Transcript YerPhI Network Overview Jun 2012

YerPhI Network Overview
Sarkis Mkoyan
*Yerevan Physics Institute. 2 Alikhanyan Brothers St.,
[email protected]
YerPhi Local Area Network
Cryogen Lab
Applied & Radiation
Physics
Accelerator Building
Accelerator
Mini Accel
(Marzik)
Network Management
Center
OEP building
Theor.Physics dep.
building
Experiment Physics Lab
Link To Grid.am
1024/6 Mbps
Cosmic Ray Division
Link To WEB ISP
100 Mbps /12 Mbps
Grid.am
Web ISP
1024/6 Mbps
GRID Segment
100/12 Mbps
Cisco 7206
Servers Segment
Mail Server
Grid Cluster
www Server
CE
Ftp Server
SE
Firefall Server
RARIUS Server
WN-1
VoIP Server
WN-2
Net.Monitoring
L3 Switch
WN-3
Stern Hermes
WN-15
Bhor Hermes
DNS server
Admin Build
22 Building
4 Building
Accelerator
Cryogen Lab
Applied &
Radiation
Physics
OEP
AANL Voice and Video Conferencing System Components
HDX 6000
IP
4-Line Telephone Adapter
AANL Local
Telephone Network
SIP Server
Open Meetings Video
Conferencing Server
Cosmic Ray Division (CRD Network
Aragats Station
Aragats LAN
Halabyan-24 CRD Office
Servers And Workstations
CRD Yerphi LAN
Nor-Hamberd LAN
Servers And Workstations
22 Building Yerphi
Nor-Aamberd Station
11 Mbps 2400Ghz Wireless Link Cisco 1300 AP
90 Mbps 5180 Ghz Wireless Link Microtik Router
1000 Mbps Fiber Optic
10/100/1000 Mbps Ethernet
Servers And Workstations
The current communications infrastructure at YerPhI has been developed beginning
from 1994-1995 and mainly based on 10Mbps Ethernet technology. Later
development 2001-2002 by using DESY supported old 10Mbps switches mainly
concerned with sufficient enlargement, but actually information backbone itself and
its topology remain unchanged. Last development was 2005- 2006 NATO
Networking infrastructure project.
In the framework of that project 4-wire Fiber optic cable are installed between 6
buildings of Yerphi.
The new layer-II switches (one per building) were installed. User level network still
manly based on 10 MB Hubs and hub-segmented huge network does not allow
securely isolate one segment from other one and using VLANs. Even segmentation
via routers does not solve the problem inside the segments themselves.
For end users in YerPhI there used Intel based Workstations with Linux and
Windows platforms.
All computing facilities are included in YerPhl's Local Area Network. YerPhI LAN
includes 10 buildings, covering big enough area. Practically all types of services
with TCP/IP protocol stack are available for end users.
In total YerPhI computer network consists of over 400 workstations. They are
located in 10 buildings
At Yerphi and Aragats ,Nor-Hamberd Stations (see Site Diagram).
YerPhI Bandwidth Allocation and Firewall Policies
YerPhI LAN has two outbound channels 12 Mbps through Web LLC and 6 Mbps through National
Academy of Science of Armenia. YerPhI is a RIPE member (AS12304) and owns 8xC class IP address
ranges.
IP Space is divided in 3 groups.
IP Group “Grid” members and policies:
GRID Cluster
Grid oriented servers and services
ALICE,ATLAS Collaboration Workstations
Access to ASNET and Educational Network 1000 Mbps
Access to Outside Armenia 6 Mbps
No session Limits
IP Group “Privilege” members and policies:
DESY Collaboration servers and Workstations
JLAB Collaboration servers and Workstations
CRD Servers
Access to ASNET and Educational Network 1000 Mbps
Access to Outside Armenia 12 Mbps channel trough Web LLC
Privilege Level min 70 % max 95% of available bandwidth
Limit per session is 1,6 Mbps
IP Group “Workstations” members and policies:
YerPhI LAN Workstations
Access to ASNET and Educational Network 1000 Mbps
Access to Outside Armenia 12 Mbps channel trough Web LLC
Privilege Level min 30 % max 95% of available channel
Session limit 512 Kbps
List of Extra works performed by AANL(Yerphi) Computer Center Staff
During 1-th quarter 2012
JAN,Feb,MAR
Video conferencing equipment deployment, configuration, testing.
Local Video Conferencing “Open Meeting” server Installation, currently in pre-production testing phase.
VoIP “Asterisk” server Installation connectivity to Yerphi local telephone PBX for 4 channels, currently in
pre-production testing phase.
Grid worker nodes RAM and HDD upgrade.
Installing on 8 nodes Scientific Linux OS Grid software.
Participating to world-wide WiFi roaming access service RADIUS authentication and authorization Server
installation and configuration.
Thank You
Sarkis Mkoyan
*Yerevan Physics Institute. 2 Alikhanyan Brothers St.,
[email protected]