Notes
Outline
ISUnet  and Supporting Technologies
Scott Genung
Manager of Networking Systems
Illinois State University
Topics Covered
Introduction
Products and Technologies
 Protocol Suites
 Enabling Services
 The Enterprise Network Model
 An Overview of ISUnet
 The Future of ISUnet
 Conclusion
Introduction
Introduction
Scott Genung
Manager of Networking Systems
became involved in ISUnet in 1989
senior network engineer since 1991
IEEE member since 1997
BS in ACS at Illinois State University
currently working on MS
Introduction
Networking Systems
1 of 4 groups in Telecommunications
responsible for all electronics within LAN, CAN, WAN, RAS (with a few minor exceptions) in over 250 closets
also responsible for many supporting services such as DNS, DHCP as well as network management systems and databases
6 full time network engineers
Products and Technologies
The OSI Model
OSI (Open Systems Interconnect)
developed by ISO (International Standards Organization)
describes concept of layered protocols
most protocol suites do not have 7 layers
important to understand general concepts at each layer
The OSI Model
 layer 7 - Application
 layer 6 - Presentation
 layer 5 - Session
 layer 4 - Transport
 layer 3 - Network
 layer 2 - DLC
 layer 1 - Physical
Physical Layer
EIA/TIA
develops standards that describes how physical communications infrastructure should be constructed
568 standard
signal regeneration
phase jitter
encoding (bit mapping)
Manchester
NRZI (Non-Return to Zero Inverted)
Physical
amplifiers (analog)
repeaters (digital)
media converters
10Base5 (thicknet) AUI
10Base2 (thinnet)
10BaseT (UTP)
MII
100BaseT
100BaseF
Copper at the Physical Layer
STP (Shielded Twisted Pair)
types
ICS (IBM Cabling System)
STP-A (enhanced)
connectors
UDC (rated at 30Mhz)
EDC (rated at 100Mhz+)
issues
conduit fill
2 pair (application sensitive)
Copper at the Physical Layer
UTP (Unshielded Twisted Pair)
categories
category 1 - POTS
category 2 - digital
category 3 - 10BaseT ethernet, 4Mbs token ring
category 4 - 16Mbs token ring (now gone)
category 5 - fast ethernet (100Mhz @ 100M)
category 5e - (soon to be ratified)
category 6 - (proposed) gigabit ethernet
connectors
RJ45 (8 conductor), RJ11 (2-4 conductor)
Fiber at the Physical Layer
MMF (multi-mode fiber)
media
50 micron, 62.5 micron
short range (850nm, 1300nm up to 2Km)
connectors
ST (round), SC (square)
VF-45 (RJ-45 in shape), MTRJ (smaller SC)
light source
LED, VCSL light source
Fiber at the Physical Layer
SMF (single-mode fiber)
media
8 micron
long range (1350nm, 1500nm up to 40Km)
connectors
SC (square)
light source
laser
DWDM (Dense Wave Division Multiplexing)
Wireless at the Physical Layer
roaming
uninterrupted mobility between multiple areas of wireless service
cellular
low speed (typically 19.2Kb/s)
outdoor
IR (infrared)
line of sight
outdoor or indoor
Wireless at the Physical Layer
RF (radio frequency)
900Mhz (licensed)
2.5Ghz (unlicensed)
1Mbs to 100Mbs
speed is directly proportional to line of sight
DLC
DLC (Data Link Control)
MAC (Medium Access Control)
LLC (Logical Link Control)
MAC (Medium Access Control)
purpose
define means for how device gains access to network
architectures
ethernet (DIX v2, IEEE 802.3)
token ring (IBM, IEEE 802.5)
FDDI (ANSI)
11Mb/s wireless (IEEE 802.11B)
MAC address (hardware)
MAC (Medium Access Control)
access methods
CSMA/CD (ethernet)
CSMA/CA (localtalk, wireless)
token passing (token ring, FDDI)
access domain
collision
contention
variable length frames
MAC (Medium Access Control)
hardware
hubs (shared media)
concentrators (shared media, TDM)
LLC (Logical Link Control)
purpose
provide means for station discovery
layer 2 routing
defined by IEEE 802.2 standard
services
type 1: connectionless
sender does not know the state of the receiver
type 2: connection oriented
sender coordinates state with receiver
LLC (Logical Link Control)
techniques
transparent (learning bridge)
source-route (route discovery)
translational (hybrid)
loop detection
spanning tree (IEEE 802.1d)
LLC (Logical Link Control)
bridge
store and forward
CRC checksum performed at each interface
2 port
transparent, source-route, translational
moderate latency
segmentation by collision domain
LLC (Logical Link Control)
(layer 2) switch
ACTR (Adaptive Cut Through Routing)
CRC checksum performed at destination
multiport (backplane oversubscription)
ASIC based for wire speed (minimal latency)
transparent, source-route
port based segmentation
vLAN (Virtual LAN)
IEEE 802.1q
Network
broadcast domain
layer 2 broadcast
explorers, global advertisement
purpose
interconnect broadcast domains using routers or layer 3 switches (increases scalability)
create path between broadcast domains
dynamic routing protocols
static routes
navigate path between broadcast domains
Network
router
store and forward
CRC checksum performed at each interface
multiport
topological mix
ex: ethernet, FDDI, frame relay, and so on
protocol specific (ex: IP, IPX, AppleTalk, etc)
packet-by-packet (next hop) routing
high latency
Network
layer 3 switch
combination layer 2 switch and routing engine
CTR
flow caching
CRC checksum at destination
ASIC based for near or wire speed
minimal latency
inter-vLAN routing
based upon tags
Transport
purpose
recovery
flow
load balancing
QoS (Quality of Service) examples
IP TOS (Type of Service) prioritization
TCP rate control
hardware
layer 4 switch
Circuit Switch
circuit
established path between sender and receiver
resources guaranteed during session
PSTN (Public Switched Telephone Network)
VC
PVC (Permanent Virtual Circuit)
SVC (Switched Virtual Circuit)
Circuit Switch
frame relay
multiple VCs per physical circuit
each VC has set of attributes
CIR (Committed Information Rate) - guaranteed rate of service
burst rates - maximum rate of service
oversubscription
56K to T3
Circuit Switch
ATM (Asynchronous Transfer Mode)
based upon ITU standards
multiple VCs per physical circuit
fixed length cells (53 bytes) for predictability
service classes (CBR, ABR, VBR, UBR)
LANE (LAN Emulation)
emulate packet switched network
LEC - member of eLAN by VC
LES/BUS - MAC to ATM
LECS - LES/BUS server list for each eLAN
typically based upon SONET
Circuit Switch
SONET (SDH)
OC-3 (155Mb/s over UTP, MMF, SMF)
OC-12 (622Mb/s over MMF, SMF)
OC-48 (1.2Gb/s over SMF)
OC-192 (4.8Gb/s over SMF)
Protocol Suites
TCP/IP v4
synonymous with the Internet
IP (Internet Protocol)
network layer
32 bit address space
class A = 8 bits for network + 24 bits for host
class B = 16 bits for network + 16 bits for host
class C = 24 bits for network + 8 bits for host
class D = reserved for local multicast
subnet mask
defines size of network
determines when traffic must be routed
TCP/IP v4
ARP (Address Resolution Protocol)
network layer
resolves layer 3 address to layer 2 MAC address through broadcast explorer
ICMP (Internet Control Management Protocol)
network layer
can be used to pass flow information between source and destination (ex: redirects, source quench, etc)
TCP/IP v4
TCP (Transmission Control Protocol)
transport layer
acknowledged
sliding window
layer 4 recovery for packet loss or out of sequence
UDP (Unnumbered Datagram Protocol)
transport layer
unacknowledged
application must recover
TCP/IP v4
unicast routing
IGP (ex: RIP, OSPF, IGRP, EIGRP, IS-IS)
EGP (ex: BGP)
static
multicast routing
IGP (ex: MOSPF, PIM)
EGP (ex: DVMRP, MBGP)
TCP/IP v4
to route or not to route
compare source IP address to destination
use subnet mask to determine if destination is local
if not local, send packet to gateway
if local, direct to destination using unicast
NetBIOS
synonymous with Microsoft networking
codeveloped with IBM
session oriented
named pipes (ex: \\hostname\sharename)
NetBIOS over NetBEUI
layer 2 broadcast
non-routable
NetBIOS over IP
WINS resolves NetBIOS name to IP address
SNA
SNA (Systems Network Architecture)
synonymous with IBM mainframe networks
session oriented
PU (Physical Unit)
unit of communication between controller, gateway, or emulator and host
LU (Logical Unit)
individual session of a given PU
AppleTalk
synonymous with Macintosh networking
dynamic layer 3 address
cable-range
zones (Chooser)
routable
IPX
IPX (Internet Packet eXchange)
synonymous with Novell Netware
layer 3 address is equivalent to layer 2
network numbers
multiple encapsulation types
routable
servers are also routers
SAP (Service Advertisement Protocol)
Enabling Services
DNS
DNS (Domain Name Server)
resolves Internet hostnames to IP addresses
ex: www.ilstu.edu resolves to 138.87.4.3
domain hierarchy
.edu, .com, .net, .org, etc.
parent DNS servers
conventions
host.zone.domain
DNS
registration
predefined  static hostname
DDNS (Dynamic DNS)
replication
cached queries
SOA expirations
zone transfers
WINS
WINS (Windows Internet Name Server)
resolve NetBIOS name to IP address
registration
client registers NetBIOS name at boot
replication
registered NetBIOS names are replicated with other trusted WINS servers
DHCP
DHCP (Dynamic Host Configuration Protocol)
servers an IP address, mask, gateway, and DNS servers to a requesting client
can also serve WINS servers
scope
a group of addresses from a defined space that are eligible to be served to requesting clients
relays
redirects DHCP request to DHCP server(s)
Directories
LDAP (Lightweight Directory Access Protocol)
directory database that stores information about a given object class (ie: people, places, things, etc)
schema
structure of record
dynamic
replication
master server updates directory on slave for every change made on an LDAP record
Authentication
TACACS
Terminal Access Control Access Control Server
RADIUS
Remote Authentication In User Dial Service
enhanced user logging
Network Management
SNMP management
MIB (Management Information Base)
states, events
RMON (Remote MONitoring)
statistics
groups
Enterprise Network Model
LAN (Local Area Network)
provides access to end user
horizontal cabling plant
copper: UTP, STP
technologies
ethernet (switched, fast ethernet, gigabit ethernet)
token ring
wireless
LAN (Local Area Network)
access products
hub, concentrator
workgroup (layer 2) switch
WAP (Wireless Access Point)
speed sensing
10/100/1000 ethernet
uplink aggregation
fast ethernet
gigabit ethernet
inverse multiplexing (ex: fast etherchannel)
CAN (Campus Area Network)
switch and route among multiple LANs
vertical cabling (risers)
MMF
outside premise cabling
MMF, SMF
technologies
ATM (OC-3, OC-12)
ethernet (fast ethernet, gigabit ethernet)
FDDI
CAN (Campus Area Network)
products
routers
layer 2 aggregation switches
layer 3 switch (edge, distribution)
layer 4 switch
MAN (Metropolitan Area Network)
used to interconnect enterprise networks
common LATA (Local Area Telephone Access) boundary
LEC (Local Exchange Carrier)
technologies
FDDI
ATM or SONET (SDH) (OC-3 to OC-192)
leased circuit (fractional, 56K, T1, T3)
frame relay
WAN (Wide Area Network)
LEC (Local Exchange Carrier)
services a given LATA
IXC (Internetwork eXchange Carrier)
provides connectivity between LATAs
technologies
leased circuit (fractional, 56K, T1, T3)
frame relay
ATM or SONET
RAS (Remote Access System)
analog dialup system
access concentrator
modems (V.90, K56Flex, X2)
channelized T1, T3, PRI to backhaul calls (DS0)
terminal emulation, SLIP, PPP
authentication
RAS (Remote Access System)
ADSL (Asymmetric Digital Subscriber Line)
speeds range from 64Kb/s up to 8Mbs
downlink faster than uplink
terminate PVCs in router
DSLAM (DSL concentrator)
ATM or frame relay as transport
modems (G.Lite, DMT, CAP)
RAS (Remote Access System)
cable
10Mb/s shared
bi-directional cable plant
modems
hybrid satellite
satellite transmission downlink
analog dialup uplink
wireless Internet
An Overview of ISUnet
Background
demographics
70 buildings
20,000 students
3,500 faculty and staff
volume
11,000 nodes by 1/2000
55% switched ethernet
40% token ring (shared media)
5% fast ethernet or gigabit ethernet
30% growth over previous year
Background
migration
token ring to switched ethernet
phaseout of token ring with 2 years
fast ethernet server farms
class B address space (IPv4)
138.87.0.0
24 bit subnet mask
Background
cabling
60% of existing cabling is STP
original campus cabling standard from late 80’s
35% of existing cabling is UTP-5
campus standard since 1/1996
5% is other (UTP-3)
ISUnet Building Network (LAN)
workgroup token ring
40 station contention domains
around 200 segments campuswide
being phased out
token ring products
Madge CAU/LAM
up to 4 LAM (UTP or STP)
up to 80 shared media ports
Madge RAM/LAM
RAM has integrated LAM
up to 2 LAM (UTP or STP)
up to 60 shared media ports
ISUnet Building Network (LAN)
workgroup ethernet
switched ethernet to the desktop
fast ethernet server farms
FDX fast ethernet, fast etherchannel, and gigabit ethernet uplinks
around 250 ethernet switches campus wide
ISUnet Building Network (LAN)
switched ethernet products
Cisco Catalyst 1924 (~60)
fast etherchannel uplink
Cisco Catalyst 5500 series (~55)
4-11 modular slots depending upon model
Cisco Catalyst 2924 (~85)
24 ports of switched 10/100
Cisco Catalyst 4000 series (~40)
2-5 slots depending upon model
48 port 10/100 modules
gigabit modules
ISUnet Building Network (LAN)
concentrator
CoreBuilder 5000 (~5)
6-20 modular slots
token ring
ethernet (shared media)
TDM backplane
ISUnet Building Network (LAN)
group switches
aggregate workgroup hubs and switches
products
Madge Ringswitch
token ring
up to 8 ports UTP or STP
FDDI
Cisco Catalyst 5500 series
fast etherchannel
gigabit ethernet (GBIC)
token ring (UTP of MMF-VF45)
vLAN trunking (ISL, 802.1q)
Slide 70
The ISUnet Core (CAN)
ATM core layout
4 switching centers
OC-12 (622Mb/s) mesh  (SMF)
ATM switch product
Cisco Catalyst 8540
2 route processors
3 switch processors
8 modular slots
20Gb/s backplane
The ISUnet Core (CAN)
edge switch configuration
13 switching centers
VTP
vLAN distribution
ISL trunking for token ring, 802.1q for ethernet
server at each edge
The ISUnet Core (CAN)
edge switch configuration (continued)
layer 2 switching
access and group switch aggregation
layer 3 switching
inter-vLAN routing
OSPF (MD5 encryption)
PIM (multicast)
IPX RIP
RTMP
The ISUnet Core (CAN)
edge switch configuration (continued)
LANE (LAN Emulation)
2 emulated LANs
LES/BUS at 2 switching centers
each switch dual homed (primary and secondary)
edge switch product
Cisco Catalyst 5500 series
RSM (Route Switch Module)
fast etherchannel line cards
gigabit ethernet line cards
dual port OC-12 LANE card
3.6Gb/s backplane
The ISUnet Core (CAN)
legacy core
designed to support token ring
8 fiber rings
building router interfaces to building network
75% desktops serviced by new core
expect to complete migration of building networks from old core to new core by the end of 2000
Slide 76
The ISUnet WAN
edge router configuration
2 high end routers (colocated in two ATM switching centers)
OC-3 interface into ATM core
FDDI network for redirecting traffic between edge routers
LECS database (LES/BUS server list)
NAT (Network Address Translation)
ACL (Access Control List)
The ISUnet WAN
edge router product
Cisco 7507 router
Internet connectivity
frame relay
GTE (BBN Planet)
21Mb/s burst rate
10.5Mb/s CIR
3/2000 4-8Mb/s average
ATM
ICN (Illinois Century Network)
UBR (7.5Mb/s soft limit)
3/2000 3-6Mb/s average
The ISUnet WAN
local connectivity
SDSL
PairGain T1 modems
ADSL (Asymmetric Digital Subscriber Line)
GTE is service provider
University is ISP (DHCP)
speeds range from 768Kbs/128Kbs to 1.5Mbs/384Kbs
residential subscribers (200+ active)
remote networks (ex: greek houses)
peering with other ISPs (ie: apartment complexes)
subscribers backhauled over DS-3
The ISUnet RAS
dialup system configuration
“56K”
V.90 (ITU)
K56Flex (Rockwell chipset)
channelized circuits
T1 = 24 * DS0
PRI = 26 B channels
DNIS
virtual grouping of channels
sourced by number dialed
The ISUnet RAS
dialup system pools
438-8210
off campus callers
284 channels
12 T1 circuits from GTE CO in Normal
6 hour connection limit
spill to 8-8210 when full
8-8210
on campus callers
235 channels
10 T1 circuits from campus PBX
6 hour connection limit
The ISUnet RAS
dialup system pools
438-8200
off campus callers
48 channels
2 T1 circuits from GTE CO in Normal
30 minute connection limit
spill to 8-8200 when full
8-8200
on campus callers
75 channels
3 PRI circuits from campus PBX
30 minute connection limit
The ISUnet RAS
dialup system product
Cisco AS5800
12 port T1/PRI modules
144 port modem cards
Cisco 7206
PPP
Cisco Catalyst 2908
fast ethernet connectivity for 7206
dual homed to edge routers
The ISUnet RAS
dialup system statistics
20,000 calls serviced daily
500,000+ calls serviced monthly
2.5 million calls serviced per semester
authentication
primary and secondary LDAP/RADIUS authentication servers
Slide 85
The ISUnet RAS
ADSL (on campus) configuration
connectivity for buildings not serviced by fiber
ADSL product
Cisco 6130
DMT quad cards
ATM OC-3
Cisco 7206
front-end 6130
Services
DNS (Domain Name Server)
hidden primary (not even InterNIC knows)
4 secondary servers co-located at ATM switching centers
WINS
6 servers co-located in edge switching centers
full replication
DHCP
2 servers located in ATM switching centers
web based authentication (LDAP)
The Future of ISUnet
The Future of ISUnet
access technologies  (LAN)
fast ethernet to the desk becomes standard connectivity for the desktop
need to continue to displace STP with UTP-5 or better
fast ethernet or gigabit ethernet becomes standard for servers
switched ethernet remains viable
token ring connectivity disappears
wireless access
service mobility needs
The Future of ISUnet
residence hall networks
switched ethernet to the desk
port per pillow
7,500 students reside on campus
5 complexes
6 halls currently wired
7 halls left to be wired
The Future of ISUnet
core network (CAN)
OC-48 ATM vs 10 gigabit ethernet
native QOS (end-to-end)
IP TOS vs ethernet COS vs ATM service class
gigabit etherchannel aggregated uplinks
wire speed layer 3 (edge) and layer 4 switches
IPv6
128 bit address space
gateway support with IPv4
DWDM in the enterprise
The Future of ISUnet
WAN
expand connectivity to ICN
upgrade from 7.5Mb/s to DS-3 over ATM
increase peering relationships with other ISPs
introduction of rate shaping technologies
control flow by application
Internet2 connectivity
The Future of ISUnet
remote access
ADSL
encourage all users to adopt ADSL as preferred from of remote connectivity
offer enhanced speeds where available
cable
pilot, test, and introduce cable modem access as alternative to ADSL
peer with cable service provider
analog dialup
still important into the indefinite future because of limited penetration of newer technologies
The Future of ISUnet
services
DNS
implement restricted DDNS
VMPS (vLAN Management Policy Server)
MAC address to default vLAN table
authentication process
static or dynamic addressing
DHCP
integrate web based authentication to VMPS registration
directory services
ADS with Windows 2000
The Future of ISUnet
voice integration
CTI (Computer Telephony Integration)
CES (Circuit Emulation Services)
PBX integration
video integration
H.323 desktop video over IP
H.320 video gateway
network attached video switch (MCU)
Conclusion
Conclusion
continued movement towards mainstream ethernet technologies
switched 10BaseT, 100BaseT, 1000BaseT
support evolutionary application changes
enhance scalability of ISUnet to support subsequent growth
introduce services that aid in enhancing the management of network resources
QoS
Conclusion
enhance survivability of ISUnet to respond to increased dependence levels
greater flexibility for future technology integration
positioned for network and application convergence (voice, video, data)
positioned for next generation Internet (I2)
Questions?
Scott Genung
Manager of Networking Systems
sagenung@ilstu.edu