8 All new facilities with VoIP have a UPS system. Work is in progress to install UPS systems in all Intermediate Distribution Facilities (IDFs) along with VoIP upgrades. Opening Day Mainframe Statistics for ISIS (Student System) and SAM (Student Aid Management) 1/23/2012 8/20/2012 1/28/2013 8/19/2013 CICS STATISTICS: Total Number of Transactions 797, , , ,774 Total Number of SQL Calls 27,106,738 27,982,646 28,651,248 28,288,477 Total Number of WREG Transactions 620, , , ,787 Total Number of WREG SQL Calls 20,464,554 21,017,202 21,722,652 20,970,758 Total CPU Time (hh:mm:ss) 3:47:46 3:57:25 3:59:24 3:40:58 DB2 STATISTICS: Maximum Number of Threads Maximum Number of Distributed Thds Total DB2 CPU (hh:mm:ss) 1:20:42 1:54:11 2:57:34 2:00:46 Distributed CPU Utilization (hh:mm:ss) 0:57:12 1:28:04 1:47:43 1:36:40 Total Number of GETPAGES 142,349, ,030, ,287, ,466,226 Total Number of Synchronous Reads 2,954,991 2,466,666 3,265,169 3,162,229 Total Number of Threads 1,615,019 1,731,741 1,952,524 1,830,302 Total Number of CICS Threads 719, , , ,516 Total Number of Distributed Threads 895, ,083 1,201,865 1,088,265 Total Number of Web Reg Threads 766, , , ,045 Total Number of SQL Calls 33,210,112 36,790,848 39,162,391 37,061,518 Total Number of CICS SQL Calls 27,507,357 28,455,930 29,365,640 28,991,144 Total Number of Distr. SQL Calls 3,044,876 3,488,186 3,854,266 3,697,581 Total Number of Web Reg Calls 2,491,342 2,796,236 2,850,823 2,794,200 Total PSIS Database Selects 13,425,520 14,251,332 15,856,610 14,022,199 Total PSIS Database Updates 500, , , ,991 Total PSIS Database Pages Read 10,318,880 8,082,686 11,240,759 9,764,199