Putting the Network Redesign Principles and Concepts into Practice

Transcription

1 Putting the Network Redesign Principles and Concepts into Practice Using the network design and concept principles that have been recently established, Networks has begun to implement its new design. The presentation will show the design, implementation status and future phases and how it will affect you. Gary Bauerschmidt IT Networks

2 Purpose of RFP The purpose of the RFP is to solicit recommended Design Principles for a consolidated IT Network Infrastructure

3 Network RFP Update If you don t know where you are going You ll probably end up somewhere else. Lou Sullo/ Director IT Networks Gary Bauerschmidt/ AD Networks University of New Mexico [email protected] / [email protected]

4 Network Design Concepts Conceptual Simplicity Appropriate Sized Pipes Flexibility Holistic Security Continual Improvement Test Documentation

5 Network Design Principles The Network Core Wireline and Wireless Data Facilities Appropriate Security

6 Network Redesign 2012 Phase III - Deploy Louis Sullo

7 Timeline Phase I Phase II Phase III

8 Deployment Use Network Design Concepts Use Network Design Principles Install and Swap Out Equipment

9 Network ReDesign Continuing Refresh Uplifting Branch Campuses Los Alamos Complete Gallup Nearing Completion Taos Proposal Review Uplifting Intensive Nodes DataCenter 10 Gig Complete

10 Intensive Nodes

11 Network Core ReDesign Discovery Phase Cisco, HP, Juniper Comparing Designs Beta Testing SDN (Software Defined Network) Open Flow

12 Network Roadmap

13 More than 15 years Ago What is the life of Fiber?

14 Have to Replace Fiber George Thorning IT Networks Facilities

15 How do we Call

16 How we will Call Mark Reynolds IT Networks Services

17 Lou Sullo Network Team IT Networks Director Mark Reynolds IT Networks Services Gary Bauerschmidt IT Networks Transport George Thorning IT Networks Facilities

18 UNM Network Logical Diagram Internet 1 NM ISP TP IPS ACLs Level3 WRN Level3 TP IPS ACLs Core1 Core2 ABQG FW Fiber Zone Hub 1 FW Fiber Zone Hub 7 Fiber Zone Hub Buildings Buildings Experimental Networks CS Virus Pilot IPv6 Pilot Building Business/Research Network IPv6 Pilot MDS

19 Provider Bridging PROVIDER BRIDGING 802.1AD Provider bridging is conceptually pretty simple, vlan stacking or QinQ (802.1Q in 802.1Q). The customer traffic is identified by a Vlan ID (VID) referred to as the C- tag (customer VID) in the 802.1Q framing format. When the C-tagged frame goes upstream to the service provider, it is encapsulated again by the carriers provider bridging edge network. Using 802.1ad encapsulation, the C-tag is then wrapped up with an S-tag (Service VID). Encapsulation in the carrier network allows for overlapping customer VIDs.

20

21 Provider Bridging POS VoIP Data One Data Transfer One Time Classroom Technologies

22 Network Design Concepts Use Concepts for Network Security Conceptual Simplicity Appropriate Sized Pipes Flexibility Holistic Security Continual Improvement Test Documentation

23 Network ReDesign IPS and FireWall Deployment

24

25 Network Security Roadmap Phase I Deploy Currently Firewalls, IPS Phase II Ongoing Review & Early Discovery NAC, VPN, AD, Web, Integrating AD - Wireless

26 Intrusion Protection System (IPS) HP (Tipping Point) Selected Deploy into Production Jan 31, 2013 Current Config Digital Vaccine twice/week Dual Boxes for High Availability Reputation Filtering Weekly Meeting to Review Rules

27 FireWall Palo Alto Gbps throughput Dual Boxes Currently in Bid Process Completed Will install in audit mode - Done Tighten down with rules to deny all - Weekly meet to approve Rules into Production

28 Do we need IPv6? Private IP address ranges The ranges and the amount of usable IP's are as follows: Addresses: 16,777,216 Only for translating to Government World

29 Private IP Space <-> NAT <-> IPv6/IPv4 NAT Network Address Translation

30 Questions Gary Bauerschmidt Associate Director, IT Networks

31