KFUPM Enterprise Network

1
KFUPM Enterprise Network

• Sadiq M. Sait
• sadiq_at_kfupm.edu.sa

2
Outline

• KFUPM Enterprise Network Diagram
• KFUPM Network Model
• KFUPM Backbone
• Network Connectivity
• Academic Buildings, SDN, RAS
• Major Acheivements in 2005
• ADSL, WLAN,DCC
• Internet Connectivity - Statistics
• Summary of Network
• KFUPM network services
• Projects 2006

3
(No Transcript)
4
Network Core
5
KFUPM Network Model

• Three layer hierarchical model
• Core layer Cisco Catalyst 6509
• Provides high speed switching between the
  buildings
• Distribution layer Catalyst 3550
• Gateway for the individual building, interface
  between access layer and Core
• Access layer HP 2524, Cisco 2950
• Connects users desktop to the network

6
KFUPM Backbone

• Gigabit IP backbone
• Two core switches to provide full redundancy and
  load sharing, high availability
• Enterprise servers directly connected to core
  switch
• Switching fabric 256 Gbps
• Supports next generation of Video and Voice
  applications
• Video on demand, audio/video streaming, voice
  chatting
• An important part of the universitys overall
  e-learning strategy

7
Academic Buildings Connectivity

• 35 Academic and Administrative buildings are
  connected through 8 core SM fiber at 1 Gbps (More
  than 5600 network points)
• 5 remote buildings are connected through HDSL
  links at 2Mbps (More than 70 network points)

8
SDN Connectivity

• 19 Student buildings (801-816 901-913)
  connected through 8 core SM fiber at 1 Gbps
• Two fast Ethernet connections per each dorm room
• More than 2200 network points

9
RAS Connectivity

• 240 Users can simultaneously use Dial up service
• All faculty/staff dial (860)1010 students dial
  8601820 to connect to the RAS system
• Special services (increased connect time and
  callback service) are provided for limited users
  depending on their requirement

10
RAS utilization
Max 174 connections (72.5)
Avg 84 connections (35.0)
Current 68 connections (28.3.5)
11
Major Achievements 2005

• ADSL
• Wireless LAN
• DCC

12
ADSL Connectivity

• Faculty housing is connected to the KFUPM network
  using 24/7 ADSL links.
• Can accommodate 1000 lines.
• 512 Kbps Upstream channel and 1.5 Mbps Downstream
  channel.
• Dedicated 4 Mbps link for internet connection.

13
Wireless LAN

• Coverage
• 37 Buildings covered, 344 wireless APs
• Scalability
• 6000 users can simultaneously use WLAN
• Standard
• IEEE IEEE 802.11g _at_ 54 Mbps
• Mobility
• Seamless roaming
• Secure communication
• User authentication, Data Encryption

14
(No Transcript)
15
WLAN Security
WLAN Infrastructure

• Cisco 6506 core with WLSM blade
• Cisco Inline Power switches 3560 for PoE
• Cisco Aironet 1200 series access points
• SSID for Fac/Stf is faculty and for students is
  student.
• SSID for guest access is guest

• 802.1x based Wireless security
• PEAP as the authentication Protocol.
• WEP (128 bit) TKIP for encryption.
• Cisco secure access control server
• Fortigate 1000 firewall, Fortireporter

WLAN Management

• WLSE

16
DCC Connectivity

• 696 network points
• DCC buildings are connected to KFUPM network
  through secure Wireless link
• Complete WLAN coverage
• Local services
• DNS, DHCP, WINS, Active Directory, Filer, Patch
  management, Internet proxy

17
Internet Connectivity

• ATM (Asynchronous Transfer Mode) is being used
  for internet connectivity
• Directly connected to KACST Riyadh using STC ATM
  backbone over fiber
• 12 Mbps bandwidth for campus (being fully
  utilized)
• 4 Mbps bandwidth for ADSL (being fully utilized)
• 700 users are simultaneously using internet at
  peak times
• Technically can go up to 155Mbps
• PIX firewall is being used to ensure high level
  of security

18
Internet Bandwidth usage statistics (Campus)
19
Internet Bandwidth usage statistics ( ADSL )
20
Summary of network nodes

• Academic buildings ? 5600 nodes
• Student Dorm buildings ? 2250 nodes
• Buildings on HDSL ? 70 nodes
• DCC ? 696 nodes
• WLAN ? 6000 users ( soft limit )
• ADSL connectivity ? 1000 nodes
• RAS ? 240 lines

21
KFUPM Network Services

• IP-TV
• WWW, Email
• Video conferencing
• Online journal
• Student Information System, Registration
• Web Courses
• Smart Classrooms
• Active Directory, LDAP
• NAS ( online storage facility )
• 200MB for fac/staff and 50 MB for students

22
Advantages of Present Network

• Quality of service (QoS) guarantee.
• Scalable
• Multimedia application support.
• High link speeds
• Fast Ethernet to Desktops
• Gigabit uplinks
• Efficient bandwidth utilization.
• Network security.
• Better support for distributed OS and
  applications.
• Priority-based network traffic management.

23
Projects 2006

• 3000 network points to be added this year
• Student Housing Phase-I
• 1600 network points
• New Academic Classroom Building
• 600 network points
• New Orientation Building
• 600 network points
• Continuous Expansion inside the campus
• New labs are added each semester

24
WebCT Setup at ITCWebCT Campus Edition (Ver.
4.1.5.8)

• gt HP ML570 Server
• gt 4-Way 2.00 GHz Intel Xeon Pentium IV Processors
• gt 4 GB RAM
• gt 3 - 72 GB hard disks in a hardware RAID-5
  configuration
• gt Utilization Statistics as of Semester 051 
• Total Course Accounts 609  
• Total Instructor Enrollment 690   
• Total Student Enrollment 22875  
• Total Instructor Users 388  
• Total Student Users 7669

25
WebCT Access for Non-KFUPMers

• Diploma Program
• Community Colleges
• Dammam Girls College
• Non-course-teaching Events
• (Need approval from DAD ITC to get access)
• Short courses
• Workshops
• Students Clubs
• Training Programs

26
Online Storage Facility (NAS)

• Faculty and Staff have been given 500MB of online
  storage.
• Useful for online access of data from anywhere in
  KFUPM Network
• 200MB quota per Student
• Roaming Profiles of Faculty and students
• Data fully protected from viruses
• Data Backed up regularly

27
Storage Area Networks

• 3.4TB of SAN Storage
• Provides a cost effective enterprise storage
  solution for all platforms, AIX, Linux, W2K,
  and z/OS
• Improves application responsiveness
• Allows Storage Consolidation
• Allows connectivity for storage to be shared
  among several servers