Campus Best Practices What s that?

Transcription

1 Campus Best Practices What s that? Vidar Faltinsen GÉANT3 Task Leader CTO UNINETT Wireless workshop, Stockholm March

2 The GÉANT projects GN3: GN3+: ! Enable research communities across Europe to transform the way they collaborate! Enhance networks and services! Fight the digital divide across Europe Picture courtesy DMSP 2 2

3 Campus Best Practices (GN3/NA3/T4)! Addresses key challenges for European campus networks Areas of focus! Contributing NRENs organise working groups within their country Physical Infrastructure Campus Networking! Currently six areas of focus! Best practice documents are developed and published at geant.net/cbp Real-time communications Network Monitoring! Workshops are organised Wireless Security 3 3

4 Accelerating Change We live in a moment of history where change is so speeded up that we begin to see the present only when it is already disappearing. R.D. Laing 4

5 Compete or cooperate? Compete on students Cooperate on infrastructure 5 5

6 The Norwegian GigaCampus Vision Provide and coordinate top international level campus IT infrastructures UNINETT Internet Areas of focus:! Physical infrastructure! Campus networking! Wireless infrastructure! Network monitoring! Security! Real-time communications One HE community many campuses common solutions 6 6

7 Working methods! Workshops and working groups! Best practice documents! Advise and support (consulting)! Assisting with implementations GigaCampus field trip! Network monitoring tools Assist implementations on campus Active consulting on campus Common national procurements! National procurement processes Make own national best practices Working groups discuss best practices Workshops to share experiences CBP staircase 7

8 An example of useful cooperation: eduroam! How do we set up eduroam?! Radio planning! Wireless controller setup! Security! Encryption (802.1X)! Radius setup! User database integration (AD/LDAP/ other)! Certificates (CA)! Supporting smart phones / tablets! Monitoring! etc, etc! Can we learn from others? 8 8

9 Stakeholders! The Government! Showed responsibility! Provided initial funding! The NREN (UNINETT)! Dedicated campus project team! Facilitator! Got happy customers! The Universities and colleges! Participates in working groups! Benefits from results 9

10 Campus Best Practices - a task within GN3! Four countries:! Norway (UNINETT)! Finland (CSC/Funet)! The Czech Republic (CESNET)! Serbia (AMRES)! 3.5 man years per year 10 10

11 Campus Best Practices - continues in GN3+! From April 2013 nine countries:! Norway (UNINETT)! Finland (CSC/Funet)! The Czech Republic (CESNET)! Serbia (AMRES)! France (RENATER)! Portugal (FCCN)! Bulgaria (BREN)! Montenegro (MREN)! Macedonia (MARNET) 11 11

12 Best practice document development How are they produced?! Facilitated in working groups (mainly)! Active participation from NREN How are they approved?! Rough consensus in working groups! Open hearing period of 4 weeks! Approved by IT director at universities 12

13 Translation to English -> GEANT TERENA (or google Campus Best Practice ) Announcements of new documents:! campus-bp-announcements@terena.org 13

14 The CBP toolkit as of April documents published Physical Infrastructure (9) Cabling, power, cooling, AV, etc The campus network (17) The network itself, including IPv6 deployment Wireless (8) Including eduroam deployments Network monitoring (11) Real-time comm. (5) IP telephony and SIP Security (8) 14 14

15 Dissemination efforts so far Organised workshops at the National level Organised workshops at the European level France, Lithuania Slovenia, Macedonia Montenegro, Bosnia-Herzegovina Network monitoring Real-time communications IPv6 Wireless Presented papers at conferences International conferences (TERENA, EUNIS, NORDUnet, AfREN in Gambia) National conferences (France, Denmark, Croatia, Romania, Slovenia) 15 15

16 Physical Infrastructure! Generic Cabling Systems! Design/layout of ICT rooms! Power supply in ICT rooms! Cooling in ICT rooms! Fire protection in ICT rooms! AV requirements in lecture halls and meeting rooms! Overall guidelines for the Design of HE Buildings (ICT and AV) 16

17 Campus Networking! Redundant campus network! Requirements for edge routers! Recommended config of campus switches! Recommended HP Procurve setup! IPv6 migration plan! Measuring IPv6 uptake! IPv6 autoconfiguration! IPv6 and IPv4 multicast setup! IPv6 config for HP procurve Two IPv6 workshops: Helsinki March 2011 and Oct 2012! Light paths in campus network! Virtualization of critical network services 17

18 Wireless! Radio planning! WLAN design in a controller environment! configuration examples! WLAN security (802.1X, encryption)! FreeRADIUS to database setup! Setting up eduroam with a Cisco controller! Configuring HP wireless! Legal aspects (Finnish legislation) Four wireless workshops: Finland 2010, Serbia 2011, Lithuania 2012, Sweden

19 Network monitoring! Requirements for network monitoring! Monitoring tools! IDS and honeypots! Monitoring based on IP data flows! Security monitoring with flows! Anonymity issues! IPv6 monitoring Two network monitoring workshops: Serbia 2009, the Czech Republic

20 Real-time communications! IP telephony best practices across Europe! Evaluating SIP performance! SIP penetration testing! VoIP anomaly detection One VoIP/SIP monitoring workshop: the Czech Republic

21 Security! Recommended security policy - most downloads on geant.net!!! Guidelines for information classification! Recommended security architecture! Traffic filtering techniques! Digital certificate deployment! 802.1X in the wired network! Cisco Ironport VPN recommmendations 21

22 More information / Contact GÉANT Campus Best Practices! gn3campus@uninett.no Subscribe to announcements:! campus-bp-announcements@terena.org Questions? 22