Putting the Network Redesign Principles and Concepts into Practice Using the network design and concept principles that have been recently established, Networks has begun to implement its new design. The presentation will show the design, implementation status and future phases and how it will affect you. Gary Bauerschmidt IT Networks gbauers@unm.edu
Purpose of RFP The purpose of the RFP is to solicit recommended Design Principles for a consolidated IT Network Infrastructure
Network RFP Update If you don t know where you are going You ll probably end up somewhere else. Lou Sullo/ Director IT Networks Gary Bauerschmidt/ AD Networks University of New Mexico lsullo@unm.edu / gbauers@unm.edu
Network Design Concepts Conceptual Simplicity Appropriate Sized Pipes Flexibility Holistic Security Continual Improvement Test Documentation
Network Design Principles The Network Core Wireline and Wireless Data Facilities Appropriate Security
Network Redesign 2012 Phase III - Deploy Louis Sullo
Timeline Phase I Phase II Phase III
Deployment Use Network Design Concepts Use Network Design Principles Install and Swap Out Equipment
Network ReDesign Continuing Refresh Uplifting Branch Campuses Los Alamos Complete Gallup Nearing Completion Taos Proposal Review Uplifting Intensive Nodes DataCenter 10 Gig Complete
Intensive Nodes
Network Core ReDesign Discovery Phase Cisco, HP, Juniper Comparing Designs Beta Testing SDN (Software Defined Network) Open Flow
Network Roadmap
More than 15 years Ago What is the life of Fiber?
Have to Replace Fiber George Thorning IT Networks Facilities
How do we Call
How we will Call Mark Reynolds IT Networks Services
Lou Sullo Network Team IT Networks Director Mark Reynolds IT Networks Services Gary Bauerschmidt IT Networks Transport George Thorning IT Networks Facilities
UNM Network Logical Diagram Internet 1 NM ISP TP IPS ACLs Level3 WRN Level3 TP IPS ACLs Core1 Core2 ABQG FW Fiber Zone Hub 1 FW Fiber Zone Hub 7 Fiber Zone Hub Buildings Buildings Experimental Networks CS Virus Pilot IPv6 Pilot Building Business/Research Network IPv6 Pilot MDS
Provider Bridging PROVIDER BRIDGING 802.1AD Provider bridging is conceptually pretty simple, vlan stacking or QinQ (802.1Q in 802.1Q). The customer traffic is identified by a Vlan ID (VID) referred to as the C- tag (customer VID) in the 802.1Q framing format. When the C-tagged frame goes upstream to the service provider, it is encapsulated again by the carriers provider bridging edge network. Using 802.1ad encapsulation, the C-tag is then wrapped up with an S-tag (Service VID). Encapsulation in the carrier network allows for overlapping customer VIDs.
Provider Bridging POS VoIP Data One Data Transfer One Time Classroom Technologies
Network Design Concepts Use Concepts for Network Security Conceptual Simplicity Appropriate Sized Pipes Flexibility Holistic Security Continual Improvement Test Documentation
Network ReDesign IPS and FireWall Deployment
Network Security Roadmap Phase I Deploy Currently Firewalls, IPS Phase II Ongoing Review & Early Discovery NAC, VPN, AD, Web, Integrating AD - Wireless
Intrusion Protection System (IPS) HP (Tipping Point) Selected Deploy into Production Jan 31, 2013 Current Config Digital Vaccine twice/week Dual Boxes for High Availability Reputation Filtering Weekly Meeting to Review Rules
FireWall Palo Alto 5060 20Gbps throughput Dual Boxes Currently in Bid Process Completed Will install in audit mode - Done Tighten down with rules to deny all - Weekly meet to approve Rules into Production
Do we need IPv6? Private IP address ranges The ranges and the amount of usable IP's are as follows: 10.0.0.0-10.255.255.255 Addresses: 16,777,216 Only for translating to Government World
Private IP Space <-> NAT <-> IPv6/IPv4 NAT Network Address Translation
Questions Gary Bauerschmidt Associate Director, IT Networks gbauers@unm.edu