1. 1 State of the Network 1 May 2007 Computing Support Meeting Terry Gray Assoc VP, Technology & Architecture C&C

2. 1997 --> 2007

3. Recent Changes  Expansion, both wired & wireless initiative  Router upgrades (Foundry -> Cisco)‏  Core/Backbone: Layer 2 -> Layer 3, 10Gbps  Network Information & Security Tool portals (Beta)‏  Spanning Tree deployment (just beginning)‏  Tipping Point & Packeteer upgrades  Building & Outside Plant upgrades  Metropolitan Ethernet transport system  First 10GE connections (HDTV & Imaging)‏

4. Growth... (except for modems!)‏

5. Modem Users -a dying breed

6. Devices Seen on Network (adjusted)‏

7. Campus Backbone Traffic >40TB/d

8. Perimeter Security  Firewalls  DIY Logical FWs ( >70 on campus)‏  Managed subnet FWs (new svc, using Cisco FWSMs)‏  P172 (private addresses plus NAT)‏  IDS/IPS  Tipping Points  Homebrew, based on Netflow data  Dark net monitoring  Also, supporting host security:  Vulnerability scanning  Managed host service (Nebula)‏  Security tools portal  UW Policies: computer & data security standards

9. Trends...  Growth continues (speed, capacity)‏  Higher availability expectations  More wireless/mobility  More convergence (e.g. VoIP, video)‏  More TDAs (Traffic Disruption Appliances)‏  More “gated communities” (aka “Balkanization”)  Backlash/Consequences  Complexity/MTTR challenges –harder to diagnose  More tunneling & encryption  FutureNet = local nets linked together by Port 443  More “personal lambda” & “bypass” nets  More SSL VPNs to get around security

10. Immediate Focus Areas  Wireless Initiative, year 3 (remaining 40%)  Stability: router upgrades, spanning tree  Improving diagnostic & management capability  Self-service tools  Improved security visibility and reporting  Next-Gen network requirements gathering

11. Future Needs / Requests  More and fewer security/admin perimeters  Abandoning traditional geographic topologies  More/faster wireless; 802.11n, UWB, etc  Building upgrades (40-50 need it)‏  More visibility into traffic, incl. trend analysis  Perimeter defense bypass  MAC Registration (at least wireless)‏  Network Admission Control (wired)‏  Traffic shaping, by application  Separate and/or faster nets  Jumbo Frames  Dynamic DNS  IPv6

12. Questions/Comments  At the break.... or via email:  gray@washington.edu

13. 13 Wireless Deployment Seattle Campus only (excluding Auxiliaries) Sept. 2005 – Present  ~3.43m Additional ASF covered  Total Seattle Main covered ~4.45m ASF  56 Additional buildings fully covered  Also numerous partial deployments  3 Major Outdoor Areas  HUB Lawn, Quad, Red Square  2573 Access Points installed  Total APs Seattle Main only ~2945  Total APs All areas ~3360  193 General Assignment Classrooms (8751 seats)  Overall GAC covered - 266 of 327 total, or 82%  ~ 248 Departmental Classrooms (~7721 seats)  12 Department/Branch Libraries Seattle