www.tils.qut.edu.auwww.tils.qut.edu.au

D I V I S I O N O F T E C H N O L O G Y , I N F O R M A T I O N A N D L E A R N I N G S U P P O R T

Peter Kurtz

Manager, Network Operations Centre

Network Monitoring@QUT

www.tils.qut.edu.au

• QUT Network Infrastructure• Central Overview• Data Network Monitoring• Voice Network Monitoring• System Monitoring • Environmental Monitoring• IT Asset Management System

Outline

www.tils.qut.edu.au

QUT WAN

www.tils.qut.edu.au

QUT Core

www.tils.qut.edu.au

QUT Network

• 45,000 staff and Students • 750 + Servers• 28768 Network Ports• 1117 Switches / Devices• 13 x Cisco routers• 2 x Juniper routers • Border & Corporate

Cisco Firewalls FSM • 2 x Cisco VPN 3000s devices• x Dialin Cisco modems

• 457 x Cisco Apso 1231, 1242o 1131, 1252o 1141

• 5 x Cisco Controllerso 4 x WiSM (2 x 4400)o 1 x 2106

• 1 x Location Server• Radius Authentication

o AD + Free Radius• 2 x VPN devices• 2 x Intrusion Prevention

System (IPS)

QUT Wireless Design

Information Technology Services

CRICOS No 00213J

Wireless Coverage Maps

www.tils.qut.edu.au

Data Network Monitoring

• Central log Server• Syslogs, netflow, authentication logs etc.

• Statseeker• Ciscoworks• IARF• In house software – C and Perl scripts

• Wireless stats• CPU and Memory etc..

www.tils.qut.edu.au

Ciscoworks LMS 3.1• Device configuration roll out; such as the configuration of the FaST trial.• Configuration collection; Used for processing device compliance in release

management.• Inventory reports & Compliance management• User tracking; we can find users and their switch ports, IP address, from

MAC address or random attributes.• Topology manager; Visualise the network and display it's current status in

regard to, link status, spanning-tree status, etc.

www.tils.qut.edu.au

Statseeker

www.tils.qut.edu.au

In-house Monitoring @ QUT

www.tils.qut.edu.au

2005 2006 2007 20080

5000

10000

15000

20000 Wireless Users

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec0

5000

10000

15000

20000

2005 2006 20072008 2009

QUT Wireless Usage 2005-2009

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec0

2000

4000

6000

8000

10000Number of Unique Users - 2009

gp12

3-v.

..gp

123-

v...

gpb0

1-ap

03gp

123-

s...

gp12

3-s.

..gp

ap-m

...gp

c06-

ap01

gpap

-q02

01gp

123-

v...

kg12

3-e.

..kg

ap-i0

102

gpap

-x01

02gp

123-

s...

gpap

-x03

01kg

ap-f

0503

gpb0

1-ap

02kg

123-

b...

kgk0

5-ap

01ci

z203

-...

gpap

-g03

01gp

123-

x...

kg12

3-b.

..kg

123-

n...

kgap

-r01

01kg

rc02

-...

0

10

20

30

40

Wireless Device Associations

Max-imum

Wireless Monitoring

www.tils.qut.edu.au

• Central Management using WCS• Cisco Unified Wireless Networking • WCS manages the Controllers • Controller manage the APs • Bulk configuration using templates• Service Statistics – Usage, Availability, Errors, Rouge

APs

• APs are configured dynamically using LWAPP• LWAPP (Light Wight Access Point Protocol)• CAPWAP (Control And Provisioning of Wireless Access

Points) RFC4118

Wireless Control System

www.tils.qut.edu.au

• WCS alerts on Rouge APs• Detecting their signal• Providing the location• Categorise types access points

• WCS Contains Rouge APs• Controllers disassociation requests

to clients contacting the rouge access point

• Airmagnet laptop Analyser to detect rouge access points in the field

Access Point Rouge Detection

www.tils.qut.edu.au

Internet Access @ QUT

• Internet Access• Audits• Firewall Rules

www.tils.qut.edu.au

Voice Monitoring @ QUT

• PABX System 8100+ extensions• IPTel 1200+ • Alcatel’s 4760 Omnivista

– Incidence Monitoring–Network Topology Tool–Performance/Utilisation Monitoring

www.tils.qut.edu.au

Server Monitoring @ QUT

• Using a mixture of open source products and Vendor supplied tools from HP, VMware and Sun.

• Open Source tools include Nagios and Cacti + in-house system called SMAR (System Monitoring and Reporting).

• Over 750 servers monitored by ITS.• Monitoring Service is under review to consider new

technologies such as Hyperic HQ, and MS SCOM etc.

www.tils.qut.edu.au

• Power and UPS • Monitoring temp in data centers• Swipe access• CCTV Monitoring

Environment Monitoring@ QUT

www.tils.qut.edu.au

• Finance system • Ciscoworks • 2009 Project to develop a prototype

database

IT Asset Management@ QUT

www.tils.qut.edu.au

• IT Asset Life Cycle Tracking– Procurement, RMA, Write offs – Finance system connection– Electronic Stocktakes

• Develop a Dashboard – one view – Data Network, PABX, Hosts, UPS

Where to next?

www.tils.qut.edu.au

Questions