. SOPAC Franck Martin Consultant SOPAC Private Mail Bag, GPO Suva, Fiji Fax:+679 370 040 Franck@sopac.org.fj INTERNET For noncommercial Organisations.......... Network Affiliate Membership Application
. INTERNET for noncommercial Organisations Network Affiliate Membership Application 1. Status of this Document...3 2. Background...3 3. Definitions...3 4. Acceptable Use Policy...3 4.1 SOPAC... 3 4.2 Function of SOPAC... 3 4.3 Inclusion of support services as acceptable use... 4 4.4 Affiliate membership... 4 4.5 Academic and Research Traffic as Acceptable... 4 4.6 Peer Traffic as Acceptable... 4 4.7 Illegal Use as Unacceptable...4 5. Conditions of use...4 5.1 Network Access... 5 5.2 Network Connection... 5 5.3 Disclaimer of Liability... 5 6. Fee structure...5 7. Network considerations...6 7.1 TCP/IP Network numbers... 6 7.2 INTERNET Domain Name System... 6 7.3 Security... 6 8. SOPAC INTERNET Link Network Affiliate Membership Application...7 9. Application Form for valid IP Number...9
9.1 Sample Form... 9 9.2 Blank Form... 10 2
1. Status of this Document. This document describes procedures to connect to the INTERNET link provided by SOPAC. It describes liabilities between SOPAC and members of this INTERNET link, as well as liabilities between members themselves. 2. Background SOPAC is proposing to offer INTERNET in Fiji for all non-commercial organisations. The costs will be shared amongst all participants including SOPAC who in addition will administer the service for the benefit of all. The first advantage is that the starting implementation will be at low level and costs will be known in advance with no surprises due to the success of your services or the success of INTERNET in your organisation. The second advantage is that SOPAC has a knowledge of the INTERNET and has the basic resources to establish an INTERNET link: UNIX SUN SparcStation plus NT servers with Dial-up connection. The third advantage will be to provide free/low-cost INTERNET access to the government sectors in the Pacific through the PEACESAT network. SOPAC will be able to back-up the PEACESAT Honolulu site in its INTERNET connection, and therefore provides another way to access the island countries for regional organisations based in Fiji. 3. Definitions SOPAC: South Pacific Applied Geoscience Commission Network Affiliate Member: Any non-commercial organisation connecting to SOPAC INTERNET Link which has signed this document. SOPAC INTERNET Link: Connection of SOPAC to an INTERNET Service Provider. SOPAC is providing the INTERNET link, but is also a Network Affiliate Member. 4. Acceptable Use Policy Network Affiliate members are required to comply with SOPAC INTERNET link acceptable use policy. 4.1 SOPAC The South Pacific Applied Geoscience Organisation is a regional organisation, with 16 member countries in the Pacific. 4.2 Function of SOPAC SOPAC s aim is to develop in accordance with its member countries, the capabilities in geoscience of its member countries. As such, SOPAC is seeking to enhance link between international scientific institutes and the geological departments of its member countries. The access to the INTERNET is seen as a way to enhance the interest of international scientists and donors for the Pacific as well as providing a tool to the Pacific countries to access international information, including other Pacific states information, as well as studies and advice. 3
4.3 Inclusion of support services as acceptable use The use of SOPAC INTERNET Link in connection with the administrative activities of the member organisations of SOPAC INTERNET Link, use for institutional support services, and use in support of the various infrastructure service support activities associated with the academic and research enterprise, are considered to be acceptable use of SOPAC INTERNET Link. 4.4 Affiliate membership The use of SOPAC INTERNET Link by organisations requires the execution of an SOPAC INTERNET Link Affiliate Membership Application between the organisation and the Affiliate Members represented by SOPAC. SOPAC reserves the right to reject or approve each application for Affiliate Membership, which it will consider on a case by case basis, upon recommendation of the Affiliate Members. 4.5 Academic and Research Traffic as Acceptable Traffic relating to the national academic and research enterprise is considered acceptable use of SOPAC INTERNET Link. 4.6 Peer Traffic as Acceptable Traffic originating from peer academic and research and in general noncommercial organisation networks which conforms to the originating networks acceptable use policies is in general considered acceptable traffic to be carried over SOPAC INTERNET Link. 4.7 Illegal Use as Unacceptable SOPAC INTERNET Link facilities cannot be used by any individual or group of persons for any activities of an illegal or fraudulent nature, including any activities prohibited under the Fijian Law. However SOPAC is not responsible for such use, but after discovering traffic of this nature, SOPAC will warn the organisation originating such traffic, and if no acceptable measures are taken SOPAC will terminate the membership. SOPAC in conjunction with all Affiliate members will be the sole arbiter of which categories of material are considered acceptable or unacceptable for transmission over SOPAC INTERNET Link. Notwithstanding previous paragraph, permission may be granted for a member to use SOPAC INTERNET Link to transmit or receive specific materials not normally considered acceptable if the request to transmit such materials is supported by the Chief Executive Officer of the organisation requesting such materials. If material which SOPAC and the Affiliate Members has resolved not be transmitted is found to have been transmitted over SOPAC INTERNET Link, then the membership of the network member responsible for that action may be terminated by SOPAC. 5. Conditions of use Use of SOPAC INTERNET Link must conform to the Acceptable Use Policy. The Affiliate Members reserve the right to disconnect the Affiliate Member in the event of serious operational or security incidents arising through the Affiliate Member s connection to SOPAC INTERNET Link, or in the event of continued abuse of these conditions of Use of SOPAC INTERNET Link (where the Affiliate Members retain the right to determine what constitutes such abuse). 4
The Affiliate Member must be a non-commercial organisation. 5.1 Network Access The Affiliate Member cannot under these terms, allow third party organisations or individuals to gain access to SOPAC INTERNET Link via the Affiliate Member s facilities. This includes the explicit prevention of access to SOPAC INTERNET Link by either direct network layer or indirect gateway services. However, such access may be tolerated, if the individual or third party organisation is operating under a project involving this individual or third party organisation with the Affiliate member organisation for the sole duration of the project. A clear statement must be written to SOPAC for the Affiliate Members and approved by the Affiliate Members. A strictly mail service between an individual or third party organisation and the Affiliate Member s facilities is tolerated without approval, if the Affiliate Member can prove upon request the necessity link between its organisation and the individual or third party organisation. In all case the individual or third party organisation must respect the Conditions of Use, and are under the responsibility of the Affiliate Member. 5.2 Network Connection The physical connection from the Affiliate Member to SOPAC INTERNET Link is to be terminated at a location that will be nominated by SOPAC. Affiliate members can propose to host the termination of this new connection to avoid acquisition of expensive equipment for the new Affiliate Member. The type and characteristics of the physical connection must be approved by SOPAC or by SOPAC and the hosting Affiliate Member, prior to installation. The physical link must be terminated on the Affiliate Member site with equipment which has the prior approval of SOPAC as being technically compatible with SOPAC equipment. The responsibility for operational support and maintenance of the link, and the equipment associated with the physical link on the Affiliate Member s site is that of the Affiliate Member. The responsibility for the maintenance and operation of equipment on the SOPAC site or the hosting Affiliate Member is that of SOPAC or the hosting Affiliate Member. It is recommended to Affiliate Members to develop network links between themselves to insure redundancy and security of the connections. 5.3 Disclaimer of Liability SOPAC or the hosting Affiliate Member accept no responsibility for any loss or damage which may be incurred by the Affiliate Member through the connection to SOPAC or the hosting Affiliate Member. Affiliate Members connect to SOPAC or the hosting Affiliate Member at their own risk. 6. Fee structure It is not the intent of SOPAC to provide INTERNET services to Affiliate Members at a level of charges where SOPAC is subsidising such services. The underlying principle of the charge schedules relating to Affiliate Membership of SOPAC INTERNET Link is to reflect the actual costs associated with the service as far as 5
it is feasible. In so doing, the charging model adopted by SOPAC is that of fixed monthly charges to Affiliate Members of SOPAC INTERNET Link - there are no usage based charges. Affiliate Members are requested to subscribe for 6 months minimum. At least 3 month payments are requested in advance. 7. Network considerations 7.1 TCP/IP Network numbers All INTERNET Network Numbers in use must be numbers which have been allocated by the Network Information Centre in the United States, or by the Asian Pacific Network Information Centre in Japan. If this is not the case then you are required to obtain a NIC-allocated network number before you may be connected. SOPAC can provide details on how this can be done and recommend that it be undertaken as soon as practicable, even if your organisation is not planning a connection to SOPAC INTERNET Link in the short or medium term. SOPAC must be advised of all INTERNET network numbers, and the associated network names in use by the network Affiliate Member. This information is required to implement routing and gain access to the rest of the INTERNET. For this reason, SOPAC asks that organisations planning a network Affiliate connection advise SOPAC of their NIC network numbers at the earliest opportunity. Routing information will be exchanged between the SOPAC hub router using the Routing Information Protocol (RIP). Your gateway will receive a default route from SOPAC. And SOPAC will only accept routing information for your nominated network number(s). You should ensure the router that supports your link to SOPAC INTERNET Link advertises routes to your organisation s connected networks to SOPAC INTERNET Link using RIP. 7.2 INTERNET Domain Name System Network Affiliate Member must either maintain a Domain Name System (DNS) server to support their portion of the INTERNET DNS or arrange for another site to do so. This name server and its associated secondary name servers, must provide both name to number mappings and the reverse number to name mappings. Domain Name ending by the suffix fj for Fiji are obtained at the computer centre of the University of the South Pacific. 7.3 Security Once connected to SOPAC INTERNET Link, Your organisation has access to all the (considerable) resources of the INTERNET. Unfortunately, all of the INTERNET also has access to you. To reduce the possibility of unauthorised access to systems under your control there are a number of basic measures that should be undertaken that are applicable in any networked environment. The most fundamental are: No account should ever have a null password Never provide guest accounts that do not require a password to obtain access. Ensure that your users use secure password, i.e. a combination of letters and digits and avoid simple words or birth dates. 6
Be sure you understand the implication of offering network based services that might allow remote systems to obtain sensitive data such as password files. Read the sections on security in the manuals provided by your computer vendor, and ensure you have installed all appropriate software bug fixes and patches. For organisations that require additional security, SOPAC recommends the use of a router based connection to SOPAC INTERNET Link. Routers such as the Cisco products provide extensive access control mechanisms, that disallow logins from outside your physical network, thereby engineering a network firewall between your network and SOPAC INTERNET Link. 8. SOPAC INTERNET Link Network Affiliate Membership Application On the behalf of the organisation listed below I wish to apply to be a Network Affiliate Member of SOPAC INTERNET Link. I have read and understood the Terms and Conditions of Connection to SOPAC INTERNET Link stated in this document. I understand that my organisation will abide by the Terms and Conditions of Affiliate Membership of SOPAC INTERNET Link. I understand that following initial approval as an Affiliate Member of SOPAC INTERNET Link, SOPAC will nominate a connection point for a physical connection and provide advice as to the method of connection. I understand that following evaluation of the connection proposal I will be billed every 3 months for a minimum subscription of 6 months. I will also be charged an initial connection fee covering the expenditure of SOPAC in establishing the connection. I understand that I will be invoiced for this service every 6 months unless SOPAC receives my organisation s written advice to terminate the Affiliate Membership of SOPAC INTERNET Link at least 3 months in advance. Due to the costs of maintaining the link to an overseas INTERNET Service Provider, if my organisation termination implies the termination of SOPAC INTERNET Link, all remaining Affiliate Members will be called on a meeting to reconsider this termination. If no agreement is reached or solution found, SOPAC will be obliged to terminate the SOPAC INTERNET Link without notice. All remaining subscriptions will be refunded, after any costs deducted, in proportion of the payments already made for the remaining months. No extra liabilities can be engaged against SOPAC. I understand that SOPAC may vary the network Affiliate Membership charges from subscription to subscription after due consultation with the Affiliate Members, and maintains the right to cease offering this service to my organisation at the end of any period of 6 months, except in case of external events to SOPAC, where the service can be stopped at any time. I understand that in the event of any variation of the network Affiliate Membership of SOPAC INTERNET Link, my organisation will be advised in writing to the address below. I understand that in consideration of the SOPAC INTERNET Link Affiliate Membership, SOPAC will undertake to maintain a data communication link between SOPAC and my organisation. Furthermore I accept that there is no other undertaking made by SOPAC in terms of reliability of the network connection service, nor any other form of undertaking by SOPAC in consideration of the payment to SOPAC for the maintenance of the network connection service to SOPAC INTERNET Link. 7
My organisation undertakes to use SOPAC INTERNET Link facilities within the terms and conditions stated in the SOPAC INTERNET Link Acceptable Use Policy. I accept the right of SOPAC to immediately terminate this service at its discretion if these undertakings are abused by my organisation (where SOPAC and the Affiliate members retain the right to determine what constitutes such abuse). Date: Name of Organisation: Name: Position: on behalf of the organisation named above. Address: Contact Officer: Network Administrator Name: E-mail: Phone: Fax: Installation fee $850 or Installation Upgrade fee $450 6 month connection $4200 I subscribe to SOPAC INTERNET Link. I pay every 3 months Payment is attached (all payments are in advance) I pay every 6 months Please send invoice. Configuration details (if known): INTERNET Network Numbers in use by my organisation: INTERNET Domain name in use by my organisation or preferred domain name: Signed: 8
9. Application Form for valid IP Number 9.1 Sample Form The APNIC-002 form filled out below contains the necessary sections of an application for a network at mythical "Non Existent University" in the mythical country, Some Where (ISO code SW). It is assumed that the technical contact has already been registered with the APNIC and thus has been allocated an NICName. In addition, it is assumed Non Existent University has already had 2 networks allocated to it, 202.128.45.0 and 202.128.46.0. country: admin-c: tech-c: Non Existent University Network Art Department Somecity, Thatprefecture SW Robin L Smith mj1005fc person: Robin L Smith address: Non Existent University, Art Department address: 12-456 Campus Drive address: Somecity, Thatprefecture, 1B2-5E6 address: Some Where phone: +12 345 6789 0 fax-no: +12 345 6789 1 e-mail: rlsmith net.neu.ed.sw form: APNIC-002.0 (1/1/94-7/1/94) request-type: 2 class C machine-0: 100 machine-1: 200 machine-2: 300 subnet-0: 1 subnet-1: 1 subnet-2: 2 inet-connect: plan to connect 930401 Net-Provider Inc. exist-ip-net: 202.128.45.0 202.128.46.0 net-country: SW 9
9.2 Blank Form country: FJ admin-c: tech-c: person: address: address: address: address: phone: fax-no: e-mail: form: request-type: machine-0: machine-1: machine-2: subnet-0: subnet-1: subnet-2: inet-connect: exist-ip-net: net-country: FJ This document when completed must be send to: Asia Pacific Network Information Centre c/o University of Tokyo, Computer Centre Email: hostmaster@apnic.net 2-11-16 Yayoi, Bunkyo-ku Tel: +81-3-5684-7747 Tokyo 113 JAPAN (Temporary address) Fax: +81-3-5684-7256 10