Evolution : Early 90’s • Multi User Centralized Main Frame Systems with proprietary OS and specialized engineering applications at corporate centre in Fully AC, Dust free Computer Centre at Corporate Centre. • Similar system at RLDCs for Real time Data acquisition(Siemens system at NRLDC,ERLDC & ABB system at WRLDC • These systems were mainly used for analysis and reporting Evolution:Mid 90’s • With evolution of Personal computer 286,386 computers came out of the computer centre and there was transformation from centralize computing to distributed computing. • Computer used for word processing and Spread sheets with CUI softwares like wordstar and Lotus. • To fulfill the need of information sharing on limited basis these network were connected through BNC cabling system and Novell Server was used mainly for File sharing . Late 90’s to 2002 • In late 90’s and early 2000 there were substantial development in H/W & S/W and networking area. • • • • • Hardware: 486,pentium I/II/III OS: Win 3.1/ Win 95/Win 2000(GUI)/Linux Office : Office 95/97/2000 NOS: WIN NT/WIN 2000 Server/Linux Networking: UTP Cat III/IV/V,Hub & switches • These technologies were adopted in the company and GUI based networking was carried out at Corporate & Regional level. • Intranet Application,File sharing ,Use of Internet,Email. Communication/Network Infrastructure Communication / Network Infrastructure Intra Organisational 64 kbps TDMA VSAT-All RHQs, RLDCs and CC (Intranet) -Data channel interlink -Voice Communication 2 MBPS Leased line between KS & HC LAN at CC, RHQs and RLDCs Dialup / Leased Internet access at RHQs and RLDCs at SS Sub Stations – VSAT at Rengali, Durgapur, Indravati, Jaipur, Siliguri Inter Organisational 128 kbps VSAT Link through NIC to MOP and all CPSUs, CEA (CPSUNET) 6 The Infrastructure • IT Network connecting 18 locations Corporate Office, Regional Head Quarters, Regional Load Despatch Centres and 5 substations – LAN at all locations – WAN over leased VSAT Network – External Connectivity – Dedicated Internet Connectivity at Corporate and Regional Offices – VSAT connectivity with other Central PSUs under Ministry of Power • Remote Dial-in access to the Network 7 Switched Ethernet LAN Nehru Place office Remote Dial-in 128 kbps leased line INTERNET VSAT link With RHQs / RLDCs (2 x 64 kbps CUG) 2 Mbps link Router / RAS Mail server, Proxy server 128 kbps leased line Router / Firewall Public Domain Severs HUB 128 kbps VSAT link Other CPSUs, and MOP 10/100 Mbps Switches Katwaria Sarai office Intranet server Application server File server/ Novell Directory services Domain controllers / Active Dir. services Terminal server CD server Network servers IT Network set up at Corporate Centre 8 NICNET Operating Environment: Win 2000 / NT servers Novell 5.1 Linux Win 2000/98 clients Multi-CPU servers Desktops & Thin Clients POWERGRID VIDEO CONFERENCING NETWORK ARCHITECTURE CC KS NEW DELHI Dedicated leased line (2 Mbps) SR1 SECUNDERABAD NR I FARIDABAD NR II JAMMU CC HC NEW DELHI PUBLIC TELEPHONY INFRASTRUCTURE SR II BANGALORE NER SHILLONG WR NAGPUR Ministry of Power New Delhi ER PATNA Any other location in India/ abroad With VC and ISDN facility ISDN PRI Channel (30 x 64 kbps) ISDN 3 x 128 Kbps •Conferencing speed : 384 kbps between any 2 locations 2 Mbps leased line 9 •Additional standby line 128 kbps at all locations •Conf. between HC and KS possible at 768 kbps over leased line Need for Integrated IT Plan Need for integrated IT plan & Policy was felt in order to. • Keep in pace with the IT Technology • Reap maximum benefits with well justified investment • Address the security Concern Work done in this direction: • IT Policy • Security Policy (Approved by BOD) • Feasibility Report (Approved by BOD) on “EWAN”(a integrated enterprise wide IT infrastructure & Application Deployment project 10 Salient Feature of EWAN • Total project cost 32 Crs. For IT infrastructure and network connectivity from Corporate level to Sub-Station level. • Work to be completed in Phases. • Establishment of High availablity(24 x 7) Data Centre at Corporate office Gurgaon for deployement of centralised application like FAS, Intranet/Internet application and finally ERP roll out. • Usage of Telecom Network for connectivity. • Establishment of converged network i.e network carrying Voice, Video & Data 11 Salient Feature of EWAN EWAN project comprises of 8 Packages • Gurgaon LAN & Data centre package • Wide Area Network Package • UPS package • VOIP package • Sub-Station LAN Package • Gurgaon Multi Media package • ERP Package 12 Gurgaon LAN Package This package consist of three major components:Local Area Network : providing connectivity to all the 600 computers & printers at Corporate centre and the servers hosting Enterprise applications. Data Center: Designed to ensure security, high uptime and scalabity in future Routers: Provide high speed connectivity to RHQs and RLDCs 13 Loacl Area Network Salient Features: Consist of 1200 nodes with 2-tier Architecture Avaya Cat 6 cables used for horizontal span Multimode (50/125 um) fiber (1000 SX interface) with redundancy for vertical span Layer -2 switch stack with fiber module for desktop connectivity. High back bone layer 3 central switch with all redundancies Copper Giga bit Ethernet for Server and Fiber Gigaethernet for Layer-2 stack switch connectivity 100 Mbps interface for WAN connectivity. QOS aware with security features at layer 3 & layer 4 14 LAN Architecture At Gurgaon 8th Floor 7th Floor 6th Floor 5th Floor 3rd Floor 2nd Floor 1th Floor 0th Floor 15 Data centre Components of Data centre Intel Based Rack Mount Server for Network Applications RISC based Servers with SAN storage solutions for Database (ORACLE) Security sub-systems Intrusion Detection System Firewall Back up Library with backup software Redundant UPS with adequate battery backup and auto start DG set. Floor Mounted AC system KVM switches Management Software's like HP Open View, Ciscoworks etc 16 H U B INTERNET PIX525UR PIX525FO H U B H U B LEASE LINE CLOUD I P 330 IDS- NOKIA ROUTER CENTRAL ROUTER CISCO-3745 SITES ROUTERS( 13 SITES CISCO 2691-- 8 NOS CISCO 3725---1 NOS CISCO 2651 XM-4NOS LAN - 1000 MBS UTP LINKS CENTRAL SW ER-16 ENTERASYS N A S SCSI NMS-SYSTEM FIBER BACKBONE INTEL SERVERS FARM 10 NOS RISC - SERVERHP 1.HP OPEN VIEW 2.CISCO-WORKS 3.ENTRASYS-ATLAS FIBER SWITCH TAPE LIB HP5060 S/W PACKAGES: ENTERASYS HOST BASE IDS -6 NOS STORAGE BOX ENTERASYS VH-2492S TOTAL 59 SW IN 18 STACK 1. WIN-2000 ADVANCE SERV FOR INTEL-SERVERS 2. HP UX 11i FOR HP-5060 LIB 3.EXCHANGE 2000 - 2 NOS 4. HP OMNIBACK FOR HP5060 LIB 3 COM WIRELESS 5. NMS H.P OPEN VIEW CISCO-WORKS ENTRASYS-ATLUS 6. CITRIX -XPE -- 1 NO FOR REMOTE CONSOLE 7. SHARE PORTAL ACCESS DEVICE W/S WIN2000 POWERGRID- GURGOAN- NETWORK 17 8. ORACLE Services provided • Directory Services: Keeps centralized repository of all the resource and single point authentication (Windows 2003 based ADS) • Intranet/Internet Services • Mail Service: For incoming and outgoing mail Distribution • Thin Client Services: Allows Server Based computing • File and print Services : For File sharing and printer sharing • Backup Services: Provides Data Backup till the last backup point • Database Services: Provides Oracle 9 Database at the backend for the Finance and Accounting System 18 Services provided • Firewall :It is placed at the edge of the Network and provides security to the Internal network • Intrusion detection system: In case any body is trying to hack the Network It detects it and sends alert alongwith taking suitable action • Proxy Services: Isolates internal network user from external world and performs caching • DNS Services: Resolves IP address from name • DHCP Services: Provides IP address to each of the host 19 Wide Area Network Package • Routers :Cisco 2691 for RHQs, Cisco 2651 for RLDCs, Cisco 3725 for SR2TS, Cisco 3745 fro CC. • All the Locations connected through 2/10 Mbps leased link in a mesh network formation for redundancy. • Presently majority of links from BSNL ,to be replaced by POWERGRID’s Telecom link • JAMMU and Shillong connected on PAMA VSAT • Connectivity being extended to sub-stations. • OSPF used as routed protocol • Left over Sub-Station to be connected by Shared VSAT Back Bone for Converged Application 20 21 POWERGRID WAN Voice Net • To provide Voice communication facility among the employees at CC,RHQs and RLDCs using the same WAN infrastructure without any incremental running cost. • 600 telephone set at CC, Gurgaon 140/90 at RHQ 60 each at each of the RLDCs. • Provision for interface of Fax, MFD, Video Phones etc. • Initially will work in CUG but after permission from TRAI, will be integrated with PSTN system. • Along with the extension of WAN VOIP ot be extended to Sub-station which will be controlled by respective RHQs. 22 23 SCHEMATIC OF LAN INFRASTRUCTURE AT SUB-STATION Connected to Shillong through Optical Fiber Network Local Server ADM Administrative Building Control Room Stores 8 Port Switch 10 Mbps UTP to Fiber Converter 62.5/125 MM 6 Core armored fiber AC1 Equipment 24 Stores Single Mode Telecom Fibre Mail Services 25 • Exchange Server 2003 as mail server using user details from Active Directory Services of Windows 2003 • Presently NERTS,NR1 and CC Mail system working in single Active Directory Mode other Regions are connected through SMTP connectivity. • Finally all user to be migrated to single ADS and Mail system • Front End and Back End architecture followed for security. • IP Address of web based interface of Front End mail server • http:// 203.200.81.8/exchange • http://192.168.1.45/exchange • Mail from sub-station to reside on the Mail Server at Respective RHQ. Mail Services • Each user provided Mail Box of size 50 MB • Presently HTTP interface provided from outside world Plan to extend RPC-over http from front end server. • Exchange,POP3 ,SMTP ,HTTP interface for inside users. • For prevention of SPAM Mail ORDBL.org database,SPAMorg and Inteligent Message Filter is used . • Symantec Server Anti-virus at front-End mail Server and Trend micro Mail gateway protect at Backend 26 Thin Client Services • Thin client is the technology where all the processes run at server and only display is transferred to the low end diskless user machine. • Three Dual CPU pentium IV servers with 2 GB RAM are being used as thin client servers which are providing services to around 250 thin client at corporate centre. • Thin Client environment provides ease in management of – – – User Data User Hardware User OS or software upgrade etc. Seamless integration of Thin Client and Thick Client 27 28 Backup Strategy for Servers S.N . Server Name 29 Monday Tuesday Wed Thrusday Friday 1 CCGGTS1(USERS/DFS1) FULL(8.30 pm) INC(8.30 pm) FULL(8.30 pm) INC(8.30 pm) INC(8.30 pm) 2 CCGGTS1(DEPT) FULL(10.45pm) INC(10.45p m) INC(10.45pm) FULL(10.45p m) INC(10.45p m) 5 CCGGTS3 FULL(11.45 pm) INC(11.45p m) INC(11.45pm) FULL(11.45 pm) INC(11.45p m) 6 CCGGTS3(USERS/DFS2) FULL(9.00pm) INC(9.00pm) INC(9.00pm) FULL(9.00pm) INC(9.00pm) INTRANET(D-drive) Every Sunday 10.00 AM 7 INTRANET(INETPUB) FULL(1.00am) INC(1.00am) INC(1.00am) FULL(1.00am) INC(1.00am) 8 CCGGMS1(MAILBOX) FULL(2.30am) INC(2.30am) INC(2.30am) FULL(2.30am) INC(2.30am) 9 CCGGMS1(Full) Every Sunday 4.00 PM 10 CCGGSS1(FULL) Every Sunday 12.00PM 11 ORACLE(Database+Archive log) Daily 4.00 AM Full 12 ORACLE(Archive Delete)) Every 3rd Day (DEPT ) Real Application Clusters Node 1 Node 2 FASNEW SERVER failure - database remains available EXTRA SLIDES 31 Networking Basics •Definition of Computer Networks:>Computer Network is said to be Interconnected collection of autonomous computers (unlike the Old central system). •Types of Computers Network(Based on Distance) LAN (Local Area Network) 10m-1 km MAN (Metropolitan Area Network)10 km WAN (Wide Area Network)>10 to 1000km Internet Internet is networking of number of networks across the world 32 Networking Technology •Types of Computers Network(Based Transmission Technology): Broadcast Network :This technology is genrelly used in LAN environment ,Traffic can be Unicast, Multicast or Broadcast Point to Point Network: This Technology is used on WAN environment, Dial up Network to Internet •Development and standardization of Computer Networks: During Initial phase of development each individual networking companies were having there own networking solution. which resulted in no of network island and connecting two different network was a tough and expensive task. 33 TCP/IP Model • To overcome this problem International standards organization proposed Open System Interconnection reference Model.The whole network architecture has been divided into seven layers for ease of simplicity.These layers are – – – – – 34 Physical Layer Datalink layer Network Layer Transport Layer Application Layer LAN Physical Layers Options BNC Cabling System: obsolete system, generally used in early and mid nineties LAN system ,Inherent design problem – Thin Ethernet :10 Base 2,0.2 inch dia,Bus Architecture,185 mtrs,30 computers – Thick Ethernet :10 Base50.4 inch Dia,Bus Architecture,500 mtrs. 100 Computers 35 LAN Physical Layers Option UTP Cabling System:(Star Architecuture,used for horizontal and vertical cabling,widely used presently CAT 5E and upcoming Cat 6) Category 3:10 Mbps,100 Mbps half Duplex(using three pairs for Data transmission and fourth pair for Collision detection) Category 5,5E:100 Mhz frquency,Suitable for 100 Mbps using two pairs, Gbps using four pairs Category 6: 250 MHz frequency ,better profile ,More suitable for Gbps Category 7: 700 Mhz ,Suitable for Giga bit speed on copper 36 LAN/MAN Physical Layers Option • FIBRE Back Bone: Used for Backbone cabling and Campus cabling.Generally 62.5/125 Um and 50/125 Um Multimode Fibre is used for Back bone cabling of the LAN system. – 100BaseFX:upto 400 mtrs., 100 Mbps – 1000 BaseSX:260 Mtrs.,1000 Mbps – 1000BaseLX:Single mode fibre,3 Km to 10 Km. 37 Physical Layer Option(WAN) • • • • • 38 Dial Up Connection:Provides upto 56.6 Kbps on normal PSTN Line.Computer connects to modem thru RS-232 9 pin connector. Lease line :Provides permanent point to point connectivity Generally ranges from 64 Kbps to several E1.Lease line modem Connected to the router on Sync/Async port. ISDN BRI Dial Up Line:Digital link provide 64 Kbps speed , one ISDN contains two data channel of 64 Kbps and 16 Kbps control Channel. Connected to Router through NT(for S/T interface) or with U interface u don’t need NT VSAT:TDM/TDMA outbound 2 Mbps to all the users and inbound 128 Kbps shared in a group. VAST PAMA: Point to point clear channel allocation,Modem Connected to Router and the IDU unit of the VSAT Devices based on IEEE 802.3 • BNC cabling system with Thin COAX Cable and NIC with T-connector on the system connected to the LAN. • HUB Based system with 10 or 100 Mbps speed with common collision and broadcast domain. Separate UTP Cabling from each of the system to the HUB device. System with NIC of RJ45 Interface • Switched Ethernet :10/100/1000 Mbps speed with separate Collision domain and common/separate broadcast Domain. UTP Cabling for horizontal span and UTP/Fibre cabling at vertical span.Switching type,STP,VLAN 39