introduction of tein2 noc - asian institute of technology service.pdf · introduction of tein2 noc...
TRANSCRIPT
Introduction of TEIN2 NOCIntroduction of TEIN2 NOC
JilongJilong WangWang<2005<2005--0909--10>10>
OutlineOutline
1.1. NRCTNRCT————Network Research Center of Network Research Center of TsinghuaTsinghua UniversityUniversity
Structure Structure TUNET NOC ServiceTUNET NOC ServiceCERNET NOC ServiceCERNET NOC ServiceCERNET2 NOC ServiceCERNET2 NOC ServiceOther NOC ServicesOther NOC Services
2.2. TEIN2 NOC ServiceTEIN2 NOC Service
11�� NRCTNRCT————Network Network Research Center of Research Center of TsinghuaTsinghua UniversityUniversity
MOEMOE Tsinghua UniversityTsinghua University
College of Information Technology
College of Information Technology
Graduate School at Shenzhen
Graduate School at Shenzhen
Network Research Centerof MOENetwork Research Center
of MOECERNET Operation CenterCERNET Operation Center
Network Research Center of Tsinghua University
Network Research Center of Tsinghua University
Network Research Centerat Shenzhen
WisdomNetwork
TechnologyCo.
NetworkOperation
andServiceCenter
Network Operation
andManagementTechnology
Lab.
Networkand
Information Security
TechnologyLab.
Networkand
InformationApplicationTechnology
Lab.
NetworkArchitecture
and IPv6Lab.
Wirelessand
MobileNetwork
TechnologyLab.
Videoand
Virtual Reality
TechnologyLab.
NetworkDevelopment
andProgramming
Lab.
Administration
Office
ProjectOffice
CNGI-CERNET2Backbone
TsinghuaCompus Network
TUNET
CERNET2Backbone Cernet Network Co.
NSFCNET
IPv6-CJ863-IPv6
Operation Division of NRCTOperation Division of NRCT
1.1. Network Operation GroupNetwork Operation Group��IP managementIP management2.2. Network Information CenterNetwork Information Center��IP address and IP address and
Domain name management, Domain name management, directorydirectory serviceservice3.3. Connection Management GroupConnection Management Group4.4. Custom Service CenterCustom Service Center��helphelp--desk, ondesk, on--site site
serviceservice5.5. System Operation GroupSystem Operation Group��AAA, NMS, DHCP, AAA, NMS, DHCP,
Email, DialEmail, Dial--up, Websiteup, Website6.6. Operation Operation CommitteCommitte��Decision MakingDecision Making
TUNET NOC ServiceTUNET NOC Service
TUNETTUNET
StatusStatus
PerformancePerformance
loglog
StatisticsStatistics
Li nk rout er i f Avg t raf f i c( i / o) Max t raf f i c( i / o) Mi n t raf f i c( i / o) Sum( i / o) Bandwi t h( i / o)
± ±¾ ©- - Ì ì½ ò_2. 5G 202. 38. 120. 192 36 39. 07Mbps/ 3. 21Mbps 294. 51Mbps/ 23. 21Mbps 0. 20Mbps/ 0. 27Mbps 12658910. 85MByt es/ 1040270. 13MByt es 99. 96Mbps/ 7. 60Mbps
± ±¾ ©- - É òÑ ô_2. 5G 202. 38. 120. 192 37 7. 04Mbps/ 17. 03Mbps 512. 46Mbps/ 205. 13Mbps 0. 00Mbps/ 0. 00Mbps 2280353. 35MByt es/ 5517825. 39MByt es 4. 12Mbps/ 49. 71Mbps
± ±¾ ©- - Ö £Ö Ý_2. 5G 202. 38. 120. 192 46 2. 94Mbps/ 14. 82Mbps 40. 07Mbps/ 64. 17Mbps 0. 00Mbps/ 0. 00Mbps 952323. 37MByt es/ 4801406. 88MByt es 5. 38Mbps/ 37. 09Mbps
Service Monitoring SystemService Monitoring System
TrafficTraffic
Ticket SystemTicket System
Network Information SystemNetwork Information System
securitysecurity
WarningWarning
CERNET NOC ServiceCERNET NOC Service
CERNET NOCCERNET NOC
StatusStatus
PerformancePerformance
RoutingRouting
TrafficTraffic
FlowFlow
EquipmentEquipment
CERNET2 NOC ServiceCERNET2 NOC Service
CERNET2CERNET2
StatusStatus
Aladdin Network Management SystemAladdin Network Management System
Weather MapWeather Map
TrafficTraffic
Routing Routing
Trouble Ticket SystemTrouble Ticket System
Other NOC ServicesOther NOC Services
� �
� �GSR12012GSR12008
POS OC-48
GE
DPT Ring
� �
GSR12008
� �
GSR12008
� ��
GSR12008
� � �
GSR12008
CERNET
CSTNET
APAN/STAR�����������
NSFCNET
����
����
������
863863������������������������
——����
——����
CJ IPv6CJ IPv6
CoreRouter
CoreRouter
CoreRouter
CoreRouter
CoreRouter
CoreRouter
borderRouter
EdgeRouter
EdgeRouter
EdgeRouterEdge
Router
EdgeRouter
2.5G POS
WAN
Guangzhou
Shanghai
Beijing
GELAN
GELAN
GELAN
GELAN
GELAN
GEMAN
To Japan
User Network (IPv6)
MAN/LAN
MAN/LAN
CERNET/CERNET2/DRAGONTAPCERNET/CERNET2/DRAGONTAP
CERNET
JANET
STARLIGHT
HARNET
TANET
DRAGONLIGHT CNGI-BJIX
DRAGONTAP
CERNET 2Internet
DomesticPeering
CNGIPeering
APAN KOREN
1.4G
10G
155M
100M 1G 155M 45M 45M
10G
22��TEIN2 NOC ServiceTEIN2 NOC Service
Task Task definationdefination
Connectivity managementConnectivity managementimplementationimplementationincident and problem managementincident and problem management
IP managementIP managementProPro--active and reactive monitoringactive and reactive monitoringProblem managementProblem management
Inventory ControlInventory ControlHardware, software and configurationHardware, software and configuration
Provide online informationProvide online informationtrouble ticket and statisticstrouble ticket and statistics
Collaboration with other Collaboration with other NOCsNOCsAPANAPAN--JP, ...JP, ...
TeamTeam
5Help DeskTechnician/operator
2daily operationIP Engineer
2daily operationConnectivity Engineer
1technical supportDirector of NOC
NumbersWorking levelsCategories
FacilityFacility
Operation CenterOperation CenterCall CenterCall CenterVideo Conferencing Facilities Video Conferencing Facilities Out of Band Network Management Out of Band Network Management Monitoring WallMonitoring WallTesting ToolsTesting Tools
Management SystemsManagement SystemsTTTTNISNISFault (Ping)Fault (Ping)Traffic (Traffic (snmpsnmp))Accounting (Accounting (netflownetflow))websitewebsiteRouting (Zebra)Routing (Zebra)Trap and LogTrap and LogReporting systemReporting systemConnectivity (telnet)Connectivity (telnet)Advanced Service managementAdvanced Service management
WebsiteWebsite
ProceduresProcedures
ConfigurationConfiguration
Performance monitoringPerformance monitoring
Problem handlingProblem handling
SecuritySecurity
Online access of the operation informationOnline access of the operation information
Fault Management ProcedureFault Management Procedure
Problem alert Problem alert TrackingTrackingProblem identification and isolationProblem identification and isolationTrouble ticket assignment and engineer contactTrouble ticket assignment and engineer contactTrouble shootingTrouble shootingProblem notificationProblem notification
initial status reportinitial status reportidentificationidentificationupdatesupdatesclosure closure
IP Monitoring ProcedureIP Monitoring Procedure
ProPro--active monitoringactive monitoring
link statisticslink statistics
packet statisticspacket statistics
routing statisticsrouting statistics
loss and delay statisticsloss and delay statistics
network equipment statisticsnetwork equipment statistics
advanced application monitoringadvanced application monitoring
Reactive monitoringReactive monitoring
taking fault reports around the clocktaking fault reports around the clock
Advanced ManagementAdvanced ManagementIPv6IPv6
fault monitoring fault monitoring traffic and performance monitoringtraffic and performance monitoring
IP MulticastIP Multicastmulticast beaconmulticast beacontraffic monitoringtraffic monitoring
VPN managementVPN managementEthernet over MPLS managementEthernet over MPLS management
QoSQoSCoSCoS statistics statistics flow rankingflow ranking
SecuritySecurityIDSIDShost flaw scanner and the databasehost flaw scanner and the database
ServicesServicesQoSQoSVoIPVoIPVConfVConfIPTVIPTVSecuritySecurity
ChallengesChallenges
Connectivity problem managementConnectivity problem management
BGP policyBGP policy
Open access of the NOC informationOpen access of the NOC information
Shared trouble systemShared trouble system
Security Security
Level 2 services Level 2 services
Advanced servicesAdvanced services
Possible PathsPossible Paths
policy based routing and politics based routing
The Real World RoutingThe Real World Routing
Meet requirement by user AS networkMeet requirement by user AS networkPolicyPolicy
Under the framework of TEIN2 Under the framework of TEIN2
DatabaseDatabaseIRR (who)IRR (who)
ConfigurationConfigurationASAS--path path prependprependPredefined communityPredefined community
Fine tuneFine tuneTraffic and flow monitoringTraffic and flow monitoringEndEnd--toto--end performance toolsend performance tools
AS A AS B AS C
AS D
BGP RoutingBGP Routing
Under the framework of TEIN2Under the framework of TEIN2
Try to provide the BGP routing as more Try to provide the BGP routing as more
flexible as possible to the connected networksflexible as possible to the connected networks
Provide the online access to the routing, Provide the online access to the routing,
traffic and flow informationtraffic and flow information
BGP Implementation (draft)BGP Implementation (draft)Implement BOGON filtersImplement prefix length filteringImplement authenticated BGP sessionsImplement maximum prefixesImplement route dampeningImplement route filtering (prefix-list or access-list or/and filter-list)Accept community tagAccept MEDAccept aggregated prefixes, except for the policy based routing
Open Access of the NOC InformationOpen Access of the NOC Information
Access policyAccess policyUnder the framework of TEIN2Under the framework of TEIN2
Tools and user interfaceTools and user interfaceOpen software toolsOpen software tools•• APAN NOCAPAN NOC•• Abilene ObservatoryAbilene Observatory•• etc.etc.
InIn--house developed toolshouse developed tools•• status/performance/routing/traffic/flow/equipmentstatus/performance/routing/traffic/flow/equipment
RemarksRemarks
RemarksRemarks
Under the framework of the TEIN2, we welcome Under the framework of the TEIN2, we welcome
suggestions and comments for the TEIN2 NOC suggestions and comments for the TEIN2 NOC
operationoperation
SLASLA
BGP routingBGP routing
Monitoring and measurementMonitoring and measurement
ThoughtsThoughts
Global Academic NOC meetingGlobal Academic NOC meetingNANOG, APRICOT, RIPENANOG, APRICOT, RIPE
Video phone Video phone no time zone problemno time zone problem
Shared trouble ticket systemShared trouble ticket systemtrouble shootingtrouble shooting
Shared endShared end--toto--end measurement dataend measurement dataoptimize routingoptimize routing
On Network OperationOn Network Operation
Be PatientBe PatientKnowable, Controllable Knowable, Controllable LogingLogingRedundanceRedundance, Backup, BackupPolicy and ProceduresPolicy and ProceduresOne time one thingOne time one thingLoose CouplingLoose CouplingMake AllowanceMake Allowance
Trouble Ticket SystemTrouble Ticket System
Measurement DIYMeasurement DIY