In preparation for the new network deployment, members must review the following information. Please use the following information as a guideline for reconfiguring your edge router and turning up your new network connection.
Current Network Access
In the current network environment, members are using ATM as the access method for both the NJEDge.Net IP/VPN and Internet access. The current configuration on a typical member’s edge router is utilizing two ATM PVC’s; on one ATM sub-interface, a PVC and ip address are used for connectivity to the Internet, and, the other ATM sub-interface has a PVC and ip address that are used for connectivity to the Extranet/IP/VPN/Internet
2. Some members have additional PVCs. Members who will be maintaining their ATM access will maintain only one atm-subinterface, 1 PVC and 1 ip address. The new
NJEDge RON is designed for a converged network, supporting Voice (if desired), Data
(Internet and Internet 2) and Video (H.323). All traffic will flow over the same interface to the NJEDge.Net network. The connection provides access for Member to Member,
Member to Internet, and Member to Internet 2 traffic. Directly connected Internet 2
Members will have a slightly different traffic flow. Appendix A provides a graphic showing a typical SEGP member, while Appendix B shows a typical dedicated Internet 2
Member.
New Network Access
There are several access methods to connect to the new NJEDge.Net network. The first is using ATM; some members will need to maintain ATM access as other access methods are not cost effective, or are unavailable. The second method is dark fiber; dark fiber can also be used for optical connections for multiple campuses within the same institution.
The last and typical access method is SES (Switched Ethernet Service); over 30 SES connections have been ordered for NJEDge members. Please refer to the url http://www.njedge.net/techsection under the SES Implementation for detailed SES information.
The new NJEDge RON is a converged network and members will use a single EVC/PVC for their combined Internet and member-to-member traffic; QoS markings will continue to be used to differentiate video traffic.
IP Addressing
There will be a new ip address assignment for the interfaces on the new network.
Members connecting to the Newark Router will be assigned a /30 address from the
130.156.251.0/24 block; Members connecting to the Camden Router will use addresses from the 130.156.252.0/24 block. Direct Internet 2 members will receive a new address
4/17/2020 page 1 of 20
for the Internet 2 connection from MAGPI. Assigning these addresses will allow member to pre-configure the new connection and allow a simple reachability test to the new network without disruption the current production network. The addresses that are used for current Internet and IP/VPN connections will no longer be used and should be removed when you are transitioned to the new network.
Routing
Members are still required to run BGP on their Edge Router . Members utilizing the private ASN 65201 will be assigned a new number (Appendix C).
Most members are currently receiving the 10K plus routes from the IP/VPN connection and have a default route pointing to their Internet connection. During the transition, members must remove that default route as they will be receiving a new default route from the new connection via BGP. All members should maintain a copy of the current
BGP configuration as there will be some minimal changes. Direct Internet 2 members, as well as members who will be maintaining a second Internet connection, will be taking the full Internet routing table 204k routes on 1 EVC and 10k Routes from Internet 2 EVC, allowing BGP to make the proper routing decision for your institution. For Members wishing to run multicast, NJEDge will follow the original multicast design document.
Members wanting multicast will need to run “pim” on their new interfaces. Direct
Internet 2 members will need to run pim on both EVCs. Members may want to consider obtaining some technical assistance for this transition.
QOS
Please reference the NJEDge.Net web-site for more detailed QOS information@www.njedge.net/techsection
Members remaining with ATM access should continue to use their current QOS policies.
SES connected members will have a change for their Priority Data policies. Currently those using H.323 video conferencing are using IP Prec 4 and this can continue.
Verizon SES however is using COS 2 for this type of traffic (H.323) video and this needs to be reflected in your edge router configuration. Appendix D provides a sample configuration for a 7200 router with Fast Ethernet towards the campus and a Fast
Ethernet connection to NJEDge.Net
ADDITIONAL CONFIGURATIONS & DRAWINGS
There are five examples of configurations and drawings.
The are samples only and would have to be modified for your networks
4/17/2020 page 2 of 20
Transition Planning
Member Items to consider for planning transition:
Scheduling of Downtime
Flexibility of scheduling
DNS changes, required if using fVerizon DNS service
Edge Router re-configuration
Other Network changes?
Transition Verification
Internet Access
Internet 2 Access
Video Portal Access
4/17/2020 page 3 of 20
Plan to test the new SES service 3 – 5 days prior to scheduled migration. Using the assigned Vlan ID, configure the interface and perform ping tests on both the local and remote side addresses; see example below.
Configure Ethernet Interface For Routers (7200’s example
)
REACHABILITY TEST EXAMPLE
Perform a ping test ONLY from the router just configured; this will test the
EVC.
NJEDge_Cat6509_MSFC#ping
Protocol [ip]:
Target IP address: 130.156.251.113
Repeat count [5]:100000
Datagram size [100]:1300
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 1300-byte ICMP Echos to 130.156.251.113, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
4/17/2020 page 4 of 20
)
Configure Ethernet Interface For Routers (7200’s example)
Configure Fast Ethernet or Gigabit Main Interface
Interface Fastethernet0/0 or gige0/0
Description <Circuit ID>
Speed 100 (For Fast Ethernet Only)
Duplex full For Fast Ethernet Only)
For Gige leave setting on Auto
No Shutdown
Interface Fastethernet0/0.1 or gige0/0.1 (example .1 could also be vlan ID)
Description <Connection to NJEDge.Net >
Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)
Ip address 130.156.251.xxx 255.255.255.252 xxx=address assigned by NJEDge
No Shutdown
Interface Fastethernet 0/0.2 or gige1/0.2(example .2 could also be vlan ID)
Description <Connection to MAGPI I2>
Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)
Ip address xxx.xxx.xxx.xxx 255.255.255.252 xxx=address assigned by MAGPI
No shutdown
4/17/2020 page 5 of 20
C.
Configuring Fast-Ethernet on a 6500 with CATos and MSFC
NOTE:
Customers must configure their 802.1Q trunks in the "on" mode; Verizon SES will not negotiate trunking. STP, Cisco CDP and VTP will be dropped with
EVPL service.
Switchport Trunk
Set trunk mod/port on dot1q <vlanid>
Create Vlan
Set vlan <vlanid> <Provided by Verizon>
1 Gigabit-Port Settings
Leave as auto
100mb Port Settings speed 100 duplex full
MSFC
Interface vlan <cvlanid provided by Verizon>
Ip address 130.156.xxx.xxx<
No shut
D. Configure Ethernet Sub-Interface For Layers 3 Switches (6500’s example)
Interface Fastethernet0/0 or gige0/0
Description <Circuit ID>
Speed 100 (For Fast Ethernet Only)
Duplex full For Fast Ethernet Only)
For Gige leave setting on Auto
No Shutdown
Interface Fastethernet0/0.1 or gige0/0.1 (example .1 could also be vlan ID)
Description <Connection to NJEDge.Net >
Encapsulation dot1q xx (xx=evc/vlan will be assigned by Verizon)
Ip address 130.156.251.xxx 255.255.255.252 xxx=address assigned by NJEDge
No Shutdown
4/17/2020 page 6 of 20
Configure Switchport Interface For Layers 3 Switches (6500’s example)
Configure Switchport for Fast Ethernet or Gigabit Main Interface
Interface Fastethernet0/0 or gige0/0
Description <Circuit ID>
Speed 100 (For Fast Ethernet Only)
Duplex full For Fast Ethernet Only)
For Gige leave setting on Auto
No Shutdown
Switchport
Switchport mode trunk encapsulation dot1q
Switchport trunk allowed vlan xx (supplied bt Verizon)
Create Vlan
Config t <enter>
Vlan xxx
Name <connection to NJEDge>
Create SVI
Interface vlan xxx
Ip address 130.156.25x.xxx <supplied by NJEDge.Net)
4/17/2020 page 7 of 20
Remember to save your current configuration!!
Add an additional ATM Sub-interface
Interface atm0/0.3 point-to-point Example
Description CircuitID
Ip address 130.156.25x.xxx Assigned by NJEDge
Pvc 1/23 (example)
vbr-nrt xxxx xxxxx (x value may change)
Shutdown your two other ATM sub interfaces only
Atm0/0.1 and atm0/0.2 (example) shutdown
Leave the main interface up
ATM0/0
4/17/2020 page 8 of 20
NJEDGE will be using AS 21976. All addresses delegated to Members from the
NJEDge Network block 130.156.0.0 will need to be SWIP’d prior to transitioning to the new network. There should not be many changes for most members to your current configuration with one exception bolded below. There will be a mix of Private and Public
AS notations.
Record your current BGP configuration .
The BGP ASN number will change for members using the private number 65201.
Members with Public ASN will not change - just their neighbor statements.
Sample Configuration (Guideline Only)
4/17/2020 page 9 of 20
address-family ipv4 multicast neighbor 130.156.251.1 activate neighbor xxx.xxx.xxx.xxx activate (Internet 2 MAGPI) no auto-summary no synchronization network 130.156.34.0
4/17/2020 page 10 of 20
Appendix-A SEGP MEMBER
4/17/2020 page 11 of 20
APPENDIX – B Direct Member and SEGP
4/17/2020 page 12 of 20
Appendix C
ASN NUMBER ASSIGNMENT
Atlantic Cape Community College 65202
Bergen County College
Bloomfield
65203
65204
Brookdale Community College 65205
Burlington County College 65206
Camden County College
County College of Morris
College of New Jersey
Centenary College
College of St. Elizabeth
Cumberland County College
65207
65208
15166
65209
65210
65211
Essex County College
Fairleigh Dickenson
Hudson County College
Kean University
Mercer County College
Middlesex County College
Montclair BOE
Monmouth University
New Jersey City University
NJIT
Ocean County College
Passaic County College
Passaic Valley HS
PCTI
Ramapo
Raritan Valley CCC
Stockton
65212
65213
65214
65215
26635
65216
65217
65218
65219
4246
65220
65221
65226
42076
18794
4460
18722
Rider
Rosenet
Rowan University
Rutgers
St. Peters
Salem County College
Seton Hall University
65222
65223
33523
46
65227
65228
33538
Stevens
St. Joseph’s
Sussex County College
Thomas Edison
UMDNJ
16889
33467
65224
32450
11094
Union County College 65229
Warren County College 65230
William Patterson U 65225
4/17/2020 page 13 of 20
Appendix D- QOS Configuration Examples
Please refer to the NJEDge.Net Web Site for more information regarding QOS http://www.njedge.net/techsection (Look at the QOS Heading.)
Note that the following are just examples and may not match exactly to every member’s network configuration. Use this information as a guideline.
ATM members should continue to use their current QOS policies.
Classifying Traffic from Internal Network ip access-list extended njedge-allother-traffic
permit ip any any ip access-list extended njedge-h323-VC
permit tcp any any eq 1720
permit udp any any eq 1719
permit tcp any any eq 1719
permit udp any any eq 1718
permit ip host 155.246.1.10 any
permit tcp any any eq 1718
(you can also use an access-list to identify your h.323 traffic or other PD traffic) class-map match-any in-af41
match ip precedence 4
match access-group name njedge-h323-VC class-map match-all in-best-effort
match access-group name njedge-allother-traffic policy-map in-SETDSCP
class in-af41
set ip dscp af41
class in-best-effort
set ip dscp default
Applying Classification from Internal Network interface GigabitEthernet0/3
ip address 130.156.34.120 255.255.255.0
load-interval 30
duplex auto
speed auto
media-type rj45
no negotiation auto service-policy input in-SETDSCP
4/17/2020 page 14 of 20
Classifying Traffic out to SES/DF class-map match-all out-ROUTING
match ip dscp cs6 class-map match-any out-INTERACTIVE-VIDEO
match ip dscp af41 af42 af43
match precedence 4 class-map match-any out-DEFAULT-BEST-EFFORT
match ip dscp default policy-map SCHOOL-EDGE-TWO-CLASS-SES
class out-ROUTING
bandwidth percent 1
set cos 2 class out-INTERACTIVE-VIDEO
priority percent 12
set ip dscp cs4
set cos 2 class out-DEFAULT-BEST-EFFORT
bandwidth percent 83
random-detect
set cos 0
Applying Classification on to SES/DF Interface interface GigabitEthernet 0/2.93
description to CORE (I1) NJEDGEI
encapsulation dot1Q 93
ip address 130.156.250.94 255.255.255.252
service-policy SCHOOL-EDGE-TWO-CLASS-SES
4/17/2020 page 15 of 20
EAMPLE#1
Edge Router to SES Connection
4/17/2020 page 16 of 20
EAMPLE#2
Edge Switch/Router to SES Connection
To Campus
MODE
SYST
RPS
MASTR
STAT
DUPLX
SPEED
STACK
1X
1
2
3
4
5
6
7
8
9
10
11 12
11X 13X
13 14 15 16 17 18 19 20 21 22 23 24
23X
24X 2X 12X 14X
Member Switch
Catalyst 3750
SERIES
1 2
3 4
Create Vlan vlan xx
Description XXXX switchport switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan xxx
Create SVI Interface
Interface vlan xxx ip address 130.156.25x.xxx
802.1q Trunk
1
WS-SVC -F WM-1
A T US
FIREWALL SER VICES MODU LE
DO N OT R EMOVE CA RD WHILE
DISK CORRU PTION MAY OCC UR
SHUTDOWN
WS-SVC -F WM-1
2 A T
FIREWALL SER VICES MODU LE
STATUS LED IS GR EEN OR
DISK CORRU PTION MAY OCC UR
WS-X6724-SFP 24 PORT GIGABIT ETHERNET SFP
3
STATUS
SHUTDOWN
S P A - 2 X O C 3 -A T M 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
WS-X6724-SFP 24 PORT GIGABIT ETHERNET SFP
4
STATUS
S P A - 2 X O C 3 - A T M
10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
WS-SUP720-3BXL
5
DISK 0
TU
TA SY
TE EJEC T
SUPERVISOR 720 WITH INT EGRATED SWITCH FABRIC/PF C3BXL
WS-SUP720-3BXL DISK 0
6
SY
TE EJEC T
SUPERVISOR 720 WITH INT EGRATED SWITCH FABRIC/PF C3BXL
W S-X6704-10GE
7 TA
TU
-48 V TO -60 V
80 A
4 PORT 10 GIGABIT ETHERNET
WS- X6182 -2PA
EJECT
EJECT
DISK 1
DISK 1
PORT1
TX RX
PORT2
TX RX
FAN
INS
TA
STATUS
LL
RUN
8
S TATUS
FLEX WAN MODULE
WS- X6182 -2PA
9
S TATUS
FLEX WAN MODULE
Cisco Systems, Inc.
INPUT
OK
FAN
OK
OUTPUT
FAIL
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
S P A - 2 X O C 3 -A T M
S P A - 2 X O C 3 -A T M
CONSOLE
CONSOLE
PORT3
TX RX
PORT 1
PORT 1
PORT4
T X RX
PORT 2
PORT 2
S P A - 2 X O C 3 -A T M
S P A - 2 X O C 3 -A T M
-48 V TO -60 V
80 A
INS
TA
LL
RUN
INPUT
OK
FAN
OK
OUTPUT
FAIL
-48 V TO -60 V
80 A
INS
TA
LL
RUN
INPUT
OK
FAN
OK
OUTPUT
FAIL
Cisco Systems, Inc.
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
Power Supply 1
Cisco Systems, Inc.
Catalyst 6500
SERIES
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
Power Supply 2
Verizon Switch
4/17/2020 page 17 of 20
EAMPLE#3
Edge Switch/Router to SES Connection
Member Switch
MODE
SYST
RPS
MASTR
STAT
DUPLX
SPEED
STACK
1X
1 2 3 4 5 6 7 8 9 10 11 12
11X
2X 12X
13X
13 14 15 16 17 18 19 20 21 22 23 24
23X
14X 24X
Catalyst 3750
SERIES
1 2 3 4
Create Vlan vlan xx
Interface gig1/0.XX
encapsulation dot1q XX ip address 130.156.25X.xxx
802.1q Trunk
WS-SVC -FWM-1
1 A T
FIREWALL SERVICES MODULE
STATUS LED IS GREEN OR
DISK CORRUPTION MAY OCCUR
SHUTDOWN
WS-SVC -FWM-1
2 A T
FIREWALL SERVICES MODULE
DO NOT REMOVE CARD WHILE
DISK CORRUPTION MAY OCCUR
SHUTDOWN
WS-X6724-SFP
24 PORT GIGABIT ETHERNET SFP
3
STATUS
S P A - 2 X O C 3 - A T M 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
WS-X6724-SFP
24 PORT GIGABIT ETHERNET SFP
4
STATUS
S P A - 2 X O C 3 -A T M
WS-SUP720-3BXL
DISK 0
5
TU TE EJECT
SUPERVISOR 720 WITH INTEGRATED SWITCH FABRIC/PFC3BXL
WS-SUP720-3BXL
DISK 0
6 TU TE EJECT
SUPERVISOR 720 WITH INTEGRATED SWITCH FABRIC/PFC3BXL
W S-X6704-10GE
7 TA
TU
-48 V TO -60 V 4 PORT 10 GIGABIT ETHERNET
80 A
WS- X6182 -2PA
FAN
INS
TA
LL
STATUS
RUN
8
S TATUS
FLEX WAN MODULE
WS- X6182 -2PA
INPUT
OK
FAN
OK
EJECT
EJECT
OUTPUT
FAIL
DISK 1
DISK 1
PO RT1
TX RX
10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
PORT2
TX RX
S P A - 2 X O C 3 -A T M
CONSOLE
CONSOLE
PORT3
TX RX
SE
SE
PORT 1
PORT 1
PO RT 4
TX RX
PORT 2
PORT 2
S P A - 2 X O C 3 -A T M
S P A - 2 X O C 3 -A T M 9
S TATUS
FLEX WAN MODULE
Cisco Systems, Inc.
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
S P A - 2 X O C 3 -A T M
-48 V TO -60 V
80 A
TA
LL
INS
RUN
-48 V TO -60 V
80 A
TA
LL
INS
RUN
INPUT
OK
FAN
OK
OUTPUT
FAIL
INPUT
OK
FAN
OK
OUTPUT
FAIL
Cisco Systems, Inc.
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
Power Supply 1
Cisco Systems, Inc.
Catalyst 6500
SERIES
Switch must be in off "O" position to Install/Remove power supply.
Fastener must be fully enaged prior to operating power supply.
Power Supply 2
Verizon Switch
4/17/2020 page 18 of 20
EAMPLE #4
Edge Switch to additional Router to SES Connection
4/17/2020 page 19 of 20
EXAMPLE #5
Edge Switch with Vlan Translation thru an additional switch to a Router to
SES Connection
4/17/2020 page 20 of 20