+ All Categories
Home > Documents > jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA,...

jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA,...

Date post: 17-May-2021
Category:
Upload: others
View: 1 times
Download: 0 times
Share this document with a friend
28
Name Designation Affiliat ion Signature Authored by: Sam Lloyd Network and IT Security Specialist SKA Organisa tion Dat e: Dr Anthony Holloway Head of Computing, JBCA Universi ty of Manchest Dat e: Joe Clarke Networks Team Lead Universi ty of Manchest Dat e: James Blessing Deputy Director, Network JISC Dat e: David Salmon Head of Research and e- JISC Dat e: Owned by: JBO SITE NETWORK CONFIGURATION PROPOSAL Document Number........................SKA-TEL-SKO-0001074 Document Type..........................................PRP Revision................................................. Author.................SKA, University of Manchester, JISC Date............................................2019-06-25 Document Classification......................UNRESTRICTED
Transcript
Page 1: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

Name Designation Affiliation Signature

Authored by:

Sam Lloyd Network and IT Security Specialist

SKA Organisation Date:

Dr Anthony Holloway

Head of Computing, JBCA

University of Manchester Date:

Joe Clarke Networks Team Lead

University of Manchester Date:

James BlessingDeputy Director,

Network Architecture

JISCDate:

David SalmonHead of Research

and e-Infrastructure Support

JISCDate:

Owned by:

Sam Lloyd Network and IT SKA

JBO SITE NETWORK CONFIGURATION PROPOSAL

Document Number.......................................................................SKA-TEL-SKO-0001074Document Type..........................................................................................................PRPRevision..........................................................................................................................Author......................................................................SKA, University of Manchester, JISCDate...............................................................................................................2019-06-25Document Classification..........................................................................UNRESTRICTEDStatus....................................................................................................................... Draft

Page 2: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

Security Specialist Organisation Date:

Approved by:

Nick Rees Head of Computing and Software

SKA Organisation

Date:

Darren Hankinson

Network and Security Manager

University of Manchester

Date:

Released by:

Sam Lloyd Network and IT Security Specialist

SKA Organisation

Date:

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 2 of 20

Page 3: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

DOCUMENT HISTORYRevision Date Of Issue Engineering Change

NumberComments

A 2019-02-11 - First draft release for internal review

B 2019-03-14 - Changed solution to state the use of two Openreach OSA links and remove the Century Link connection.

Completed most of the TBD actions.

C 2019-04-02 - Updated to include comments\information from JISC and UoM

D 2019-04-05 - Updated to include comments from Nick Rees (added a diagram to section 5.2.3, and updated the requirements for uptime percentages to state that they are indicative figures). Updated the estimated timescales in section 8 to include information received from JISC. Updated the

list of abbreviations.

E 2019-04-08 - Updated section 5.2.3 to state that JISC will provide the SKA with public IP addresses, and added 2x 10GE

NetPath+ services for VLBI in section 5.1 and 5.2.2, as commented by Andrew Veitch of UoM. Updated the

device names for the core switches in server room 1, and added the model number for the SKA30 switch in

Appendix A, as commented by Andrew Veitch.

F 2019-04-16 - Appendix A – changed IP address for gw-ska1 core switch. Updated section 5.2.2 to state JISC required fibre

connectivity between the JBO Basement and SKA Building. Updated section 4.2 to align the SKA uptime requirements with the JISC SLA commitment. Updated section 6.2 to state that the UoM needs to provide JISC with contact details. Updated section 6.3 to state the

SKA need to provide JISC with contact details. Updated section 5.2.3 to state that the SKA needs to inform JISC of how many public IP addresses it requires. Updated

sections 5.1 to state that JISC will provide the SKA with 2x10GE links but tariff for 1GE. Updated section 5.2.3 to state that JISC will provide the SKA with 2x gateway IP

addresses and the links will be active-active. JISC updated sections 5.2.1, 5.2.2 and 5.2.3 stating what

services and connectivity they will provide and what the UoM and SKA will provide.

G 2019-06-11 - Updated section 6.1 to state that JISC will provision and maintain their hardware and services. Updated section 6.2 to state that UoM and SKA need to devise a plan for managing the SKA Observatory BMS and other building

services for the SKA Observatory building. Updated section 9 to include indicative costs provided by JISC. Updated figure 2 in section 5.1. Removed figure 3 in

section 5.2.3. Updated section 7 to state that UoM and SKA will need to devise a migration plan for the transfer of equipment (if this is the case). Updated section 8 by

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 3 of 20

Page 4: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

increasing the dates by one month.

H 2019-05-10 - Corrected some grammatical errors based on comments from Nick Rees. Changed the SKA network colour in

Figure 2 from brown to orange\yellow to make it easier to read. Updated section 5.2.1 to state Reynolds House

and not the JBO Site.

I 2019-06-13 - Updated the relevant sections to state that the UoM has agreed in principal to transfer the ownership of the UoM network equipment used by the SKA Observatory to the

SKA Observatory (subject to legal agreement).

J 2019-06-19 - Added text in section 9 to describe what is included in the JISC costs for the University of Manchester, and

stated that if the University wish to include an additional netpath for VLBI data (resilient service) this would incur

additional cost.

K 2019-06-19 - Updated the estimated timescales in section 8.

L 2019-06-25 - Assigned the document number and changed the document type from DTE to PRP.

DOCUMENT SOFTWAREPackage Version Filename

Word processor MS Word Word 2016 document.docx

Block diagrams

Other

ORGANISATION DETAILSName SKA Organisation

Registered Address Jodrell Bank Observatory

Lower Withington

Macclesfield

Cheshire

SK11 9DLUnited Kingdom

Registered in England & WalesCompany Number: 07881918

Fax. +44 (0)161 306 9600Website www.skatelescope.org

© Copyright 2016 SKA Organisation.

This work is licensed under a Creative Commons Attribution 4.0 International License.Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 4 of 20

Page 5: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 5 of 20

Page 6: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

TABLE OF CONTENTS1 INTRODUCTION............................................................................................7

1.1 Purpose of the document......................................................................................................71.2 Scope of the document..........................................................................................................7

2 REFERENCES................................................................................................72.1 Applicable documents...........................................................................................................72.2 Reference documents............................................................................................................7

3 EXISTING EXTERNAL NETWORK CONFIGURATION AT THE JODRELL BANK OBSERVATORY8

4 REQUIREMENTS OF EACH ENTITY.....................................................................84.1 Jodrell Bank Observatory.......................................................................................................84.2 SKA Observatory....................................................................................................................9

5 JODRELL BANK SITE EXTERNAL NETWORK CONFIGURATION PROPOSAL...................105.1 Proposed Holistic Design.....................................................................................................105.2 Interfaces between Each Entity...........................................................................................12

5.2.1 University of Manchester City Centre Campus and JISC..............................................125.2.2 Jodrell Bank Observatory and JISC...............................................................................125.2.3 SKA Observatory and JISC............................................................................................125.2.4 SKA Observatory and Jodrell Bank Observatory...........................................................13

6 RESPONSIBILITIES OF EACH ENTITY..................................................................136.1 JISC.......................................................................................................................................136.2 University of Manchester....................................................................................................136.3 SKA Observatory..................................................................................................................13

7 OWNERSHIP OF NETWORK EQUIPMENT USED BY THE SKA OBSERVATORY..............14

8 ESTIMATED TIMESCALES FOR COMPLETION.......................................................14

9 COSTS......................................................................................................15

10 APPENDIX A: UNIVERSITY OF MANCHESTER EQUIPMENT SITED WITHIN THE SKA BUILDING....................................................................................................... 18

LIST OF FIGURESFigure 1: SKA Observatory External Communication Requirements.....................................................9Figure 2: Proposed Holistic Physical Network Connectivity.................................................................10

LIST OF TABLESTable 1: Openreach Progress Update Intervals...................................................................................15Table 2: Overall Core Service Costs.....................................................................................................15Table 3: SKA Observatory Costs...........................................................................................................16Table 4: University of Manchester Costs.............................................................................................16

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 6 of 20

Page 7: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

Table 5: UoM Equipment Used by the SKA Observatory.....................................................................19LIST OF ABBREVIATIONS

AENEAS........................Advanced European Network of E-infrastructures for Astronomy with the SKA

CCTV............................Closed Circuit Television

DDoS.............................Distributed Denial of Service

DWDM...........................Dense Wave Division Multiplexing

GBPS............................Gigabits per second

GE.................................Gigabit Ethernet

IGO................................Inter-Governmental Organisation

IPv4...............................Internet Protocol version 4

JBO...............................Jodrell Bank Observatory

JISC..............................Joint Information Systems Committee

JIVE...............................Joint Institute for VLBI in Europe

KCI................................Keeping Customers Informed (Openreach term)

OSA...............................Optical Spectrum Access

POP...............................Point of Presence

SKA...............................Square Kilometre Array

SKAO............................SKA Project Office

TBC...............................To Be Confirmed

TBD...............................To Be Defined

UoM...............................University of Manchester

UPS...............................Uninterruptible Power Supply

VLBI..............................Very Long Baseline Interferometry

VOIP..............................Voice Over Internet Protocol

Wifi................................Wireless Fidelity

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 7 of 20

Page 8: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

1 IntroductionThe driver for the network reconfiguration at the Jodrell Bank site is based on the need for the SKA Observatory to transition to its own network infrastructure as it prepares to become an Inter-Governmental Organisation (IGO). The SKA Observatory will be split across three geographical locations, which include the United Kingdom, South Africa, and Australia, and requires connectivity between all three sites. As the SKA Observatory Headquarters will oversee telescope operations in South Africa and Australia, this connectivity must be constant and reliable.

The University of Manchester are also concerned about the resilience of the current link between the Jodrell Bank Observatory and the Manchester main campus, as a fault on the CenturyLink fibre would result in the loss of network connectivity for the entire observatory site.

In order to meet the requirements of all parties located at the Jodrell Bank site, the University of Manchester, the SKA Observatory, and JISC have worked together to create a holistic approach that suits all entities located at the Jodrell Bank site.

1.1 Purpose of the document

This document describes the external network communication requirements for each entity located at the Jodrell Bank site and defines a proposal that meets these requirements. It also states the responsibilities of each entity in order to achieve this goal.

1.2 Scope of the document

The scope of this document defines the external network communications for all entities located at the Jodrell Bank site.

2 References2.1 Applicable documents

The following documents are applicable to the extent stated herein. In the event of conflict between the contents of the applicable documents and this document, the applicable documents shall take precedence.

[AD1]

2.2 Reference documents

The following documents are referenced in this document. In the event of conflict between the contents of the referenced documents and this document, this document shall take precedence.

[RD1]

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 8 of 20

Page 9: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

3 Existing External Network Configuration at the Jodrell Bank Observatory

At present, a single fibre pair connects the University of Manchester main campus site to the Jodrell Bank Observatory. The University of Manchester has leased the fibre pair from CenturyLink which is currently only contracted until 2020. JISC operates services on this fibre using Ciena optical transmission equipment at each end of the fibre.

JISC provides 4x10GE services between the Jodrell Bank Observatory and Reynolds House at the University of Manchester main campus site. Two of these 10GE services are for production traffic for the Observatory, Discovery Centre and SKAO combined while two provide connections for a Very Long Baseline Interferometry (VLBI) 4.5 Gbps lightpath (10 GE presentation) between the Observatory and JIVE in the Netherlands. In addition, a 100GE lightpath is in place for development work in the AENEAS SKA Regional Centre project.

As there is only a single fibre pair connecting the Jodrell Bank Observatory to the Manchester campus, a break of that fibre will result in the loss of external connectivity to all entities at the Jodrell Bank site.

The SKA Observatory currently uses the University of Manchester network infrastructure for its network services within the SKA building and access to the outside world, which is protected by security appliances implemented by the University of Manchester.

4 Requirements of Each EntityThe Jodrell Bank site has grown with the addition of the SKA Observatory, and all entities are now heavily reliant on external connectivity to the outside world, for example in the 24/7 operation of the remote e-MERLIN telescopes. This reliance will continue to increase in the near future, as the SKA transitions to an IGO and becomes a fully functioning Observatory, and the current network configuration will no longer be suitable.

The sub sections below describe the external network connectivity requirements for each entity at the Jodrell Bank site.

4.1 Jodrell Bank Observatory

The Observatory and Discovery Centre rely on the outbound network connection for connectivity to University of Manchester central services (e.g. desktop PC infrastructure, finance systems, e-mail) and the wider internet. The Observatory runs the e-MERLIN (enhanced Multi Element Remotely Linked Interferometer Network) telescope array and the VLBI National Radio Astronomy Facility. In the case of e-MERLIN this requires the 24/7 production network connectivity for remote telescope control and for VLBI the dedicated lightpath connectivity across Europe to JIVE in the Netherlands.

The Observatory and Discovery Centre will welcome the installation of a backup connection to enable operations to continue in the event of a disruption to the existing connection. Clearly there are different bandwidth requirements for production internet traffic, VLBI links and AENEAS project experimental links.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 9 of 20

Page 10: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

The VLBI lightpath data transmission to the Netherlands continues to develop and the Observatory have moved from linking 1 telescope at 2 Gbps to now being able to connect 6 e-MERLIN telescopes at 0.5 Gbps and one local telescope at 1 Gbps. This inclusion of e-MERLIN telescopes into VLBI greatly improves the imaging fidelity and brings a significant increase in sensitivity of the VLBI network.

The plans for VLBI would be to increase the bandwidth from each telescope, to around 4 Gbps out of the 30 Gbps currently observed for e-MERLIN, with further steps in the future.

4.2 SKA Observatory

The SKA Observatory will be split across 3 geographical locations. All three locations will be interconnected to allow for communications between all three sites, as shown in the diagram below.

Figure 1: SKA Observatory External Communication Requirements

The SKA Observatory Headquarters will require visibility of operations at each telescope location at all times plus access to cloud resources.

To achieve this, the external network connectivity should meet the following requirements:

ensure that connectivity is largely maintainable without outages with an uptime in the range of 99.9%.

1GE bandwidth initially, but increasing to 10GE once the SKA Observatory becomes fully operational.

The SKA Organisation will transition into an Inter-Governmental Organisation and become the SKA Observatory in 2020. Before this transition takes place, it must take full control of its internal networks and services and separate itself from the University of Manchester campus network. The SKA Observatory must:

have full control of all network capable functions, such as VOIP, Building Management Systems, and CCTV within the SKA Headquarters building and its immediate vicinity (cameras physically attached to the outside of the building and visibility of the SKA car park).

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 10 of 20

Page 11: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

have the ability to restrict and control access to its internal networks, including adding security appliances such as firewalls.

The SKA Observatory will also require a number of public IPv4 IP addresses.

5 Jodrell Bank Site External Network Configuration ProposalBased on the requirements defined in the previous section, this section describes a holistic network proposal that ensures all requirements for each entity have been met.

5.1 Proposed Holistic Design

Figure 2 below shows the current physical network connectivity between the Jodrell Bank site and the University of Manchester main campus, and the final intended connectivity.

Figure 2: Proposed Holistic Physical Network Connectivity

This solution will result in two diverse fibre routes terminated with transmission equipment in two different locations at the Jodrell Bank site, which provides redundancy in the event of a fibre break

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 11 of 20

Page 12: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

and transmission equipment failure. One will terminate in the Jodrell Bank Observatory Basement and the other will terminate in the SKA Building. Both fibres will run the Optical Spectrum Access (OSA) service, which uses Dense Wavelength Division Multiplexing (DWDM) down a single fibre pair. This allows multiple independent channels to be run down a single fibre pair. In the Future State diagram above the purple line represents the University of Manchester channel and the yellow line represents the SKA Observatory channel.

At the instruction of the University of Manchester IT Services, Openreach have already installed fibre to the Jodrell Bank Observatory Basement, although no services have been provisioned yet. An order will need to be placed to install a second fibre that terminates within the SKA Building. The fibre route will be determined during the site survey conducted by Openreach. There is the possibility that either a new fibre duct may need to be installed, or both fibres co-existing in the same fibre duct for a short distance (worst case). A risk assessment will be conducted if this is the case.

JISC will install Ciena equipment at the end of each link and have one point of presence (POP) within the Jodrell Bank Observatory Basement and one in the SKA Building. JISC will also provision an ethernet switch at each POP and create a G.8032 subring to allow quicker failover of the links. To ensure that the links remain diversely routed, JISC will use a different location for each point of presence in Manchester. These POPs will be independent of each other. JISC will provision the following services over the fibre links:

2x 10GE Janet Netpath+ services for the University of Manchester (1 per fibre link) 2x 10GE Janet Netpath+ services for the University of Manchester for VLBI (existing services

via the CenturyLink fibre) 2x 10GE Janet IP Services for the SKA Observatory (1 per fibre link).

JISC will provision 2x 10GE services for the SKA Observatory, but will only charge for using 1GE. JISC will monitor the usage and inform the SKA Observatory if they continually exceed the 1GE limit. The SKA Observatory will install 2 firewalls for redundancy and ensure these firewalls support 10GE. This ensures an easy transition to 10GE as and when it is required.

The University of Manchester will use the link that terminates in the Jodrell Bank Observatory Basement as their primary link, and the link that terminates at within the SKA Building as their secondary link.

The SKA Observatory will use the link that terminates within the SKA Building as their primary link, and the link that terminates within the Jodrell Bank Observatory Basement as their secondary link.

This solution will remove the dependence on the CenturyLink fibre for external internet access. CenturyLink will still be used by the University of Manchester for VLBI.

It has been agreed in principal that the ownership of the existing University of Manchester network infrastructure located within the SKA Observatory building would be transferred to the SKA Observatory (subject to a legal agreement).

The SKA Observatory would need to ensure that they have their own telephony solution in place. The control of all Building Management Systems, and CCTV relating to the SKA building can be transferred to the SKA Observatory.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 12 of 20

Page 13: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

The University of Manchester Wifi network capability will be removed from the SKA Building. The SKA Observatory will need to provision Eduroam on the existing SKA Observatory Wifi network if this service is required.

5.2 Interfaces between Each Entity

This section describes the physical and logical connectivity between each entity, so that both parties understand what each entity will provide.

5.2.1 University of Manchester City Centre Campus and JISC

JISC will provide the UoM with the A ends of both 10GE Janet Netpath+ services from the point of presence in Reynolds House. JISC will provide the UoM with 2x pairs of LC ports on an Ethernet switch for production\internet traffic. The UoM will provide the single mode fibre cables.

5.2.2 Jodrell Bank Observatory and JISC

JISC will provide the UoM with the B ends of a 10GE Janet Netpath+ service from the point of presence in the Jodrell Bank Observatory Basement and one 10GE Janet Netpath+ service from the point of presence within the SKA Building for production\internet traffic. JISC will provide the UoM with 1x pair LC ports on an Ethernet switch at each point of presence for production\internet traffic. The UoM will provide the single mode fibre cables.

JISC will install an ethernet switch in the JBO Basement and the SKA Building, which need to be connected to each other. The UoM will provide the single mode fibre link between the two buildings and JISC will provide the single mode fibre cables at each end of the fibre link to connect to each switch.

JISC will continue to provide the UoM with 2x 10GE Janet Netpath+ services from the existing point of presence in the Jodrell Bank Observatory Basement for VLBI traffic (via the CenturyLink fibre). However, additional interfaces for the VBLI and ANEAS projects will be available on the appropriate equipment so that either or both of these services may be moved onto the new infrastructure if required, the details of how and when this service will move are outside of the scope of this document but the requirement to provide these services has been captured and designed into the future development of the services delivered to the campus.

5.2.3 SKA Observatory and JISC

JISC will provide the SKA Observatory with one 1GE Janet IP service from the point of presence in the SKA Building (primary link) and one 1GE Janet IP service from the point of presence within the Jodrell Bank Observatory Basement (secondary link). These services will be delivered over 10G ports so that once the SKA Observatory becomes fully operational additional bandwidth can be provided with no downtime for the SKA Observatory.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 13 of 20

Page 14: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

JISC will provide the SKA Observatory with 1x pair LC ports on an Ethernet switch at each point of presence. The SKA Observatory will provide the single mode fibre cables between the JISC Ethernet switches and the SKA firewalls.

JISC will present two gateway IP addresses to the SKA (one for each router), and the SKA will need to manage the usage of these links. The links will be active-active.

JISC can provide the SKA Observatory with a restricted number of public IPv4 IP addresses based on need. They can provide an unlimited number of IPv6 IP addresses. The SKA Observatory will need to inform JISC of the quantity and type that they require.

5.2.4 SKA Observatory and Jodrell Bank Observatory

The SKA Observatory will provide the fibre cables at each end of the existing fibre link between the two buildings in order to connect to the JISC Ethernet switch located in the Jodrell Bank Observatory basement (SKA secondary link).

The UoM will provide the fibre cables at each end of the existing fibre link between the two buildings in order to connect to the JISC Ethernet switch located in the SKA Observatory (UoM secondary link).

6 Responsibilities of Each EntityThe sections below define the responsibilities of each entity during the reconfiguration of the JBO site network infrastructure and the network separation of the SKA Observatory.

6.1 JISC

JISC have a business relationship with Openreach and will place and manage the order directly with them. This will mean that the University of Manchester and the SKA Observatory will only need to have JISC as a point of contact.

JISC will provision and manage their hardware and services as described within this proposal document.

6.2 University of Manchester

The UoM will need to provide JISC with the relevant contact details of people at the Jodrell Bank Observatory and Estates that may be required during the implementation phase.

The UoM and SKA Observatory will need to define and plan which building management services (environmental controls, fire alarm, security alarm, CCTV, etc) will be maintained and accessible to the University of Manchester and the SKA Observatory, relating to the SKA Observatory building and its immediate vicinity.

Assist with the planning and transfer of ownership of the existing UoM network infrastructure to the SKA Observatory (if the legal documentation relating to the transfer of ownership is agreed).

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 14 of 20

Page 15: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

6.3 SKA Observatory

As the SKA Observatory will no longer be protected against security threats using the University of Manchester security appliances, the SKA Observatory will need to provide their own security appliances in order to protect their internal networks and the Janet network.

The SKA Observatory will need to provide their own telephony solution, as they will no longer use the University of Manchester telephony system.

The SKA Observatory will need to redesign their internal physical and logical network infrastructure to meet their needs.

The SKA Observatory will need to install and configure the appropriate hardware and software required to take control of the relevant building management systems within the SKA Building.

The SKA Observatory will need to implement Eduroam on the SKA Wifi network if this service is still required.

The SKA Observatory will need to provide the following contact details to JISC as part of the service contract requirements:

Management Contact Technical Contact Security Contact

7 Ownership of Network Equipment Used by the SKA ObservatoryThe University of Manchester currently supply and manage the existing network equipment used by the SKA Observatory. This was installed as part of the SKA building installation. This network equipment is currently configured and integrated into the wider University of Manchester campus network. An inventory of the University of Manchester equipment created by the SKA Observatory is listed in Appendix A.

It has been agreed in principal that the ownership of the existing University of Manchester network infrastructure located within the SKA Observatory building would be transferred to the SKA Observatory. The ongoing maintenance and support of this equipment will be the responsibility of the SKA Observatory. This is subject to a legal agreement between the UoM and SKA Observatory, which is out of scope of this proposal document.

If the legal documentation is approved both parties will need to develop and agree a migration plan of how this equipment will be transferred to the SKA Observatory, with an emphasis on minimising downtime to the SKA Observatory and assistance from JISC regarding the external connectivity.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 15 of 20

Page 16: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

8 Estimated Timescales for CompletionThe minimum lead times from Openreach are set at 35 working days (excluding weekends and bank holidays), barring any major issues. As the Openreach fibre to the Jodrell Bank Observatory Basement is already in place, this link may be available for use sooner than the link to the SKA Building, as Openreach just need to provision the OSA service down the existing fibre. JISC can then install the Ciena transmission equipment at each end of the link. Once the additional fibre and OSA service has been installed in the SKA Building and is ready for use, JISC can install the Ciena transmission equipment. JISC can usually install the Ciena equipment within 10 days, dependant on engineer availability.

Openreach provides JISC with regular progress updates over the following timescales:

KCI1 Day 1 Order accepted.KCI2 Day 8 Site survey and fibre plan completed.

KCI3 Day 14

All planning is complete. The committed delivery date and excess construction charges are confirmed (these costs need to be approved if they are above a certain amount, so up to a 5 day delay should be allowed for this).

KCI-p Various A series of updates are provided as each step is closed. These are chased if they don’t happen when expected.

KCI-h Day 35-40 (based on delay in KCI3) Notification of completion and handover.

Table 1: Openreach Progress Update Intervals

Delays can be caused by traffic management (which Openreach need to book with the local council), blocked ducts (from bad weather or poor road maintenance), non-acceptance of standard RAMS, or problems with leaseholders not agreeing wayleaves. The JISC delivery teams will manage this process to try to reduce any possible delays.

For example, if the order is placed at the end of July, Openreach should complete the installation of the additional fibre and provision the two OSA services by the end of October. JISC can then install and configure the Ciena equipment by the end of December.

In the meantime, the SKA Observatory can purchase and install additional equipment (firewalls and switches) and work with the University of Manchester to formulate a migration plan to transfer the ownership of the UoM network infrastructure used within the SKA Observatory building to the SKA Observatory. Once the external links are ready for use, the migration plan can be implemented. The estimated time for completion would be early 2020.

Once the external links are in place, the University of Manchester would be able to migrate the production internet traffic from the JISC service running over the CenturyLink fibre to both Openreach fibres. The estimated time for completion would be early 2020.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 16 of 20

Page 17: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

9 CostsBelow are the indicative JISC costs for delivering the solution and services to each party. Table 2 shows the overall core service costs. These costs will be split evenly between the University of Manchester and SKA Observatory and are included in tables 3 and 4 below. The costs below show the pricing options for a 3 year contract and a 5 year contract. Service 3yr Option 5yr Option Notes

Hardware £10,998.51 £10,998.51 After JISC has contributed 50% of total hardware costs (£21,996.42)

Install £48,650.00 £48,650.00Supplier Annual Rental (w/o services) £30,454.88 £29,453.76

Table 2: Overall Core Service Costs

Table 3 lists the SKA Observatory costs. Service 3yr Option 5yr Option Notes

Hardware £5,499.25 £5,499.25 Split of hardware costs extended to members.

Install £24,325.00 £24,325.00 Half of total install

Supplier Annual Rental £15,227.44 £14,726.88 Half of total solution supplier annual rental

1Gb/10Gb IP Annual Rental £19,380.00 £19,380.00Total Install £29,824.25 £29,824.25Total Annual Rental £34,607.44 £34,106.88

Table 3: SKA Observatory Costs

Table 4 lists the University of Manchester costs. Service 3yr Option 5yr Option Notes

Hardware £5,499.25 £5,499.25 Split of hardware costs extended to members.

Install £24,325.00 £24,325.00 Half of total install

Supplier Annual Rental £15,227.44 £14,726.88 Half of total solution supplier annual rental

Intersite Charge £1,522.74 £1,472.68Total Install (10Gb option) £29,824.25 £29,824.25Total Annual Rental (10Gb option) £16,750.18 £16,199.56Additional Single 10Gb Install £5,280.00 £5,280.00Additional Single 10Gb Annual Rental £528.00 £528.00Total Install (20Gb option) £35,104.25 £35,104.25Total Annual Rental (20Gb option) £17,278.18 £16,727.56

Table 4: University of Manchester Costs

The costs for the "20Gbit/s option" noted in table 4 above cover:Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 17 of 20

Page 18: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

1. Two diversely routed 10Gbit/s connections intended to support a resilient IP service between the University of Manchester main campus and the Jodrell Bank Observatory.

2. A non-resilient 10Gbit/s service between the University of Manchester main campus and the Jodrell Bank Observatory. This is intended to support VLBI traffic that will subsequently be sent onwards via the University's connection to the Janet network using the Janet Netpath service (Standard/classic Netpath) to Jive (NL) via GEANT and SURFnet.

3. Please note that the costs for the Janet Netpath service noted above are not included here.

4. Should an additional 10Gbit/s capacity be required for VLBI traffic, then the cost for this would need to be added as itemised above under "Additional Single 10Gb" Install and Annual Rental.

These figures are indicative as JISC is awaiting information from the supplier. Once final details are provided JISC can present a formal quote to each party for Tables 3 and 4, which can be used to proceed to contract.The University of Manchester and the SKA Observatory are on different tariffs due to the nature of their membership with JISC. The University of Manchester is on Tier 1 as they are members and the SKA Observatory is on Tier 2.

Connecting to the Janet network entitles each organisation to join the Eduroam service without additional cost. However, for the full Eduroam service each organisation must implement its own identity provider service and local infrastructure (RADIUS server, etc).

Standard Denial of Service (DoS) protection is included as part of the Janet IP service, where mitigation is applied dynamically as required. JISC does offer a service that provides a continuous DoS mitigation regime at additional cost.

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 18 of 20

Page 19: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

10 APPENDIX A: University of Manchester Equipment Sited within the SKA BuildingTable 5 below lists the University of Manchester equipment that resides within the SKA Building. This inventory list was generated by the SKA Observatory and may not be the complete list of equipment that is transferred to the SKA Observatory.

Equipment Type Vendor Model Number Device Name Serial Number Asset Owner Room Location

Core Switch (Fibre) Cisco Catalyst 3850 gw-ska 10.255.255.19 (primary) FOC2205T5L7 UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3560 X Series PoE gw-ska1 10.150.40.19 FDO1625P0HZ UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska10 10.150.40.10 FCQ1621Y5HJ UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska11 10.150.40.11 FCQ1621Y5HU UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska12 10.150.40.12 FCQ1621Y5KL UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska13 10.150.40.13 FCQ1621Y5HG UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska14 10.150.40.14 FCQ1621Y5J6 UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska15 10.150.40.15 FCQ1623Y4FT UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska16 10.150.40.16 FCQ1623Y4FJ UoM Server Room 1UPS APC SMX2200RMHV2U Unknown AS1443240028 UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3560 X Series PoE gw-ska2 10.150.40.29 FDO1625P0HH UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska20 10.150.40.20 FCQ1621X0NX UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska21 10.150.40.21 FOC1633Z1HA UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska22 10.150.40.22 FCQ1623Y4EX UoM Server Room 1UPS APC SMX2200RMHV2U Unknown AS1443240029 UoM Server Room 1Access Switch Cisco Catalyst 2960 sw-ska30 10.150.40.30 FOC1726W1JG UoM Server Room 1Core Switch (Fibre) Cisco Catalyst 3850 48XS 10G gw-ska 10.255.255.19 (secondary) FOC2202T30A UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 1) FDO2206Q1ES UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 2) FDO2202I29A UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 3) FDO2203Q1KT UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 4) FDO2202E2SZ UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 5) FDO2148Q00G UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 6) FDO2202E2S0 UoM Server Room 2

Page 20: jira.skatelescope.org · Web viewSKA-TEL-SKO-0001074 L 2019-06-25 UNRESTRICTED Author: SKA, University of Manchester, JISC Page 2 of 6 JBO Site Network Configuration Proposal Document

Equipment Type Vendor Model Number Device Name Serial Number Asset Owner Room Location

Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska40 10.150.40.40 (UNIT 7) FDO2206E1JE UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 1) FDO2204I328 UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 2) FDO2202I29N UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 3) FDO2202E201 UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 4) FDO2202Q2DE UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska50 10.150.40.50 (UNIT 5) FDO2202I0TK UoM Server Room 2Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 1) FDO2202I29G UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 2) FDO2202I29K UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 3) FDO215E2B4 UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 4) FDO2202I29W UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 5) FDO2202E1EK UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 6) FDO2125Q1FE UoM Server Room 3 (Chamber)Access Switch Cisco Catalyst 3650 48 PoE 2x10G sw-ska60 10.150.40.60 (UNIT 7) FDO2201I27Z UoM Server Room 3 (Chamber)

Table 5: UoM Equipment Used by the SKA Observatory

Document No.:Revision:Date:

Error: Reference source not foundError: Reference source not foundError: Reference source not found

Error: Reference source notfound

Author: Error: Reference source notfound

Page 20 of 20


Recommended