NETPDTC AIM Central NETPDTC AIM Central Site and CPM HostingSite and CPM Hosting

4-6 May 2010

Bruce Bare, NETC, CIODenise Green, CNATT, N6

Jake Aplanalp, NAWCTSD, AIM Pgm Mgr

OverviewOverview

•Central Site AIM (AIM I/II)•CPM Migration Plans

Follow-on Actions from Nov FRBFollow-on Actions from Nov FRB

• NETC CIO coordination within the organization and with NETPDTC, supported by AIM team– Ongoing AIM CITRIX performance test at NETPDTC for AIM I

(prototype) and AIM II (CNATT) instances

• NETC CIO support for near-term CNATT Central Site implementation hosted at NETPDTC

• NETC CIO and AIM PM submitted POM-12 data for procurement of hardware/software necessary for enterprise-wide AIM CITRIX access

Current Support at NAWCTSDCurrent Support at NAWCTSD• Continued production support for SSP SWS training

community– Resolving performance and reliability issues; including complete

rebuild of system with new servers

– Lab now has IA (Information Assurance) ATO (Authority to Operate)

• CNATTU Tinker AFB and CNATT Det Meridian MS operational support

• Continued support for CNIC, CID, and CPPD prototype instances

• AIM I Rel 4.0 now supporting SWS MT Continuum prototype project

Current Central Site ArchitectureCurrent Central Site Architecture

Commercial ISPNMCI Community

Citrix SecureGateway Server

Web Server Citrix Metaframe / Application

Server

SQL Server

HTTPS/443

DMZ

Current Configuration

SQL/1433

DATABASE

HTTPS/443

HTTPS/443

HTTPS/443

CITRIX/1494

SQL/1433LICENSE/

27000ICMP

NETC CIO Enterprise AIM Hosting PrototypeNETC CIO Enterprise AIM Hosting Prototype

• Server(s) located within the NMCI domain at NETPDTC

• NMCI users access centralized (by Center) with SQL Server database as NMCI share

• Non-NMCI users access centralized SQL Server database via Metaframe

• CNATT is the first instance of that architecture

NETC CIO ArchitectureNETC CIO ArchitectureProposed Configuration

NMCI User

Commercial ISP

Non NMCI User

NMCI

SQL Server

Ports for AIM User to File ShareTCP 139TCP 445UDP 137UDP 138

Ports for AIM User to SQLTCP 1433

File Share

Citrix Server Farm

AIM Application Server

Ports for AIM User to CitrixTCP 443

Ports for Citrix to ApplicationTCP 139TCP 445UDP 137UDP 138

Ports for Application to File Share

TCP 139TCP 445UDP 137UDP 138

Ports for Application to SQL

TCP 1433

NMCI - CITRIX Enclave

• CNATT currently has dispersed instances of AIM across 15+ sites in the CNATT domain

• Supported by NETC CIO/NETPDTC, consolidating all AIM II curricula data at NETPDTC-hosted Central Site and based on NETC CIO architecture

• Planning begun Sep 09, prototype on-line for testing in Apr 10; full system operation TBD

• AIM team supporting NAWCTSD & CNATT by:– Implemented new privilege levels for AIM II w/in Central Site

domain

– Assisted in data migration/consolidation/performance testing

CNATT ImplementationCNATT Implementation

• CPM currently operational at NAWCTSD on servers accessed via DREN

• Long-term plan to migrate to NETPDTC as NETC enterprise application within NMCI domain

• Request for Information Services (RIS) being staffed between NAWCTSD and NETC N6/NETPDTC

• Schedule for prototype installation and performance/reliability testing TBD

CPM Migration PlansCPM Migration Plans

Questions?Questions?