1. Jefferson Lab Site Update February 25, 2014 Bryan Hess bhess@jlab.org

2. Infrastructure Modernization Project Campus fiber project beginning after budget delays Fiber loop, dual connectivity to major facilities and buildings Planning capability for two demarcation points on campus, two edge routers CD-2 in May; design underway now

3. Next Generation Firewalls Currently using Palo Alto PA-5050 (10Gb) as the firewall for internet and guest network access Solid now after some initial software stability problems searching/reporting features very useful GUI is useful for rule editing Still making the transition from traditional firewall (port, protocol) rules to application-based in some cases.

4. IPv6 progress We get most of our spam over IPv6 now. Looking at different services/appliances to remedy that. Replacing non-IPv6 capable firewalls. Should be ready for first dual-stack vlans by summer Planning a few server networks first, then a network management vlan and a desktop vlan as a pilot. We do not expect dual-stack parity anytime soon, but we do expect to incorporate IPv6 into more projects Next hurdle: revise in-house network management software

5. JLAB Connectivity E-LITE provided drawing

6. JLAB ↔ E-LITE ↔ ESNet Jlab connectivity to ESNet is via E-LITE DWDM ring, then to Ashburn and McLean E-LITE contract (currently Verizon circuits) is being rebid by Old Dominion University. McLean router going away now Ashburn 100Gbit circuit in FY15, 10Gbit Atlanta soon Today: Single 10Gig Ethernet hand-off to jlab Planning for ≥10Gbit protected ring after FY15