Campus Best Practice. Vidar Faltinsen, UNINETT 2nd TERENA End to End workshop Amsterdam, 7 December connect communicate collaborate

Transcription

1 Campus Best Practice Vidar Faltinsen, UNINETT 2nd TERENA End to End workshop Amsterdam, 7 December 2009

2 5 prerequisites for viable end to end services 1. Good collaboration (campus national international) 2. Solid infrastructure (long term investments on campus) 3. Reach the end user (do they know what is possible?) 4. Sound routing model (e2e, campus and internet needs hand in hand) 5. Suitable security model (do not hinder effective network usage)

3 GN3/NA3/T4 Campus Best Practice NA3 Joint Research Activities: JRA1: Future Network JRA2: Multi-domain Resources and Services JRA3: Enabling Communities Service Activities: SA1: GÉANT Network Architecture Design and Planning, Procuring, Building and Operating SA2: Multi-Domain Service Operation SA3: End-User Services in a Federated Environment SA4: Software Governance Networking Activities: NA1: Management NA2: Joint Dissemination and Outreach NA3: Status and Trends NA4: Liaison and Support

4 GN3/NA3/T4 Task participants Four countries participate in the work, 14 man years: Norway / UNINETT Finland / FUNET The Czech republic / CESNET Serbia / AMRES Vidar Faltinsen, UNINETT Gunnar Bøe, UNINETT Olaf Schjelderup, UNINETT Wenche Backman, FUNET Janne Oksanen, FUNET Jari Miettinen, FUNET Juha Oinonen, FUNET Jiri Navratil, CESNET Tomas Podermanski, CESNET Vladimir Zahorik, CESNET Mara Bukvic, AMRES Bojan Jakovljevic, AMRES Esad Saitovic, AMRES NA3 Activity leader: Karel Vietsch, TERENA NA3/T4 Task leader: Vidar Faltinsen, UNINETT

5 Campus Best Practice Task Objective Address key challenges for the European campus networks Important areas of focus: Physical infrastructure Campus network Wireless infrastructure Light paths on campus Network challenges on campus Challenge NRENs to reinforce their national efforts The NREN should be a fascilitator that stimulates collaboration between the campus guys at the university level and with the NREN itself Get working groups up and running Provide an evolving and to-the-point set of best-practice documents for the community.

6 GN3/NA3/T4 Results so far Established a number of national working groups Finland Mobility Network / light paths Network monitoring The Czech republic Network monitoring IPv6 IP Telephony Serbia Physical infrastructure Network monitoring Security Norway GigaCampus working groups Will translate national BPDs to English Will be available on Bring the national experts to the European scene Network monitoring workshop in Belgrade October 2009 SIP/VoIP workshop in Prague planned for April 2010 More to come

7 About Norway and UNINETT

8 Norway has scattered population ~4.5 mill inhabitants Scattered population Many mountains and fjords Shortest distance south to north: km Approx. 3 days by car Coastline of km ~62% of the length of the equator

9 The UNINETT research network and hybrid infrastructure Nationwide, high capacity (1-10 Gbps), open and resilient network. IPv6 and multicast enabled More than 70 PoP 40 universities and university collages > 200 institutions users year IRU agreement with infrastructure owner (BaneTele) on dark fibre and wavelenghts Established hybrid network infrastructure in collaboration with BaneTele (and others) Access to over 8000 km of installed DWDM path Amsterdam-Rome is 1650km

10 The Norwegian GigaCampus project ( )

11 Norwegian GigaCampus Four years of experience with GigaCampus ( ) Have working groups in 7 areas operational 1. Physical infrastructure 2. Network 3. Wireless 4. Security 5. SIP 6. Network monitoring 7. Audio Visuals Have made 20++ best practice documents (but in Norwegian ) UNINETT engineering task force UFS best practice documents

12 GigaCampus in the field Touring the country with routers and core switches on the lorry Participants from UNINETT and from major universities and university collages Collaboration with local IT staff on site Network design and implementation Wireless networking Focus on the physical infrastructure Focus on security

13 Physical Infrastructure BPDs Framside Bakside Framside Bakside Framside Bakside Framside Common requirements for: 1. Cabling (fibre and twisted pair) 2. Data centers and network rooms 3. Power supply (incl. UPS and generators) 4. Ventilation and cooling 5. Fire protection Available in English early next year All major universities have participated in the work The requirements are coordinated with building owners and will be used in future building projects Existing campus infrastructure is inspected by GigaCampus. Reports/improvement lists with estimated costs are produced.

14 Focus on reliable, redundant campus networks UNINETT UNINETT Campus Campus

15 E2E implications on campus Sound routing model with BGP UNINETT UNINETT AS A AS B AS A AS C AS D AS B Campus Oslo Campus Bergen Campus Oslo Campus Bergen AS E (research collaboration) E2E lightpath

16 GigaCampus pushes eduroam IEEE 802.1X implementation guidelines is provided by GigaCampus working group 29 universities (out of 37) have eduroam in place

17 Focus on security policies and IRTs Security policies are needed GigaCampus has prepared an R&E template based on ISO standard GigaCampus security team Workshops on site with university leadership Goal: they develop their own policy local ownership is essential! Best practice security white papers Recommended security architecture Layered opproach the onion Incident Response Team courses Focus on organizing local IRTs

18 Measurement beacons 29 in operation, 12 more coming End user speed tests with Network Diagnostic Tool (NDT) Verifies multicast connectivity Measures one way delay, loss and jitter Requires GPS time synchronization for optimal results (µsec level) Passive monitoring cards Moniters traffic in/out of campus Traffic quality Security

19 GC GigaCampus tool boxes Managing 30 campus networks around Norway The tool boxes are servers containing a number of management tools: NAV: Proactive network management Stager: Netflow and Qflow nfsen: Netflow traffic analysis Hobbit: Service monitoring tftp server, syslog server, radius server The tool boxes are placed on campus and used by the local IT staff. Management, tool enhancements, software upgrades, etc, is done by UNINETT. Free training in tool usage is given. Stager nfsen

20 NAV Network Administration Visualized Network management system developed by NTNU and UNINETT since Key features Inventory information with topology topology autodetected L3, L2, per vlan Status monitor with alarm system sms and alarms Client machine tracking based on ARP and bridge table data Client machine detention Statistics and graphing Get NAV preinstalled Virtual appliance available

21 Stager Developed at UNINETT since Generic tool for storage, aggregation and presentation of network statistics Netflow analysis Round trip and packet loss Generic SNMP data gathering Qflow analysis Stores data in a postgresql database High performance Netflow database > 1TB in size at UNINETT

22 EARNEST Report on Campus Issues

23 Earnest report on campus issues Published January recommendations regarding issues on campus Very congruent with GigaCampus and with the GN3 Campus Best Practice work plan Recommendation #12: Strengthen the collaboration between National Research and Education Networking organisations and institutions to improve the deployment of key services Better synchronization of national research networking and campus issues is essential for viable end-to-end services.

24 EARNEST Report on Campus Issues On infrastructure and services Set aggressive replacement policies for equipment with a maximum life expectancy of five years. Adopt institution-wide specifications for networking infrastructure, including elements controlled by departments or faculties. Ensure seamless end-to-end connectivity where a particular quality of service is required. Provide support and training for performance optimisation, especially to the research community. Network equipment Routers, switches, base stations, etc Cabling Fibre, twisted pair Building Single mode Cat6A 10gig ready Data centers/network rooms, guideways for cable run optimize wiring closet placing 3 5 years years 100 years?

25 EARNEST Report on Campus Issues On Security Adopt security measures that are appropriate for the purpose and do not hinder the effective use of the network. Establish an institution-wide security team with a high degree of independence.

26 EARNEST Report on Campus Issues On Collaboration Establish strong, formalised arrangements for collaboration with other management domains, e.g., NRENs, intermediate networks, other institutions. Encourage network teams to share their expertise with colleagues in other management domains. BPD Working groups best practice documents

27 EARNEST Report on Campus Issues On Raising awareness and training A cultural change in networking is taking place with the emphasis moving from providing connectivity to providing network-related services. To speed up this change of focus, institutions should: provide training courses and good-quality documentation for end-users to raise awareness of the network services available and promote their use, including videoconferencing, multicast, video broadcasting, video-ondemand, voice-over-ip telephony; Make arrangements for network support teams to retrain in order to keep up-to-date with fast-changing technologies.

28 Back to the five E2E prerequisites

29 5 prerequisites for viable end to end services 1. Good collaboration (campus national international) THE key issue in GN3/NA3/T4 (and GigaCampus) 2. Solid infrastructure (long term investments on campus) Single mode fibre on campus Reach the end user (do they know what is possible?) A challenge 4. Sound routing model (e2e, campus and internet needs hand in hand) BGP is your friend 5. Suitable security model (do not hinder effective network usage) Monitor your campus, implement the onion

30 More information / Contact GEANT3 NA3 Task 4: Campus Best Practice (in English) gn3campus@uninett.no Look out for English BPDs coming along Bulletin board for BPD contributions from other countries GigaCampus (mostly in Norwegian) vidar.faltinsen@uninett.no