Network Service Laurie Collinsworth 10/18/2016

Agenda Introductions Service Description Value Proposition Metrics Cost Security More information Q&A

Introductions Service owner: Laurie Collinsworth Service manager: Eric Cronise Other service delivery team members: Eng: Dan Eckstrom, Scott Bradley, Kevin Feeney, Javier Streb, Derek Rice Ops: Jenny Signor / Leisha Redfield IT Communications, Knowledge Mgmt & Training IT Support Desk

Service Description Service name: Network Service Product(s): Ethernet Brief text description: The network service provides campus-wide Ethernet access with redundant external connections to the Internet and Internet2.

Service Description Available to: For Fee Service Service tier: Zero Faculty, Staff, Students For Fee Service Student NUBB fees apply Fee for Ethernet Jack installation No fee for switching, routing and Internet access Service tier: Zero

Service Description External Network connections (WAN routers) Commodity Internet: Cogent, FLTG Research and Education: NYSERNet, Internet2 Weill Medical College (NYC) Ithaca School District Other connections: National GENI network

Service Description Within Network connections (on the campus backbone) Remote site backbone connections to Geneva, Ruffian Clinic, ILR in NYC, ILR in Buffalo, and Cornell Tech. Cornell Network Extension (CNE+) VPN connections and Wi-Fi to extend the campus network to remote sites for CCE, NYC, Cornell in Washington, and Cornell in Rome Direct connections to Cornell’s VPC’s within Amazon (via peering in NYC) VPN connections for Peoplesoft, Amazon, and Azure

Value Proposition Value proposition Customer impact Key benefits Robust network through standards-based underground fiber, wiring, switching, and routing infrastructure. Central monitoring of traffic capacity, performance, security breaches, and outside attacks (in collaboration with ITSO) Customer impact Users have a consistent experience with the use of the network. Key benefits Cost savings by leveraging central staff & support Monitored, securely patched, redundant

Value Proposition CNE+ A managed environment for a remote office. Remote networks are in Cornell 10 space and can take advantage of campus services such as DNS, Active Directory, Managed Desktop and Shared File Service. If Wi-Fi is configured, Cornell Wi-Fi networks are available. Note: CNE nets NAT out to the Internet over the local ISP and are not protected by Security Profiles. NetAdmins can request a CNE+ network from the ITSD.

Value Proposition AccessNet Centrally managed user networks (wired) that simplify network administration and security. Does not contain printers, lab equipment, servers, etc. Just regular users on managed or BYOD. Can be restricted to particular jacks for use by a particular department (eg. CIT has 3 AccessNets, one in each building) Can be used to provide access in common areas such as shared conference rooms NetAdmins can request an AccessNet from the ITSD.

Network Resiliency Most components are redundant from the external connections down through the core out across the backbone. Except for in the datacenters, the routers and switches are not redundant, however dual power supplies, UPS (30 min) and generators have been applied where possible. Please review the network resiliency during your next building construction or renovation. You may need to request UPS.

Metrics FY16 Q3 FY 16 Q3 Metrics Count as of 3/31/2016 Network Administrators 698 Networks 2416 Unique Devices seen in Q3 193,436 Peak Simultaneous devices 82,400 Peak traffic on campus backbone 42 Gps Peak Internet traffic (ISP) 6.8 Gps Peak research traffic Internet2 5.7 Gps

Annual cost of Network Service Cost to deliver the service: Fee for service: varies FY 16 Annual Cost $3,598,678 Hardware & Software $1,736,520 Labor $1,535,005 Staff Support (5%) $163,576 Admin Overhead (5%) FY 16 Unit cost/year per unique device $18.60

Network Service fees Student Network Usage-Based Billing (NUBB) Fees http://www.it.cornell.edu/services/nubb/ Only students incur NUBB charges. NUBB applies to all Internet access outside of Cornell's network. Usage is a combined total of all wired and Wi-Fi usage added together, for all devices registered to your NetID. NUBB fees Fall 2016 Free monthly allocation 150GB Fee for overage $1.54/GB Monthly billing cap $50

Network Service fees Wired Ethernet Jack: http://www.it.cornell.edu/services/wired/fees.cfm Costs to acquire a new Ethernet Jack Approximate Work estimate $19.65/hr Conduit & Wire to Jack $250 - $2500 Enable service on Jack $67.35 Work Order Fee $5.40 Monthly Service $3.25

Security What risks does use of the service mitigate? Network failure, Network components are protected, actively patched and monitored 7/24/365. Controls routing to Cornell’s official Internet address (IP) space 10 space and transproxy allows devices to be restricted to campus with limited access to critical Internet resources Security profiles protect ResWired, Public Labs, VDI, Access Nets and other NAT’ed traffic leaving campus with Anti-virus and deep packet inspection for malware. SafeDNS provides protection from malicious sites Security Incidents (central traffic scanning by ITSO)

More information Service web pages: http://www.it.cornell.edu/services/wired http://www.it.cornell.edu/services/resnet/ Service catalog entry: https://catalog.it.cornell.edu/admin/43 Service quarterly report: http://cio.cornell.edu/resources/it-reports-documents-and-presentations/itcornell-quarterly-metrics/network-service

Questions? Email questions to: Laurie Collinsworth ljc1@cornell.edu Eric Cronise eric.cronise@cornell.edu