Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update –...

33
Colorado State University Colorado State University 1 Subnet Managers Subnet Managers Meeting 3/11/09 Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student Email / Rampoint – R. Scott Student Email / Rampoint – R. Scott Windows update – Volesky Windows update – Volesky Information Systems Update – Hill Information Systems Update – Hill Wrap-up Wrap-up File Sharing Web App Demo to follow File Sharing Web App Demo to follow
  • date post

    21-Dec-2015
  • Category

    Documents

  • view

    220
  • download

    4

Transcript of Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update –...

Page 1: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 11

Subnet Managers Meeting Subnet Managers Meeting 3/11/093/11/09

NOC update – RedderNOC update – Redder Security update – LovaasSecurity update – Lovaas Student Email / Rampoint – R. ScottStudent Email / Rampoint – R. Scott Windows update – VoleskyWindows update – Volesky Information Systems Update – HillInformation Systems Update – Hill Wrap-upWrap-up File Sharing Web App Demo to followFile Sharing Web App Demo to follow

Page 2: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

NOC AgendaNOC Agenda

Traffic StatsTraffic Stats noc.acns.colostate.edunoc.acns.colostate.edu UTFAB WirelessUTFAB Wireless New BuildingNew Building Mobile Wireless UnitMobile Wireless Unit Addressing RemindersAddressing Reminders KiosksKiosks Firewall termsFirewall terms Easy Access WirelessEasy Access Wireless

Colorado State UniversityColorado State University 22

Page 3: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Traffic StatsTraffic Stats(All CSU + FCCN)(All CSU + FCCN)

Colorado State UniversityColorado State University 33

Page 4: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Traffic StatsTraffic Stats(CSU Main Campus)(CSU Main Campus)

Colorado State UniversityColorado State University 44

Page 5: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

noc.acns.colostate.edunoc.acns.colostate.edu

In developmentIn development Central repository for traffic stats Central repository for traffic stats

and network toolsand network tools Will be able to provide details based Will be able to provide details based

on credentials, such as subnet on credentials, such as subnet managers vs. general public.managers vs. general public.

Colorado State UniversityColorado State University 55

Page 6: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

UTFAB UpdateUTFAB Update

Wireless saturation soon (Spring Break)Wireless saturation soon (Spring Break) MorganMorgan Clark AClark A Clark CClark C 802.11a/b/g/n802.11a/b/g/n

Being done with Xirrus as was CS and ALCBeing done with Xirrus as was CS and ALC Will fix “holes” with equipment removed Will fix “holes” with equipment removed

from Clark/Morganfrom Clark/Morgan Next?Next?

Colorado State UniversityColorado State University 66

Page 7: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

New BuildingNew Building

ALC (Aka: “TILT”, “Old Music”, “really ALC (Aka: “TILT”, “Old Music”, “really old Library”)old Library”)

Heavy on data/wirelessHeavy on data/wireless

Colorado State UniversityColorado State University 77

Page 8: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Mobile Wireless UnitMobile Wireless Unit

Xirrus unit with tripodXirrus unit with tripod Supports 100s of connections – Supports 100s of connections –

perfect for big events.perfect for big events. NAT support and bandwidth controlsNAT support and bandwidth controls ACNS will configure ACNS will configure Department can borrow and set-up Department can borrow and set-up

after signing MoU.after signing MoU.

Colorado State UniversityColorado State University 88

Page 9: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Addressing reminder Addressing reminder (multicast)(multicast)

Multicast and broadcast controls put Multicast and broadcast controls put on routers. More to come…on routers. More to come…

Multicast: Multicast: Local: 239.82.subnet.xLocal: 239.82.subnet.x Global: 233.47.113.x/24Global: 233.47.113.x/24

99

Page 10: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Addressing reminder Addressing reminder (unicast)(unicast)

192.168.x.0/y – “x” your subnet, “y” 192.168.x.0/y – “x” your subnet, “y” your subnet mask. For example: your subnet mask. For example: 192.168.28.0/22192.168.28.0/22

Corresponding VLAN: 1000+your Corresponding VLAN: 1000+your subnet. For example: Subnet 28 = subnet. For example: Subnet 28 = 1028.1028.

Colorado State UniversityColorado State University 1010

Page 11: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

KiosksKiosks

Logins will be implemented to Logins will be implemented to address “campers”.address “campers”.

Colorado State UniversityColorado State University 1111

Page 12: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Firewall TermsFirewall Terms

Tool to verify:Tool to verify: http://www.acns.colostate.edu/?http://www.acns.colostate.edu/?

page=securitypage=security

Colorado State UniversityColorado State University 1212

Page 13: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 1313

Page 14: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 1414

Easy AccessEasy Access

Concerns with wireless: Authentication Concerns with wireless: Authentication and Encryption.and Encryption.

VPN vs. dot11iVPN vs. dot11i Deployed across campus (not in Residence Deployed across campus (not in Residence

Halls)Halls) Instructions at: Instructions at:

www.acns.colostate.edu/?page=wirelesswww.acns.colostate.edu/?page=wireless XP caching issue…XP caching issue…

Page 15: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 1515

Subnet Managers Meeting Subnet Managers Meeting 3/11/093/11/09

Security update – LovaasSecurity update – Lovaas

Page 16: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

SSN rescanSSN rescan

Spider 2008 (v4) public release Spider 2008 (v4) public release March 23March 23 Improved PST, PDF handlingImproved PST, PDF handling Web update site as soon as it’s availableWeb update site as soon as it’s available

Still on target for MayStill on target for May http://ssnscan.colostate.eduhttp://ssnscan.colostate.edu

Page 17: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Risk assessmentRisk assessment

Making the form easier to useMaking the form easier to use Starting distribution in AprilStarting distribution in April Volunteers to go first?Volunteers to go first?

Page 18: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Antivirus RFP updateAntivirus RFP update

RFP is posted – bid opening April 6RFP is posted – bid opening April 6thth

May have to (quickly) evaluate top 2-May have to (quickly) evaluate top 2-3 contenders3 contenders

Page 19: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

IPv6 and securityIPv6 and security

Vista, Server 2008, OSX all do IPv6 by Vista, Server 2008, OSX all do IPv6 by defaultdefault

It’s flying around our network (tunneled)It’s flying around our network (tunneled) Can be used to skirt ACLs, firewall rulesCan be used to skirt ACLs, firewall rules Fixing this (carefully)Fixing this (carefully) New change request info: please identify New change request info: please identify

IPv4/v6 needsIPv4/v6 needs

Page 20: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 2020

Subnet Managers Meeting Subnet Managers Meeting 3/11/093/11/09

Student Email and Rampoint – Rusty Student Email and Rampoint – Rusty ScottScott

Page 21: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Google Apps for CSUGoogle Apps for CSU

rams.colostate.edu domainrams.colostate.edu domain Enrollment thus far has been opt-inEnrollment thus far has been opt-in 18K+ accounts created18K+ accounts created 12K+ users have requested mail 12K+ users have requested mail

migrationmigration 34K+ mailboxes have been migrated34K+ mailboxes have been migrated 2.2 million messages migrated2.2 million messages migrated 0.2% failure rate0.2% failure rate

Page 22: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Google Apps - Final MigrationGoogle Apps - Final Migration

This coming Saturday, March 14This coming Saturday, March 14 Mass migration beginsMass migration begins

All ‘preferred’ and First.Last email addresses will be All ‘preferred’ and First.Last email addresses will be changed to rams.colostate.educhanged to rams.colostate.edu

Simla users who have not created a rams account…Simla users who have not created a rams account… Will have a rams account created for themWill have a rams account created for them Will have their simla email migrated to rams domainWill have their simla email migrated to rams domain During migration, mail sent to simla will forward to ramsDuring migration, mail sent to simla will forward to rams

Thursday, March 19 (through June 30)Thursday, March 19 (through June 30) Email addressed to simla will not be deliveredEmail addressed to simla will not be delivered ‘‘Return to Sender’ with suggestion to try Return to Sender’ with suggestion to try

[email protected] format format

Page 23: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Other Important Other Important MilestonesMilestones

Through May, 2009 - simla files are Through May, 2009 - simla files are accessible (importantly, public_html)accessible (importantly, public_html) At which point, Colleges will fill the gap At which point, Colleges will fill the gap

(thanks!)(thanks!) July 1, 2009 – email addressed to July 1, 2009 – email addressed to

simla will be dropped as invalid simla will be dropped as invalid addresses addresses

Page 24: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Rampoint Retirement - Rampoint Retirement - RecapRecap

Prior to engaging on extensive and expensive Prior to engaging on extensive and expensive upgrade process, perform a reviewupgrade process, perform a review

Findings & recommendation included:Findings & recommendation included: Generally, a low adoption rateGenerally, a low adoption rate Some use of group tools (file sharing)Some use of group tools (file sharing) Therefore,Therefore,

Migrate away from LuminisMigrate away from Luminis Move required services to exisiting services Move required services to exisiting services

(RAMweb, CAP, etc.)(RAMweb, CAP, etc.)

Page 25: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Rampoint Retirement - Rampoint Retirement - GapsGaps

Message BrokerMessage Broker Function: Provides (near) real-time data from Banner to Function: Provides (near) real-time data from Banner to

RamCTRamCT Solution: Maintain SunGard’s LDI for E-learning Solution: Maintain SunGard’s LDI for E-learning

component which includes broker, gateway, etc.component which includes broker, gateway, etc. Group toolsGroup tools

Function: Used exclusively as a file sharing/group email Function: Used exclusively as a file sharing/group email tooltool

Solution: Develop in-house solution until something Solution: Develop in-house solution until something more institutional is definedmore institutional is defined

Demo at 11:30, thanks to Jeff Ruch, ACNSDemo at 11:30, thanks to Jeff Ruch, ACNS Upcoming training via CTSS, on-line presentationsUpcoming training via CTSS, on-line presentations

Page 26: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Rampoint Retirement – Rampoint Retirement – Misc.Misc.

Communications plan startedCommunications plan started rampoint.colostate.edurampoint.colostate.edu Tab/Channel ownersTab/Channel owners OtherOther

Luminis platform unavailable on July 1, 2009Luminis platform unavailable on July 1, 2009 rampoint.colostate.edu will remain available as rampoint.colostate.edu will remain available as

place to access campus IT resourcesplace to access campus IT resources RAMWeb, CAP, ARIESweb, New Group ToolsRAMWeb, CAP, ARIESweb, New Group Tools Final layout/content under reviewFinal layout/content under review

Page 27: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 2727

Subnet Managers Meeting Subnet Managers Meeting 3/11/093/11/09

Windows - VoleskyWindows - Volesky

Page 28: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 2828

COLOSTATE Domain COLOSTATE Domain ControllersControllers

Hasty moved to Server 2008 DC, is also a Hasty moved to Server 2008 DC, is also a GCGC

Nucla added as a new Server 2008 DCNucla added as a new Server 2008 DC Plans for Rush to be moved to 2008 DC Plans for Rush to be moved to 2008 DC

soonsoon Ongoing issue with firewall, affecting some Ongoing issue with firewall, affecting some

Outlook/Exchange connectivity; in workOutlook/Exchange connectivity; in work Firewalling DCs providing DNS services for Firewalling DCs providing DNS services for

PCI/DSS compliancePCI/DSS compliance

Page 29: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 2929

DNS changesDNS changes

Coming over the next few monthsComing over the next few months Why? Best practice; don’t answer DNS requests we Why? Best practice; don’t answer DNS requests we

aren’t authoritative foraren’t authoritative for Bring up 2 new DNS servers to handle non-Bring up 2 new DNS servers to handle non-

colostate.edu DNS queriescolostate.edu DNS queries eForteFort E7 EngineeringE7 Engineering

On-campus systems continue to point to On-campus systems continue to point to Rush/HastyRush/Hasty

Off-campus systems currently pointing to Off-campus systems currently pointing to Rush/Hasty will need to use their ISP’s DNS serversRush/Hasty will need to use their ISP’s DNS servers

Page 30: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 3030

Server 2008/Vista Server 2008/Vista TrainingTraining

Request for Server 2008/Vista Request for Server 2008/Vista trainingtraining Working with Microsoft and area training Working with Microsoft and area training

firmsfirms Attempting to organize specific courses, Attempting to organize specific courses,

negotiate pricingnegotiate pricing Planning for late spring (probably after Planning for late spring (probably after

the end of the semester)the end of the semester)

Page 31: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 3131

Information SystemsInformation Systems

UpdatesUpdates cap.is.colostate.edu – Administrative cap.is.colostate.edu – Administrative

PortalPortal Delphi Data Warehouse data migrationDelphi Data Warehouse data migration

Page 32: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 3232

Wrap-upWrap-up

Reminder: first Microsoft licensing renewal Reminder: first Microsoft licensing renewal session – Today, 1:30PM-3:00PM in Weber session – Today, 1:30PM-3:00PM in Weber 202. Will discuss options for renewing 202. Will discuss options for renewing Campus Agreements etc.Campus Agreements etc.

Subnet Managers website – digest e-mail sent Subnet Managers website – digest e-mail sent to LISTPROC; protect via login? Other ideas?to LISTPROC; protect via login? Other ideas?

Next Meeting – Wed. May 20, 2009 10-Next Meeting – Wed. May 20, 2009 10-11:30AM, Location TBD, Technology Demo to 11:30AM, Location TBD, Technology Demo to follow 11:30-12:00Pfollow 11:30-12:00P

Page 33: Colorado State University1 Subnet Managers Meeting 3/11/09 NOC update – Redder NOC update – Redder Security update – Lovaas Security update – Lovaas Student.

Colorado State UniversityColorado State University 3333

Demo – File Sharing Web ApplicationDemo – File Sharing Web Application

Jeff Ruch, ACNSJeff Ruch, ACNS