Here are the main risks to the campus network infrastructure

advertisement
Core Infrastructure Assets and Services (V3)
Telephony Services
N.B. These are subject of separate risk/impact assessment by Telecomms Executive
Committee and so are not considered further.
Cable Plant
Core Fibre Ring
Provides resilient backbone communications circuits.
Dependencies;
External ducts, internal containment systems, Patch panels and patch cords
Fibre Spurs
Provides communications circuits to individual Buildings
Dependencies;
External ducts, internal containment systems, secure Communications cabinets,
Patch panels and patch cords
Building PDS
Provides Local Area Network communications circuits and telephony circuits
Dependencies;
Internal containment systems, secure Communications cabinets, Patch panels and
Patch cords
Leased circuits including dark fibre
Provides communications circuits to Remote sites
Dependencies;
Contracts with PTOs
Installation and maintenance
Provides new communications circuits and Maintenance of existing circuits
Dependencies;
Maintenance spares and maintenance contracts
Routers and edge devices
Core and edge Routers – Provides campus Routing services.
Dependencies;
Routing information from other routers
Configuration file – Flash cards and memory subsystem
Power supplies
Switch fabrics
Line cards
Edge devices (switches and hubs) – Provides Ethernet Local Area
Network (LAN) services
Dependencies;
LAN and Backbone connections
Active configuration
Power supplies
Interfaces
Core Services
Routing service IP (IPX AppleTalk)
Implements protocol specific Routing services underpinning all campus Network
applications. N.B. IP only by July 2006 with IPX and AppleTalk phased out.
Dependencies;
Campus Routers and active configurations
LAN connections
SuperJANET access
Provides access to the SuperJANET backbone and the Global Internet
Dependencies;
SuperJANET access router with direct links to Glasgow BAR and
ClydeNET
Campus routing service
Remote site interconnect
Communications, Routing and Network Services to remote sites e.g. Teaching
Hospitals, Garscube estate, Crichton campus etc
Dependencies;
Communications circuits
LAN connections
Campus Routing service
Network management
Fault monitoring, performance monitoring and Tuning
Dependencies;
Monitoring equipment
Network database
Site ‘details’ documentation
Network maintenance
Fault fixing, and Port activations
Dependencies;
Maintenance contracts
Spares holdings
Network Development
Network design, network upgrades
Dependencies;
Development Time
Access to appropriate hardware
Liaison with other departments e.g., E&B
IT strategy
Network security
Network monitoring, network segmentation, ACLs
Dependencies;
Monitoring equipment
Routers/Switches with ACL support
Networks re-design
Universal access
Remote access services – dial up VPN
Flexible access services – WiFi and wired
Dependencies;
Dial in hardware
VPN concentrators
Wireless Access points
LAN connections
Campus routing service
DNS service
SuperJANET access
Backend security and authentication provisions
Information security
Security advice, awareness, policies, guidelines, compliance
Monitoring and Cirt
Dependencies;
Community support
Management buy-in
Dedicated security team
Monitoring equipment
DNS
Manages campus namespace and name/address bindings
Dependencies;
DNS servers
LAN connections
Campus routing service
SuperJANET access
Connectivity with Root servers
Security services
DHCP/BootP
Manages IP address allocations
Dependencies;
DHCP/BootP servers
LAN connections
Campus Routing and DHCP/BootP forwarding service
Valid configuration tables
Auditing procedures
Security services
Mail servers and relays
Provides e-mail relay and delivery services.
Implements anti virus and anti Spam measures
Dependencies;
E-mail and Relay servers
LAN connections
Campus Routing service
Security services
DNS service
SuperJANET access
WWW caches
Provides a manageable WWW access service with Inherent control points that
provide content filtering options, audit trails and some incident containment
measures.
Dependencies;
WWW proxy servers
LAN connections
Campus routing service
Security services
DNS service
SuperJANET access
Public WWW servers
Information about most aspects of the University
Dependencies;
WWW servers
LAN connections
Campus routing service
Security services
DNS service
SuperJANET access
Filestore Services
File servers, SANs – Implements reliable and persistent filestore that
Underpins many network services including e-mail, SSD and CSCE
Dependencies;
File servers with DAS, NAS or SAN attached storage
LAN connections
Campus routing service
Directory services
Authentication services
Security services
DNS service
Backup services
Backup recovery – Essential part of Filestore services, ensures high
degree of data integrity in the event of system/disk failures or erroneous file
deletions
Dependencies;
Backup hardware
LAN/SAN connections
Campus routing services
DNS service
Security services
Print services
Print servers – Manages print requests from authorised users of Network
accessible printers
Dependencies;
Print queue servers and Printers
LAN connections
Campus Routing service
Directory services
Authentication services
Security services
DNS service
Printers - Provides the actual printed output
Directory Services
Manages network resources; network systems,
security, software, user accounts and Authentication/authorisation
services; Examples NDS, NIS, AD
Dependencies;
Directory servers
LAN connections
Campus Routing service
DNS services
Security services
Directory integration service
Backup service
Directory integration
Middleware that enables information in discrete directories to be shared between
other directories
Dependencies;
Meta directory hardware/software – High-level view of other directories
Connectors – Links between meta directory and other directories
LAN connections
Campus Routing service
Security services
DNS service
Backup service
Desktop services for staff/researchers
Serviced Staff Desktop (SSD); implements a consistent and secure desktop
environment aimed at improving the network services available to staff.
Dependencies;
LAN connections
Campus Routing service
DNS services
Directory services
Authentication services
Filestore services
Print services
Security services – Anti virus, patch management
Backup services
Desktop services for students
CSCE and open access workstations; implements a consistent and secure desktop
environment aimed at improving the network services available to students
Dependencies;
LAN connections
Campus Routing service
DNS services
Directory services
Authentication services
Filestore services
Print services
Security services – Anti virus, patch management
Backup services
VLE infrastructure
Dependencies;
MOODLE servers
LAN connections
Campus Routing service
DNS services
Directory services
Authentication services
Filestore services
Security services
Backup services
Video conferencing (including access grid), video teaching,
streaming Services
Provides access to the UK national academic video conferencing Network, escience access grid network, remote teaching to Crichton campus, lecture room
overflow facilities and a range of Web cast and other streaming services.
Dependencies;
VC hardware
LAN connections
Campus Routing service
DNS service
Security services
SuperJANET access
Proprietary hardware and communications circuits for
ATM based codecs
Training services
Covering a wide range of IT skills
Staff resources
Essential for efficient service delivery and development
Single points of knowledge
Support teams
Distributed – User support and faculty partnerships
Infrastructure – Core services support and development
Critical locations
Environmental, resilience and physical security
Core sites
JWN – Critical for most IT services
MIS - Critical for central administration and faculty administration
Library/Reading room – Critical resource for all staff and students and
Library catalogue
Telephone Exchange – Critical for all staff. Subject of separate study.
Funding
Staff
Need to retain and motivate high calibre staff
Maintenance
Must ensure maximum service availability
IT strategy
Need to develop services in line with University Mission and
aspirations
Download