jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09...

26
Name Designation Affiliat ion Signature Authored by: Sam Lloyd Network and IT Security Specialist SKA Organisa tion Dat e: Dr Anthony Holloway Head of Computing, JBCA Universi ty of Manchest Dat e: Joe Clarke Networks Team Lead Universi ty of Manchest Dat e: James Blessing Deputy Director, Network JISC Dat e: David Salmon Head of Research and e- JISC Dat e: Owned by: JBO SITE NETWORK CONFIGURATION PROPOSAL Document Number........................SKA-TEL-SKO-0000000 Document Type..........................................DTE Revision................................................. Author.................SKA, University of Manchester, JISC Date............................................2019-05-09 Document Classification......................UNRESTRICTED

Transcript of jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09...

Page 1: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Name Designation Affiliation Signature

Authored by:

Sam Lloyd Network and IT Security Specialist

SKA Organisation Date:

Dr Anthony Holloway

Head of Computing, JBCA

University of Manchester Date:

Joe Clarke Networks Team Lead

University of Manchester Date:

James BlessingDeputy Director,

Network Architecture

JISCDate:

David SalmonHead of Research

and e-Infrastructure Support

JISCDate:

Owned by:

Sam Lloyd Network and IT SKA

JBO SITE NETWORK CONFIGURATION PROPOSAL

Document Number.......................................................................SKA-TEL-SKO-0000000Document Type..........................................................................................................DTERevision.........................................................................................................................Author......................................................................SKA, University of Manchester, JISCDate...............................................................................................................2019-05-09Document Classification..........................................................................UNRESTRICTEDStatus....................................................................................................................... Draft

Page 2: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Security Specialist Organisation Date:

Approved by:

Nick Rees Head of Computing and Software

SKA Organisation

Date:

Darren Hankinson

Network and Security Manager

University of Manchester

Date:

Released by:Sam Lloyd Network and IT

Security Specialist SKA Organisation

Date:

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 2 of 19

Page 3: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

DOCUMENT HISTORYRevision Date Of Issue Engineering Change

NumberComments

A 2019-02-11 - First draft release for internal review

B 2019-03-14 - Changed solution to state the use of two Openreach OSA links and remove the Century Link connection.

Completed most of the TBD actions.

C 2019-04-02 - Updated to include comments\information from JISC and UoM

D 2019-04-05 - Updated to include comments from Nick Rees (added a diagram to section 5.2.3, and updated the requirements for uptime percentages to state that they are indicative figures). Updated the estimated timescales in section 8 to include information received from JISC. Updated the

list of abbreviations.

E 2019-04-08 - Updated section 5.2.3 to state that JISC will provide the SKA with public IP addresses, and added 2x 10GE

NetPath+ services for VLBI in section 5.1 and 5.2.2, as commented by Andrew Veitch of UoM. Updated the

device names for the core switches in server room 1, and added the model number for the SKA30 switch in

Appendix A, as commented by Andrew Veitch.

F 2019-04-16 - Appendix A – changed IP address for gw-ska1 core switch. Updated section 5.2.2 to state JISC required fibre

connectivity between the JBO Basement and SKA Building. Updated section 4.2 to align the SKA uptime requirements with the JISC SLA commitment. Updated section 6.2 to state that the UoM needs to provide JISC with contact details. Updated section 6.3 to state the

SKA need to provide JISC with contact details. Updated section 5.2.3 to state that the SKA needs to inform JISC of how many public IP addresses it requires. Updated

sections 5.1 to state that JISC will provide the SKA with 2x10GE links but tariff for 1GE. Updated section 5.2.3 to state that JISC will provide the SKA with 2x gateway IP

addresses and the links will be active-active. JISC updated sections 5.2.1, 5.2.2 and 5.2.3 stating what

services and connectivity they will provide and what the UoM and SKA will provide.

G 2019-05-09 - Updated section 6.1 to state that JISC will provision and maintain their hardware and services. Updated section 6.2 to state that UoM and SKA need to devise a plan for managing the SKA Observatory BMS and other building

services for the SKA Observatory building. Updated section 9 to include indicative costs provided by JISC. Updated figure 2 in section 5.1. Removed figure 3 in

section 5.2.3. Updated section 7 to state that UoM and SKA will need to devise a migration plan for the transfer of equipment (if this is the case). Updated section 8 by

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 3 of 19

Page 4: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

increasing the dates by one month.

DOCUMENT SOFTWAREPackage Version Filename

Word processor MS Word Word 2016 document.docx

Block diagrams

Other

ORGANISATION DETAILSName SKA Organisation

Registered Address Jodrell Bank Observatory

Lower Withington

Macclesfield

Cheshire

SK11 9DLUnited Kingdom

Registered in England & WalesCompany Number: 07881918

Fax. +44 (0)161 306 9600Website www.skatelescope.org

© Copyright 2016 SKA Organisation.

This work is licensed under a Creative Commons Attribution 4.0 International License.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 4 of 19

Page 5: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

TABLE OF CONTENTS1 INTRODUCTION............................................................................................7

1.1 Purpose of the document......................................................................................................71.2 Scope of the document..........................................................................................................7

2 REFERENCES................................................................................................72.1 Applicable documents...........................................................................................................72.2 Reference documents............................................................................................................7

3 EXISTING EXTERNAL NETWORK CONFIGURATION AT THE JODRELL BANK OBSERVATORY8

4 REQUIREMENTS OF EACH ENTITY.....................................................................84.1 Jodrell Bank Observatory.......................................................................................................84.2 SKA Observatory....................................................................................................................9

5 JODRELL BANK SITE EXTERNAL NETWORK CONFIGURATION PROPOSAL...................105.1 Proposed Holistic Design.....................................................................................................105.2 Interfaces between Each Entity...........................................................................................12

5.2.1 University of Manchester City Centre Campus and JISC..............................................125.2.2 Jodrell Bank Observatory and JISC...............................................................................125.2.3 SKA Observatory and JISC............................................................................................125.2.4 SKA Observatory and Jodrell Bank Observatory...........................................................13

6 RESPONSIBILITIES OF EACH ENTITY..................................................................136.1 JISC.......................................................................................................................................136.2 University of Manchester....................................................................................................136.3 SKA Observatory..................................................................................................................13

7 OWNERSHIP OF NETWORK EQUIPMENT USED BY THE SKA OBSERVATORY..............14

8 ESTIMATED TIMESCALES FOR COMPLETION.......................................................14

9 COSTS......................................................................................................15

10 APPENDIX A: UNIVERSITY OF MANCHESTER EQUIPMENT SITED WITHIN THE SKA BUILDING....................................................................................................... 17

LIST OF FIGURESFigure 1: SKA Observatory External Communication Requirements.....................................................9Figure 2: Proposed Holistic Physical Network Connectivity.................................................................10

LIST OF TABLESTable 1: Openreach Progress Update Intervals...................................................................................15Table 2: Overall Core Service Costs.....................................................................................................15Table 3: SKA Observatory Costs...........................................................................................................16Table 4: University of Manchester Costs.............................................................................................16

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 5 of 19

Page 6: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Table 5: UoM Equipment Used by the SKA Observatory.....................................................................18LIST OF ABBREVIATIONS

AENEAS........................Advanced European Network of E-infrastructures for Astronomy with the SKA

CCTV............................Closed Circuit Television

DDoS.............................Distributed Denial of Service

DWDM...........................Dense Wave Division Multiplexing

GBPS............................Gigabits per second

GE.................................Gigabit Ethernet

IGO................................Inter-Governmental Organisation

IPv4...............................Internet Protocol version 4

JBO...............................Jodrell Bank Observatory

JISC..............................Joint Information Systems Committee

JIVE...............................Joint Institute for VLBI in Europe

KCI................................Keeping Customers Informed (Openreach term)

OSA...............................Optical Spectrum Access

POP...............................Point of Presence

SKA...............................Square Kilometre Array

SKAO............................SKA Project Office

TBC...............................To Be Confirmed

TBD...............................To Be Defined

UoM...............................University of Manchester

UPS...............................Uninterruptible Power Supply

VLBI..............................Very Long Baseline Interferometry

VOIP..............................Voice Over Internet Protocol

Wifi................................Wireless Fidelity

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 6 of 19

Page 7: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

1 IntroductionThe driver for the network reconfiguration at the Jodrell Bank site is based on the need for the SKA Observatory to transition to its own network infrastructure as it prepares to become an Inter-Governmental Organisation (IGO). The SKA Observatory will be split across three geographical locations, which include the United Kingdom, South Africa, and Australia, and requires connectivity between all three sites. As the SKA Observatory Headquarters will oversee telescope operations in South Africa and Australia, this connectivity must be constant and reliable.

The University of Manchester are also concerned about the resilience of the current link between the Jodrell Bank Observatory and the Manchester main campus, as a fault on the CenturyLink fibre would result in the loss of network connectivity for the entire observatory site.

In order to meet the requirements of all parties located at the Jodrell Bank site, the University of Manchester, the SKA Observatory, and JISC have worked together to create a holistic approach that suits all entities located at the Jodrell Bank site.

1.1 Purpose of the document

This document describes the external network communication requirements for each entity located at the Jodrell Bank site and defines a proposal that meets these requirements. It also states the responsibilities of each entity in order to achieve this goal.

1.2 Scope of the document

The scope of this document defines the external network communications for all entities located at the Jodrell Bank site.

2 References2.1 Applicable documents

The following documents are applicable to the extent stated herein. In the event of conflict between the contents of the applicable documents and this document, the applicable documents shall take precedence.

[AD1]

2.2 Reference documents

The following documents are referenced in this document. In the event of conflict between the contents of the referenced documents and this document, this document shall take precedence.

[RD1]

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 7 of 19

Page 8: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

3 Existing External Network Configuration at the Jodrell Bank Observatory

At present, a single fibre pair connects the University of Manchester main campus site to the Jodrell Bank Observatory. The University of Manchester has leased the fibre pair from CenturyLink which is currently only contracted until 2020. JISC operates services on this fibre using Ciena optical transmission equipment at each end of the fibre.

JISC provides 4x10GE services between the Jodrell Bank Observatory and Reynolds House at the University of Manchester main campus site. Two of these 10GE services are for production traffic for the Observatory, Discovery Centre and SKAO combined while two provide connections for a Very Long Baseline Interferometry (VLBI) 4.5 Gbps lightpath (10 GE presentation) between the Observatory and JIVE in the Netherlands. In addition, a 100GE lightpath is in place for development work in the AENEAS SKA Regional Centre project.

As there is only a single fibre pair connecting the Jodrell Bank Observatory to the Manchester campus, a break of that fibre will result in the loss of external connectivity to all entities at the Jodrell Bank site.

The SKA Observatory currently uses the University of Manchester network infrastructure for its network services within the SKA building and access to the outside world, which is protected by security appliances implemented by the University of Manchester.

4 Requirements of Each EntityThe Jodrell Bank site has grown with the addition of the SKA Observatory, and all entities are now heavily reliant on external connectivity to the outside world, for example in the 24/7 operation of the remote e-MERLIN telescopes. This reliance will continue to increase in the near future, as the SKA transitions to an IGO and becomes a fully functioning Observatory, and the current network configuration will no longer be suitable.

The sub sections below describe the external network connectivity requirements for each entity at the Jodrell Bank site.

4.1 Jodrell Bank Observatory

The Observatory and Discovery Centre rely on the outbound network connection for connectivity to University of Manchester central services (e.g. desktop PC infrastructure, finance systems, e-mail) and the wider internet. The Observatory runs the e-MERLIN (enhanced Multi Element Remotely Linked Interferometer Network) telescope array and the VLBI National Radio Astronomy Facility. In the case of e-MERLIN this requires the 24/7 production network connectivity for remote telescope control and for VLBI the dedicated lightpath connectivity across Europe to JIVE in the Netherlands.

The Observatory and Discovery Centre will welcome the installation of a backup connection to enable our their operations to continue in the event of a disruption on to the existing connection. Clearly there are different bandwidth requirements for production internet traffic, VLBI links and AENEAS project experimental links.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 8 of 19

Page 9: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

The VLBI lightpath data transmission to the Netherlands continues to develop and we they have moved from linking 1 telescope at 2 Gbps to now being able to connect 6 e-MERLIN telescopes at 0.5 Gbps and one local telescope at 1 Gbps. This inclusion of e-MERLIN telescopes into VLBI greatly improves the imaging fidelity and brings a significant increase in sensitivity of the VLBI network.

The plans for VLBI would are be to transmit moreincrease the bandwidth from each telescope, to say 4 Gbps out of the 30 Gbps we currently observe available for e-MERLIN, with further steps increases in the future.

4.2 SKA Observatory

The SKA Observatory will be split across 3 geographical locations. All three locations will be interconnected to allow for communications between all three sites, as shown in the diagram below.

Figure 1: SKA Observatory External Communication Requirements

The SKA Observatory Headquarters will require visibility of operations at each telescope location at all times plus access to cloud resources.

To achieve this, the external network connectivity should meet the following requirements:

ensure that connectivity is largely maintainable without outages with an uptime in the range of 99.9%.

1GE bandwidth initially, but increasing to 10GE once the SKA Observatory becomes fully operational.

The SKA Organisation will transition into an Inter-Governmental Organisation and become the SKA Observatory in 2020. Before this transition takes place, it must take full control of its internal networks and services and separate itself from the University of Manchester campus network. The SKA Observatory must:

have full control of all network capable functions, such as VOIP, Building Management Systems, and CCTV within the SKA Headquarters building and its immediate vicinity (cameras physically attached to the outside of the building and visibility of the SKA car park).

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 9 of 19

Page 10: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

have the ability to restrict and control access to its internal networks, including adding security appliances such as firewalls.

The SKA Observatory will also require a number of public IPv4 IP addresses.

5 Jodrell Bank Site External Network Configuration ProposalBased on the requirements defined in the previous section, this section describes the an holistic network proposal that ensuresing that all requirements for each entity have been met.

5.1 Proposed Holistic Design

Figure 2 below shows the current physical network connectivity between the Jodrell Bank site and the University of Manchester main campus, and the final intended connectivity.

Figure 2: Proposed Holistic Physical Network Connectivity

This solution will result in two diverse fibre routes terminated with transmission equipment in two different locations at the Jodrell Bank site, which provides redundancy in the event of a fibre break and transmission equipment failure. One will terminate in the Jodrell Bank Observatory Basement

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 10 of 19

Author, 03/01/-1,
Print is too small on some boxes. It might be better if the “Jodrell Bank Switches” box was turned into a cartoon. However, this isn’t really anything to do with me – our bits are fine. Also, brown and purple don’t contrast very well to my eye.
Page 11: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

and the other will terminate in the SKA Building. Both fibres will run the Optical Spectrum Access (OSA) service, which uses Dense Wavelength Division Multiplexing (DWDM) down a single fibre pair. This allows multiple independent channels to be run down a single fibre pair. In the Future State diagram above the purple line represents the University of Manchester channel and the brown line represents the SKA Observatory channel.

At the instruction of the University of Manchester IT Services, Openreach have already installed fibre to the Jodrell Bank Observatory Basement, although no services have been provisioned yet. An order will need to be placed to install a second fibre that terminates within the SKA Building. The fibre route will be determined during the site survey conducted by Openreach. There is the possibility that either a new fibre duct may need to be installed, or both fibres co-existing in the same fibre duct for a short distance (worst case). A risk assessment will be conducted if this is the case.

JISC will install Ciena equipment at the end of each link and have one point of presence (POP) within the Jodrell Bank Observatory Basement and one in the SKA Building. JISC will also provision an ethernet switch at each POP and create a G.8032 subring to allow quicker failover of the links. To ensure that the links remain diversely routed, JISC will use a different location for each point of presence in Manchester. These POPs will be independent of each other. JISC will provision the following services over the fibre links:

2x 10GE Janet Netpath+ services for the University of Manchester (1 per fibre link) 2x 10GE Janet Netpath+ services for the University of Manchester for VLBI (existing services

via the CenturyLink fibre) 2x 10GE Janet IP Services for the SKA Observatory (1 per fibre link).

JISC will provision 2x 10GE services for the SKA Observatory, but will only charge for using 1GE. JISC will monitor the usage and inform the SKA Observatory if they continually exceed the 1GE limit. The SKA Observatory will need to ensure their firewalls support 10GE. This ensures an easy transition to 10GE as and when it is required.

The University of Manchester will use the link that terminates in the Jodrell Bank Observatory Basement as their primary link, and the link that terminates at within the SKA Building as their secondary link.

The SKA Observatory will use the link that terminates within the SKA Building as their primary link, and the link that terminates within the Jodrell Bank Observatory Basement as their secondary link.

This solution will remove the dependence on the CenturyLink fibre for external internet access. CenturyLink will still be used by the University of Manchester for VLBI.

The existing University of Manchester network infrastructure within the SKA Observatory would need to either be replaced or reconfigured to be independent from the UoM network ( to be reworded based on the outcome of section 7 below). The SKA Observatory would need to ensure the appropriate security appliances are in place to protect their internal networks.

The SKA Observatory would need to ensure that they have their own telephony solution in place. The control of all Building Management Systems, and CCTV relating to the SKA building can be transferred to the SKA Observatory.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 11 of 19

Page 12: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

The University of Manchester Wifi network capability will be removed from the SKA Building. The SKA Observatory will need to provision Eduroam on the existing SKA Observatory Wifi network if this service is required.

5.2 Interfaces between Each Entity

This section describes the physical and logical connectivity between each entity, so that both parties understand what each entity will provide.

5.2.1 University of Manchester City Centre Campus and JISC

JISC will provide the UoM with the A ends of a 10GE Janet Netpath+ service from the point of presence in the Jodrell Bank Observatory Basement and one 10GE Janet Netpath+ service from the point of presence within the SKA Building for production\internet traffic. JISC will provide the UoM with 1x pair LC ports on an Ethernet switch at each point of presence for production\internet traffic. The UoM will provide the single mode fibre cables.

5.2.2 Jodrell Bank Observatory and JISC

JISC will provide the UoM with the B ends of a 10GE Janet Netpath+ service from the point of presence in the Jodrell Bank Observatory Basement and one 10GE Janet Netpath+ service from the point of presence within the SKA Building for production\internet traffic. JISC will provide the UoM with 1x pair LC ports on an Ethernet switch at each point of presence for production\internet traffic. The UoM will provide the single mode fibre cables.

JISC will install an ethernet switch in the JBO Basement and the SKA Building, which need to be connected to each other. The UoM will provide the single mode fibre link between the two buildings and JISC will provide the single mode fibre cables at each end of the fibre link to connect to each switch.

JISC will continue to provide the UoM with 2x 10GE Janet Netpath+ services from the existing point of presence in the Jodrell Bank Observatory Basement for VLBI traffic (via the CenturyLink fibre). However, additional interfaces for the VBLI and ANEAS projects will be available on the appropriate equipment so that either or both of these services may be moved onto the new infrastructure if required, the details of how and when this service will move are outside of the scope of this document but the requirement to provide these services has been captured and designed into the future development of the services delivered to the campus.

5.2.3 SKA Observatory and JISC

JISC will provide the SKA Observatory with one 1GE Janet IP service from the point of presence in the SKA Building (primary link) and one 1GE Janet IP service from the point of presence within the Jodrell Bank Observatory Basement (secondary link). These services will be delivered over 10G ports so that once the SKA Observatory becomes fully operational additional bandwidth can be provided with no downtime for the SKA Observatory.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 12 of 19

Author, 03/01/-1,
This is essentially the same paragraph as the next one with B replaced by A. Shouldn’t this be the UoM City Centre POP locations? Reynolds house and TBD?
Page 13: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

JISC will provide the SKA Observatory with 1x pair LC ports on an Ethernet switch at each point of presence. The SKA Observatory will provide the single mode fibre cables between the JISC Ethernet switches and the SKA firewalls.

JISC will present two gateway IP addresses to the SKA (one for each router), and the SKA will need to manage the usage of these links. The links will be active-active.

JISC can provide the SKA Observatory with a restricted number of public IPv4 IP addresses based on need. They can provide an unlimited number of IPv6 IP addresses. The SKA Observatory will need to inform JISC of the quantity and type that they require.

5.2.4 SKA Observatory and Jodrell Bank Observatory

The SKA Observatory will provide the fibre cables at each end of the existing fibre link between the two buildings in order to connect to the JISC Ethernet switch located in the Jodrell Bank Observatory basement (SKA secondary link).

The UoM will provide the fibre cables at each end of the existing fibre link between the two buildings in order to connect to the JISC Ethernet switch located in the SKA Observatory (UoM secondary link).

6 Responsibilities of Each EntityThe sections below define the responsibilities of each entity during the reconfiguration of the JBO site network infrastructure and the network separation of the SKA Observatory.

6.1 JISC

JISC have a business relationship with Openreach and will place and manage the order directly with them. This will mean that the University of Manchester and the SKA Observatory will only need to have JISC as a point of contact.

JISC will provision and manage their hardware and services as described within this proposal document.

6.2 University of Manchester

The UoM will need to provide JISC with the relevant contact details of people at the Jodrell Bank Observatory and Estates that may be required during the implementation phase.

The UoM and SKA Observatory will need to define and plan which building management services (environmental controls, fire alarm, security alarm, CCTV, etc) will be maintained and accessible to the University of Manchester and the SKA Observatory, relating to the SKA Observatory building and its immediate vicinity.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 13 of 19

Page 14: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Depending on the outcome of section 7 below, assist with the planning and transfer of ownership of the existing UoM network infrastructure to the SKA Observatory (TBD).

6.3 SKA Observatory

As the SKA Observatory will no longer be protected against security threats using the University of Manchester security appliances, the SKA Observatory will need to provide their own security appliances in order to protect their internal networks and the Janet network.

The SKA Observatory will also need to provide their own telephony solution, as they will no longer use the University of Manchester telephony system.

The SKA Observatory will also need to redesign their internal physical and logical network infrastructure to meet their needs. Depending on the outcome of section 7 below, the SKA may also need to replace all or some of the existing network infrastructure (TBD).

The SKA Observatory will need to install and configure the relevant hardware and software required to take control of the relevant building management systems within the SKA Building.

The SKA Observatory will need to implement Eduroam on the SKA Wifi network if this service is still required.

The SKA Observatory will need to provide the following contact details to JISC as part of the service contract requirements:

Management Contact Technical Contact Security Contact

7 Ownership of Network Equipment Used by the SKA ObservatoryThe University of Manchester currently supply and manage the existing network equipment used by the SKA Observatory. This was installed as part of the SKA building installation. This network equipment is currently configured and integrated into the wider University of Manchester campus network. The inventory of equipment is listed in Appendix A.

UoM to confirm whether this equipment will be donated to the SKA (this is the current understanding from the SKAs perspective) or returned to the University of Manchester. If the equipment is being donated, this section should state that both parties will need to develop and agree a migration plan of how this equipment will be handed over to the SKA with an emphasis of minimising network downtime to the SKA (a transition process).

8 Estimated Timescales for CompletionThe minimum lead times from Openreach are set at 35 working days (excluding weekends and bank holidays), barring any major issues. As the Openreach fibre to the Jodrell Bank Observatory Basement is already in place, this link may be available for use sooner than the link to the SKA

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 14 of 19

Page 15: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Building, as Openreach just need to provision the OSA service down the existing fibre. JISC can then install the Ciena transmission equipment at each end of the link. Once the additional fibre and OSA service has been installed in the SKA Building and is ready for use, JISC can install the Ciena transmission equipment. JISC can usually install the Ciena equipment within 10 days, dependant on engineer availability.

Openreach provides JISC with regular progress updates over the following timescales:

KCI1 Day 1 Order accepted.KCI2 Day 8 Site survey and fibre plan completed.

KCI3 Day 14

All planning is complete. The committed delivery date and excess construction charges are confirmed (these costs need to be approved if they are above a certain amount, so up to a 5 day delay should be allowed for this).

KCI-p Various A series of updates are provided as each step is closed. These are chased if they don’t happen when expected.

KCI-h Day 35-40 (based on delay in KCI3) Notification of completion and handover.

Table 1: Openreach Progress Update Intervals

Delays can be caused by traffic management (which Openreach need to book with the local council), blocked ducts (from bad weather or poor road maintenance), non-acceptance of standard RAMS, or problems with leaseholders not agreeing wayleaves. The JISC delivery teams will manage this process to try to reduce any possible delays.

For example, if the order is placed at the end of May, Openreach should complete the installation of the additional fibre and provision the two OSA services by the end of August. JISC can then install and configure the Ciena equipment by the end of October.

In the meantime, the SKA Observatory can purchase and install additional equipment (firewalls and switches) and work with the University of Manchester to formulate a migration plan (in the event the current network equipment is donated to the SKA). Once the external links are ready for use, the migration plan can be implemented. The estimated time for completion would be the end of 2019\beginning of 2020.

Once the external links are in place, the University of Manchester would be able to migrate the production internet traffic from the JISC service running over the CenturyLink fibre to both Openreach fibres. The estimated time for completion would be towards the end of the year.

9 CostsBelow are the indicative JISC costs for delivering the solution and services to each party. Table 2 shows the overall core service costs. These costs will be split evenly between the University of

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 15 of 19

Page 16: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Manchester and SKA Observatory and are included in tables 3 and 4 below. The costs below show the pricing options for a 3 year contract and a 5 year contract.

Service 3yr Option 5yr Option Notes

Hardware £10,998.51 £10,998.51 After JISC has contributed 50% of total hardware costs (£21,996.42)

Install £48,650.00 £48,650.00Supplier Annual Rental (w/o services) £30,454.88 £29,453.76

Table 2: Overall Core Service Costs

Table 3 lists the SKA Observatory costs. Service 3yr Option 5yr Option Notes

Hardware £5,499.25 £5,499.25 Split of hardware costs extended to members.

Install £24,325.00 £24,325.00 Half of total install

Supplier Annual Rental £15,227.44 £14,726.88 Half of total solution supplier annual rental

1Gb/10Gb IP Annual Rental £19,380.00 £19,380.00Total Install £29,824.25 £29,824.25Total Annual Rental £34,607.44 £34,106.88

Table 3: SKA Observatory Costs

Table 4 lists the University of Manchester costs. Service 3yr Option 5yr Option Notes

Hardware £5,499.25 £5,499.25 Split of hardware costs extended to members.

Install £24,325.00 £24,325.00 Half of total install

Supplier Annual Rental £15,227.44 £14,726.88 Half of total solution supplier annual rental

Intersite Charge £1,522.74 £1,472.68Total Install (10Gb option) £29,824.25 £29,824.25Total Annual Rental (10Gb option) £16,750.18 £16,199.56Additional Single 10Gb Install £5,280.00 £5,280.00Additional Single 10Gb Annual Rental £528.00 £528.00Total Install (20Gb option) £35,104.25 £35,104.25Total Annual Rental (20Gb option) £17,278.18 £16,727.56

Table 4: University of Manchester Costs

These figures are indicative as JISC is awaiting information from the supplier. Once final details are provided JISC can present a formal quote to each party for Tables 3 and 4, which can be used to proceed to contract.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 16 of 19

Page 17: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

The University of Manchester and the SKA Observatory are on different tariffs due to the nature of their membership with JISC. The University of Manchester is on Tier 1 as they are members and the SKA Observatory is on Tier 2.

Connecting to the Janet network entitles each organisation to join the Eduroam service without additional cost. However, for the full Eduroam service each organisation must implement its own identity provider service and local infrastructure (RADIUS server, etc).

Standard Denial of Service (DoS) protection is included as part of the Janet IP service, where mitigation is applied dynamically as required. JISC does offer a service that provides a continuous DoS mitigation regime at additional cost.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 17 of 19

Page 18: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

10 APPENDIX A: University of Manchester Equipment Sited within the SKA BuildingTable 5 below lists the University of Manchester equipment that resides within the SKA Building.

Equipment Type Vendor Model Number Device Name Serial Number Asset Owner Room Location

Core Switch (Fibre) Cisco Catalyst 3850 gw-ska 10.255.255.19 (primary) FOC2205T5L7 UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3560 X Series PoE gw-ska1 10.150.40.19 FDO1625P0HZ UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska10 10.150.40.10 FCQ1621Y5HJ UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska11 10.150.40.11 FCQ1621Y5HU UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska12 10.150.40.12 FCQ1621Y5KL UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska13 10.150.40.13 FCQ1621Y5HG UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska14 10.150.40.14 FCQ1621Y5J6 UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska15 10.150.40.15 FCQ1623Y4FT UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska16 10.150.40.16 FCQ1623Y4FJ UoM Server Room 1UPS APC SMX2200RMHV2U Unknown AS1443240028 UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3560 X Series PoE gw-ska2 10.150.40.29 FDO1625P0HH UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska20 10.150.40.20 FCQ1621X0NX UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska21 10.150.40.21 FOC1633Z1HA UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska22 10.150.40.22 FCQ1623Y4EX UoM Server Room 1UPS APC SMX2200RMHV2U Unknown AS1443240029 UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska30 10.150.40.30 FOC1726W1JG UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3850 48XS 10G gw-ska 10.255.255.19 (secondary) FOC2202T30A UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 1) FDO2206Q1ES UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 2) FDO2202I29A UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 3) FDO2203Q1KT UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 4) FDO2202E2SZ UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 5) FDO2148Q00G UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 6) FDO2202E2S0 UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 7) FDO2206E1JE UoM Server Room 2

Page 19: jira.skatelescope.org · Web viewDocument No.: Revision: Date: SKA-TEL-SKO-0000000 G 2019-05-09 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6

Equipment Type Vendor Model Number Device Name Serial Number Asset Owner Room Location

Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 1) FDO2204I328 UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 2) FDO2202I29N UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 3) FDO2202E201 UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 4) FDO2202Q2DE UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 5) FDO2202I0TK UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 1) FDO2202I29G UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 2) FDO2202I29K UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 3) FDO215E2B4 UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 4) FDO2202I29W UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 5) FDO2202E1EK UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 6) FDO2125Q1FE UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 7) FDO2201I27Z UoM Server Room 3 (Chamber)

Table 5: UoM Equipment Used by the SKA Observatory

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 19 of 19