270 likes | 284 Views
KFUPM Enterprise Network. Sadiq M. Sait sadiq@kfupm.edu.sa. Outline. KFUPM Enterprise Network Diagram KFUPM Network Model KFUPM Backbone Network Connectivity: Academic Buildings, SDN, RAS Major Acheivements in 2005: ADSL, WLAN,DCC Internet Connectivity - Statistics Summary of Network
E N D
KFUPM Enterprise Network Sadiq M. Sait sadiq@kfupm.edu.sa
Outline • KFUPM Enterprise Network Diagram • KFUPM Network Model • KFUPM Backbone • Network Connectivity: • Academic Buildings, SDN, RAS • Major Acheivements in 2005: • ADSL, WLAN,DCC • Internet Connectivity - Statistics • Summary of Network • KFUPM network services • Projects 2006
Student Dorms Buildings (19) Academic Buildings (40) RAS Dialup Users (240) ADSL WLAN DCC Network Core
KFUPM Network Model • Three layer hierarchical model • Core layer – Cisco Catalyst 6509 • Provides high speed switching between the buildings • Distribution layer – Catalyst 3550 • Gateway for the individual building, interface between access layer and Core • Access layer – HP 2524, Cisco 2950 • Connects user’s desktop to the network
KFUPM Backbone • Gigabit IP backbone • Two core switches to provide full redundancy and load sharing, high availability • Enterprise servers directly connected to core switch • Switching fabric 256 Gbps • Supports next generation of Video and Voice applications: • Video on demand, audio/video streaming, voice chatting • An important part of the university’s overall e-learning strategy
Academic Buildings Connectivity • 35 Academic and Administrative buildings are connected through 8 core SM fiber at 1 Gbps (More than 5600 network points) • 5 remote buildings are connected through HDSL links at 2Mbps (More than 70 network points)
SDN Connectivity • 19 Student buildings (801-816 & 901-913) connected through 8 core SM fiber at 1 Gbps • Two fast Ethernet connections per each dorm room • More than 2200 network points
RAS Connectivity • 240 Users can simultaneously use Dial up service • All faculty/staff dial (860)1010 & students dial 8601820 to connect to the RAS system • Special services (increased connect time and callback service) are provided for limited users depending on their requirement
RAS utilization Max: 174 connections (72.5%) Avg: 84 connections (35.0%) Current: 68 connections (28.3.5%)
Major Achievements 2005 • ADSL • Wireless LAN • DCC
ADSL Connectivity • Faculty housing is connected to the KFUPM network using 24/7 ADSL links. • Can accommodate 1000 lines. • 512 Kbps Upstream channel and 1.5 Mbps Downstream channel. • Dedicated 4 Mbps link for internet connection.
Wireless LAN • Coverage: • 37 Buildings covered, 344 wireless APs • Scalability: • 6000 users can simultaneously use WLAN • Standard: • IEEE IEEE 802.11g @ 54 Mbps • Mobility: • Seamless roaming • Secure communication: • User authentication, Data Encryption
WLAN Security WLAN Infrastructure • 802.1x based Wireless security • PEAP as the authentication Protocol. • WEP (128 bit) + TKIP for encryption. • Cisco secure access control server • Fortigate 1000 firewall, Fortireporter • Cisco 6506 core with WLSM blade • Cisco Inline Power switches 3560 for PoE • Cisco Aironet 1200 series access points • SSID for Fac/Stf is faculty and for students is student. • SSID for guest access is guest WLAN Management • WLSE
DCC Connectivity • 696 network points • DCC buildings are connected to KFUPM network through secure Wireless link • Complete WLAN coverage • Local services: • DNS, DHCP, WINS, Active Directory, Filer, Patch management, Internet proxy
Internet Connectivity • ATM (Asynchronous Transfer Mode) is being used for internet connectivity • Directly connected to KACST Riyadh using STC ATM backbone over fiber • 12 Mbps bandwidth for campus (being fully utilized) • 4 Mbps bandwidth for ADSL (being fully utilized) • 700 users are simultaneously using internet at peak times • Technically can go up to 155Mbps • PIX firewall is being used to ensure high level of security
Summary of network nodes • Academic buildings 5600 nodes • Student Dorm buildings 2250 nodes • Buildings on HDSL 70 nodes • DCC 696 nodes • WLAN 6000 users ( soft limit ) • ADSL connectivity 1000 nodes • RAS 240 lines
KFUPM Network Services • IP-TV • WWW, Email • Video conferencing • Online journal • Student Information System, Registration • Web Courses • Smart Classrooms • Active Directory, LDAP • NAS ( online storage facility ) • 200MB for fac/staff and 50 MB for students
Advantages of Present Network • Quality of service (QoS) guarantee. • Scalable • Multimedia application support. • High link speeds • Fast Ethernet to Desktops • Gigabit uplinks • Efficient bandwidth utilization. • Network security. • Better support for distributed OS and applications. • Priority-based network traffic management.
Projects 2006 • 3000 network points to be added this year • Student Housing Phase-I • 1600 network points • New Academic Classroom Building • 600 network points • New Orientation Building • 600 network points • Continuous Expansion inside the campus • New labs are added each semester
WebCT Setup at ITCWebCT Campus Edition (Ver. 4.1.5.8) > HP ML570 Server > 4-Way 2.00 GHz Intel Xeon Pentium IV Processors > 4 GB RAM > 3 - 72 GB hard disks in a hardware RAID-5 configuration > Utilization Statistics as of Semester 051 Total Course Accounts 609 Total Instructor Enrollment 690 Total Student Enrollment 22875 Total Instructor Users 388 Total Student Users 7669
WebCT Access for Non-KFUPMers • Diploma Program • Community Colleges • Dammam Girls College • Non-course-teaching Events: (Need approval from DAD & ITC to get access) • Short courses • Workshops • Students Clubs • Training Programs
Online Storage Facility (NAS) • Faculty and Staff have been given 500MB of online storage. • Useful for online access of data from anywhere in KFUPM Network • 200MB quota per Student • Roaming Profiles of Faculty and students • Data fully protected from viruses • Data Backed up regularly
Storage Area Networks • 3.4TB of SAN Storage • Provides a cost effective enterprise storage solution for all platforms, AIX, Linux, W2K, and z/OS • Improves application responsiveness • Allows Storage Consolidation • Allows connectivity for storage to be shared among several servers