1. Network Service
Laurie Collinsworth
10/18/2016

2. Agenda Introductions Service Description Value Proposition Metrics
Cost
Security
More information
Q&A

3. Introductions Service owner: Laurie Collinsworth
Service manager: Eric Cronise
Other service delivery team members:
Eng: Dan Eckstrom, Scott Bradley, Kevin Feeney, Javier Streb, Derek Rice
Ops: Jenny Signor / Leisha Redfield
IT Communications, Knowledge Mgmt & Training
IT Support Desk

4. Service Description Service name: Network Service Product(s):
Ethernet
Brief text description: The network service provides campus-wide Ethernet access with redundant external connections to the Internet and Internet2.

5. Service Description Available to: For Fee Service Service tier: Zero
Faculty, Staff, Students
For Fee Service
Student NUBB fees apply
Fee for Ethernet Jack installation
No fee for switching, routing and Internet access
Service tier: Zero

6. Service Description External Network connections (WAN routers)
Commodity Internet: Cogent, FLTG
Research and Education: NYSERNet, Internet2
Weill Medical College (NYC)
Ithaca School District
Other connections:
National GENI network

7. Service Description
Within Network connections (on the campus backbone)
Remote site backbone connections to Geneva, Ruffian Clinic, ILR in NYC, ILR in Buffalo, and Cornell Tech.
Cornell Network Extension (CNE+) VPN connections and Wi-Fi to extend the campus network to remote sites for CCE, NYC, Cornell in Washington, and Cornell in Rome
Direct connections to Cornell’s VPC’s within Amazon (via peering in NYC)
VPN connections for Peoplesoft, Amazon, and Azure

8. Value Proposition Value proposition Customer impact Key benefits
Robust network through standards-based underground fiber, wiring, switching, and routing infrastructure.
Central monitoring of traffic capacity, performance, security breaches, and outside attacks (in collaboration with ITSO)
Customer impact
Users have a consistent experience with the use of the network.
Key benefits
Cost savings by leveraging central staff & support
Monitored, securely patched, redundant

9. Value Proposition CNE+ A managed environment for a remote office.
Remote networks are in Cornell 10 space and can take advantage of campus services such as DNS, Active Directory, Managed Desktop and Shared File Service.
If Wi-Fi is configured, Cornell Wi-Fi networks are available.
Note: CNE nets NAT out to the Internet over the local ISP and are not protected by Security Profiles.
NetAdmins can request a CNE+ network from the ITSD.

10. Value Proposition AccessNet
Centrally managed user networks (wired) that simplify network administration and security.
Does not contain printers, lab equipment, servers, etc. Just regular users on managed or BYOD.
Can be restricted to particular jacks for use by a particular department (eg. CIT has 3 AccessNets, one in each building)
Can be used to provide access in common areas such as shared conference rooms
NetAdmins can request an AccessNet from the ITSD.

11. Network Resiliency
Most components are redundant from the external connections down through the core out across the backbone. Except for in the datacenters, the routers and switches are not redundant, however dual power supplies, UPS (30 min) and generators have been applied where possible.
Please review the network resiliency during your next building construction or renovation. You may need to request UPS.

12. Metrics FY16 Q3 FY 16 Q3 Metrics Count as of 3/31/2016
Network Administrators
698
Networks
2416
Unique Devices seen in Q3
193,436
Peak Simultaneous devices
82,400
Peak traffic on campus backbone
42 Gps
Peak Internet traffic (ISP)
6.8 Gps
Peak research traffic Internet2
5.7 Gps

13. Annual cost of Network Service
Cost to deliver the service:
Fee for service: varies
FY 16 Annual Cost
$3,598,678
Hardware & Software
$1,736,520
Labor
$1,535,005
Staff Support (5%)
$163,576
Admin Overhead (5%)
FY 16 Unit cost/year
per unique device
$18.60

14. Network Service fees Student Network Usage-Based Billing (NUBB) Fees
Only students incur NUBB
charges.
NUBB applies to all Internet access outside of Cornell's network. Usage is a combined total of all wired and Wi-Fi usage added together, for all devices registered to your NetID.
NUBB fees
Fall 2016
Free monthly allocation
150GB
Fee for overage
$1.54/GB
Monthly billing cap
$50

15. Network Service fees Wired Ethernet Jack:
Costs to acquire a new Ethernet Jack
Approximate
Work estimate
$19.65/hr
Conduit & Wire to Jack
$250 - $2500
Enable service on Jack
$67.35
Work Order Fee
$5.40
Monthly Service
$3.25

16. Security What risks does use of the service mitigate?
Network failure, Network components are protected, actively patched and monitored 7/24/365.
Controls routing to Cornell’s official Internet address (IP) space
10 space and transproxy allows devices to be restricted to campus with limited access to critical Internet resources
Security profiles protect ResWired, Public Labs, VDI, Access Nets and other NAT’ed traffic leaving campus with Anti-virus and deep packet inspection for malware.
SafeDNS provides protection from malicious sites
Security Incidents (central traffic scanning by ITSO)

17. More information Service web pages:
Service catalog entry:
Service quarterly report:

18. Questions? Email questions to: Laurie Collinsworth ljc1@cornell.edu
Eric Cronise