Fault Tolerant Internet Version 1.0 "Geographic Diversity"


FTI 1-8-2009.jpg
Quick View
Summary: 

This project will provide geographically diverse hardware for a more fault tolerant Internet border on the ASU enterprise IP network.

Start Date: 
September 19, 2007
Go Live: 
September 1, 2009
End Date: 
September 1, 2009
Current Milestone: 
September 1, 2009 Project complete
Stage: 
Recently Released - Completed in last 3 months.
People
Sponsor/Champion: 
Adrian Sannier, Vice President and University Technology Officer
Project Manager: 
Duane Woerman
Contact for more information: 
Duane.Woerman@asu.edu
Associate VP University Technology: 
Bob Nelson
University Technology Director: 
Dave McKee
More Info
Source: 
Internal
Department: 
UTO
Priority: 
Medium
Scope: 

This project will provide geographic diversity for a more fault tolerant Internet border on the ASU enterprise IP network.

It would include two additional routers in diverse locations and allow for redundant hardware and routing between those locations and the Internet via another ISP provider.

The firewall diployment will be in an active passive mode.

This will incorporate the GeoMax circuits to provide diverse fiber paths between ASU and the Internet.

***This project does not provide for any additional security, anomaly detection or mitigation.***

 

All Milestones and Schedule: 
  • Order/Install hardware in Old Main -- Complete
  • Activate data circuits on GeoMax -- Complete
    • remove port channel between Core1-gw and DRT-out-gw-gw -- Complete
    • add port channel between DRT-in-gw and DRT-out-gw -- Complete
    • Rename inside and outside routers -- Complete
  • Build test network in lab -- Complete
    • Develope drawing of test network -- Complete
    • Build test network with FWSM's in MAIN 139 -- Complete
    • Meet with Cisco Engineers to review configuration -- Complete
  • Test and document changes required
    • Work with Cisco to verify config/design (Cisco) -- Complete
    • Logicaly configure test network -- Complete
    • Document MOP and test failover scenarios -- Complete
    • Develop an SLA -- Complete
    • Verify EIGRP and BGP routing and failover  -- Complete
    • Verify FWSM failover -- Complete
    • Verify Multicast routing and failover -- Complete
    • Verify NAT -- Complete
    • Document final MOP -- Complete
  • Extend EIGRP to outside border routers -- Complete
  • Establish iBGP between two outside border routers -- Complete
  • Enable active failover firewalls in inside border routers -- Complete
  • Activate and test Level3 connection. --Complete
  • Add additional 300MB (1GB burst capability) ISP "Level (3)" service in Old Main -- Complete
    • Prepend the routes to 300MB -- Complete
    • Weight output traffic -- Complete
  • Upgrade code in firewalls to 3.2.8 -- Complete
  • Test failover and document SLA -- Complete
  • Project completion -- Complete
    Project review -- Complete

 

Deliverables: 

This project will provide geographical diverse hardware for a more fault tolerant Internet border on the ASU enterprise IP network.

Risk & Threats: 

Funding for second ISP connection

Syndicate content