1. NG/VITA Strategy & Architecture Tony Shoot December 19, 2006

2. Agenda A Glance –Transformation Enterprise / Technical Architecture
Agency WAN/LAN High Level Design and transformation methodology

3. Transformation Messaging Services Desktop Help Desk
Mass Desktop Refresh Projects
Network Printer Consolidation and Refresh
Enterprise Desktop Management Systems
Enterprise Help Desk in Lebanon and Meadowville
Field Based agents and technicians for Level 3
Enterprise Help Desk System (Peregrine)
Enterprise Exchange/Outlook
Enterprise Collaboration tools
Active Directory, DNS
Mainframe and Servers
Transformation
Security
Reliable, High Performance,
Enterprise-Wide IT Infrastructure
“People – Process – Tools”
New IBM and Unisys Mainframes in new Data Center
Consolidation and refresh of servers
Migration of servers to the data center
Enterprise Security Operations Center
Computer Security Incident Respon Center
Secure Internet Gateway
Facilities Tier 3 and Tier 2
Network
Voice / Video
New Data Center/Office Building in Meadowville
New Disaster Recovery Center and Help Desk
in Lebanon/Russell County
New Commonwealth-wide MPLS Core WAN
LAN upgrades to local switches/routers as needed
Network Re-addressing of IP, DHCP
Voice over IP Network optimized for voice and video traffic

4. Enterprise Architecture
An Enterprise Architecture depicts the as-is and the to-be.
The VITA Enterprise Architecture governance model defines the methodology for implementing change to the Enterprise to optimize functionality while reducing risk
This presentation will focus on a specific component of the “to-be” Technical Architecture

5. Technical Architecture
Defines the technology & related process and service elements required to support the solutions in response to business objectives/requirements
The foundation layer domain or “component” of the overall Enterprise Architecture

6. Infrastructure (Technology) Architecture
Hardware Configuration Standards
Server Infrastructure
Systems Management
Physical Designs
Network Infrastructure
Technical Reference Model
Security Infrastructure
Logical Designs
Technical Blueprints
Desktop Infrastructure
System Interface Design Documents

8. NETWORKS

9. Agency LAN/WAN High Level Design Transformation Approach

10. Before Transformation

11. Transformation MPLS core and Richmond MAN are Operational
Install New LAN in Agency X HQ
Install New CE Router
Install Parallel Circuit to MPLS network
CESC , NOC, Helpdesk and Internet Secure Gateway are Operational
Transformation

12. Cross connect from NEW LAN to OLD providing routing between nodes on both
Migrate servers to CESC or HQ new LAN
In HQ, start to connect new PCs to LAN
Migrate
Mainframe
Services to
CESC
Transformation

13. Install new LAN/WAN and migration user in remote site
Install new LAN/WAN and migration user in remote site. Swing site to MPLS.
After all remote side been migrated, decommission old WAN link
Transformation

14. Eventually, The old Router will be retired from service
After Transformation

15. Straight-forward Remote site – leverage current LAN
Another option for a straight-forward site where existing LAN equipment has undergone recent refresh and complies with partnership product standards,
NG will reuse the current LAN equipment, the transformation will only involve deploy new segment within the existing platform, re-provision the circuit, and migrate the end user system. The network transformation will be done within one change window.
Transformation

16. Straight-forward Remote site migration – entire site
For agency’s remote sites:
Based on the actual requirements, NG will develop the transformation model for each site with the emphasis on minimizing the transformation impact.
This diagram depicts the transformation model for the site which is small, simple and relatively easy to ‘cut over’. The network transformation will be done within one change window.
Transformation

17. Complex Remote site migration – migration path (parallel circuit)
Where sites are critical or there are issues that require a complex ‘cut over’ process:
The NG will provide the migration path for the phased transformation. With parallel circuit be deployed in the remote site, end user systems can be migrated gradually.
Transformation

18. Complex - Remote site migration – migration path (cross connect)
Where sites are critical or there are issues that require a complex ‘cut over’ process:
The NG will provide the migration path for the phased transformation. With cross connection be deployed in the remote site, end user system can be migrated gradually.
Transformation

19. Hardware / Software Systems
Access Switch
Cisco 3560 single non-stackable switch, 3750 stackable switch, Cisco 6500 (Sup32) access switch for large closet
10/100 Power over Ethernet (PoE), 10/100/1000 PoE, 10./100/1000
Aggregate/Core switch
Cisco 3750E or Cisco 6500 (sup32 or sup720)
Layer 3 switch, GigE or 10 GigE Ethernet
Edge Router
Cisco C2800, Cisco 3800, Cisco 7600
Integrated router/switch service if needed
Cisco 2811 or 2851
Cisco 6500 with FlexWAN
Software
Native IOS for all Switch/router/Wireless AP
Start with IP basic, add feature set as needed
Expand to modular IOS when it mature
Adequate network manage tools to manage all network equipment
Cisco Works, Quality of Service (QoS) manager, etc..
Centralized Network Management
Centralized TACACS server, SNMP manager, configuration repository server
Centralized Critical Spare part list for all in-scope agencies network

20. What’s Next?

21. Desktop Strategy and Architecture

22. Questions