Iris Port Security for HP Switches

1
Iris Port Securityfor HP Switches

2
Iris Overview

• Iris is a network switch management tool
  developed by CITES
• It presents a unified interface to HP,
  Foundry and Cisco switches
• It manages approx. 60,000 ports on 625 devices

3
Iris v5.2

• What is included in this release
• Port Security
• HP switches only
• Changes in global navigation
• Better access to MAC search
• Better error log display

4
Port Security Features

• This release features a port security option for
  HP switches, allowing ports on the switches to
  learn, or a user to manually add, up to 8 MAC
  addresses and filter or disable the port if a
  violation occurs.

5
Whats Next For Port Security?

• Release v5.2 on Nov 13, 2006
• Implement Port Security for Cisco
• Except for the 1900 and 2900 which are old and
  being phased out
• Implement Port Security for Foundry
• Change multiple ports at once

6
What if you have non-HP switches and need this
feature now?

• Please submit a list of ports and MACs, if
  applicable, that you would like secured to the
  CITES Operations Center and we will make these
  changes for you
• net-trouble_at_uiuc.edu
• 217-244-1000

7
Coming Soon

• Navigation by CER/Building/SW
• The ability to filter your view to all ports in a
  Network, CER, Building, or Switch

8
Long Term Goals (6-12 Months)

• New foundation w/ Oracle DB and API
• Off-Campus network traffic data graphs
• IP-to-MAC-to-Port correlation
• Switch Port-to-Jack/Location correlation
• Historical Switch Port-based statistics
• Bulk uploads downloads of data

9
Iris Contact

• Your feedback is important to us!
• Technical Issues
• CITES Operations Center 244-1000
• net-trouble_at_uiuc.edu
• Feature Requests, General Questions, and
  Training
• Iris Service Managers iris_at_uiuc.edu

10
Iris v5.2 Demo
11
My Networks View
12
My Switches View
13
Port Status Tab
14
Filtering viewable ports
15
Selecting Ports and Zooming In
16
Zoom In focuses on all viewable and selected
ports
17
Zoom Out clears all filters and port selections
18
Navigating tabs
19
Change Settings Tab
20
MAC Addresses Tab
21
Port Details Tab
22
Logged Changes Tab
23
Port SecurityAutomatic Learning Mode
Port D7 Allowed MAC(s) Limit 3
MAC 00E098C3B33A
001372CA4845
00E098C3B33A
24
Port SecurityManual Mode
MAC 001372CA4845
Port D7 Allowed MAC(s)
001372CA4845
MAC 00E098C3B33A
00E098C3B33A
25
Port SecurityIntrusion Filter
MAC 001372CA4845
Intrusion!
Port D7 Allowed MAC(s) Limit 1
MAC 00E098C3B33A
001372CA4845
26
Port SecurityIntrusion Disable
MAC 001372CA4845
Intrusion! Port Disabled
Port D7 Allowed MAC(s) Limit 1
001372CA4845
MAC 00E098C3B33A
27
Port Security Tab
28
Choosing Automatic MAC Address Learning
29
Choosing Automatic MAC Address Learning Mode
30
Choosing Number of MAC Addresses to Learn
31
Choosing Number of MAC Addresses to Learn
32
Choosing Manual MAC Address Entry Mode
33
Note the Previously Learned MAC Addresses Have
Been Retained
34
Causing an intrusion
35
MAC Address Intrusion in Filter Mode
36
Choosing Port Disable Mode
37
MAC Address Intrusion in Port Disable Mode
38
Removing a MAC Address (Automatic or Manual
Mode)
39
MAC Address Removed
40
Manually Adding a MAC Address (Manual Mode Only)
41
MAC Address Manually Added (Manual Mode Only)
42
CampusNetworkUpgradeUpdate
Mike Smeltzer
43
The Campus Network Upgrade

• The Plan
• The Progress
• The Problems
• The Bucks Stop Here
• The Dark Side of Fiber

44
The Plan

• 155 Buildings
• New Cat 6 cabling
• New CERs
• New Electronics
• UIUCnet Wireless
• 100 Buildings
• Electronics only
• Sometimes a little more

45
The Progress

• Completed Buildings
• Buildings in Progress
• Buildings in Planning
• ANAG Prioritized Buildings
• Years 4 and 5 Buildings
• Full Upgrades
• Remaining Electronics Only Buildings

46
Completed Buildings - 1

• 1203 W Oregon (electronics)
• 1207 W Oregon
• 608 S Matthews (electronics)
• Altgeld Hall
• Architecture Building
• Astronomy (electronics)
• Atmospheric Sciences
• Burrill Hall (electronics)
• Campbell Hall (electronics)
• Chemical Life Sciences Lab (electronics)

Childrens Research Center Coble Hall
(electronics) Davenport Hall David Kinley Hall
ERML (electronics) Everitt Lab (electronics)
FLB Basement Freer GSLIS ILIR Illini Hall
(partial)
47
Completed Buildings - 2
Law Building Loomis (electronics CAT 6)
Material Research Lab Meat Sciences Lab MEB
(electronics) Morrill Hall (electronics) MSEB
(electronics) Newmark Civil Engineering
Rehabilitation Clinic Speech Hearing Talbot
Laboratory (electronics)
Tech. Commercialization Lab Transportation
(electronics) Turner Hall University High
School Vet Med Teaching Hospital Large Animal
Clinic (Wireless) Vet Med Teaching Hospital Small
Animal Clinic Waste Management (electronics)
Willard Buildings (electronics)
48
Buildings in Construction

• Animal Science Laboratory
• Engineering Sciences Building
• Foellinger Auditorium
• Foreign Language Building
• Gregory Hall
• Ice Arena
• Illini Hall
• Lincoln Hall Phase 1 (Wireless)
• Lincoln Hall Phase 2 (Wireless) - pending LAS
  approval
• Main Library
• Music Building
• Superconductivity
• Surveying Building

49
Buildings in Planning - 1

• 1101 St. Marys Road
• 1208 Springfield
• 1210 Springfield
• 508 S Sixth (electronics)
• 912 W Illinois (electronics)
• Ag Bioprocess Lab
• Ag Engineering Sciences
• Armory
• Art Design
• Art Annex East I
• Assembly Hall (electronics)
• Burnsides Lab
• Child Development Lab
• Colonel Wolfe School

Computer Applications Coordinated Science Lab
(electronics) Education Building English
Building Harding Band Harker Hall Huff Hall
(electronics/wireless) Illini Union
International Studies Krannert Art
Museum Krannert Center Mechanical Engineering Lab
(electronics)
50
Buildings in Planning - 2
Seitz Materials Research Lab (electronics) Stock
Pavilion Student Services Transportation
Building (electronics) University Press Vet Med
Basic Science Vet Med Surgery Ob.

Medical Science Microelectronics Lab
(electronics) Natural History Building Noyes Lab
(electronics) Nuclear Radiations Lab
(electronics) Observatory Personnel Services
Plant Sciences Lab
51
Buildings Prioritized by the Academic Network
Advisory Group (ANAG)
Mailing Center Milking Parlor Noble Hall Physical
Plant Services Plant Services Building Police
Training Firing Range Smith Music Hall Taft
House Willard Buildings Willard Main Terminal
1202 W Green 1203 W Nevada La Casa 708 S
Matthews 901 W Oregon 909 W Oregon Art Annex East
II Campus Honors Environ. Research Annex Flagg
Hall Grainger Library
52
Year 4 Year 5 Buildings - 1
1001 W Nevada (Theater) 1201 W Nevada (Af. Am.
Studies) 1204 W Nevada (Minority Affairs) 1208
West Nevada (dup. W/1003 Nevada) 408 S Goodwin
(College of Nursing) 505 E Green 51 E Armory 510
E Chalmers (Hisp./Asian Studies) 512 E Chalmers
(Merriam Lab) 513 W Curtis Rd. 57 E Armory
(Slavic Resources) 631 E Green (UIF) 805 W
Pennsylvania
810 S Sixth, Champaign 907 1/2 W Nevada
(Dance) 909 W Nevada (Nursing Skills Lab) 911 S
Sixth (Women's Studies) 912 S Fifth (LAS
General) Admin Info Technology Bldg Aeronautical
Laboratory A Aeronomy Field Station Agriculture
Services Building Agronomy Seed House Agronomy
South Farms Lab
53
Year 4 Year 5 Buildings - 2
Agronomy South Farms Lab Airport Caretaker's
House Allerton Main House-RAPCC Art
Studio Beckwith Hall (Specially-Abled
Housing) Biological Control Laboratory Building
918 (at former CAFB) Building Research Council
Building Building Research Council
Laboratory Central Receiving Building Central
Trash Depot (Waste Handling) Ceramics
Facility Chanute Facility
Crop Science Research Educ. Ctr. Dynamics
Testing Laboratory Engineering Senior Design Lab
Entomology Laboratory Fire Service Institute
Classroom/Off General Arts Building Geological
Survey Laboratory Glass Sculpture
Building Graduate Photography Studio Gym Annex
(see Bldg 21) Hangar 1 Horticulture Field
Laboratory Hydrogen Liquefier Building
54
Year 4 Year 5 Buildings - 3
President's House Printing Photographic Serv
Bldg Printing Services South Building Public
Safety Building Quonset 3 Sculpture
Building Shelford Vivarium Snow Removal Equipment
Building Soy Research - Agronomy Farm Special
Materials Storage Facility Stock Pavilion Temple
Hoyne Buell Hall Turner Hall Greenhouses USDA
Growth Chamber Building
Illini Union Bookstore Kenney Gymnasium Laser -
Radar Facility McKinley Health Center Memorial
Stadium Natural History Survey Greenhouse Natural
History Survey Storage B 2 Natural History
Survey Storage B 3 Natural Resource Studies
Annex Natural Resources Building North Campus
Chiller Plant Nuclear Engineering Laboratory Pest
Management Laboratory Plant Pest Diagnostic
Clinic
55
Remaining Electronics Buildings - 1
Abbott Power Plant ACES Library, Info. Alumni
Center Admissions and Records Building Aerodynamic
s Research Laboratory Alice Campbell Alumni
Center Atkins Tennis Center Bee Research
Facility Bevier Hall Bielfeldt Athletic
Administration Bl Biomedical Imaging
Center Campus Recreation Center - East Campus
Recreation Outdoor Center Christopher Hall
1004 S Fourth (C-Police Training Ins) 1011 W
University (Fac/Staff Asst) 1108 W Stoughton 111
E Green St. 1203 1/2 W Nevada (ICS) 1205 W Nevada
(Engl. Inst) 1206 W Nevada (Native Am.
House) 1808 Woodfield Dr. (Il Geo Survey) 200 S
Wacker Dr. Chicago 205 S Goodwin (Social
Work) 510 Devonshire (CPRD) 510 E Daniel
(Prairienet) 704 S Sixth (UI2) 909 S Sixth (Div
Mgmt Info)
56
Remaining Electronics Buildings - 2
Civil Engineering Hydrosystems Lab Dance
Studio Digital Computer Laboratory Early Child
Development Lab Engineering Hall Engineering
Senior Design Lab Annex Enterprise Works _at_
Illinois Environ Health Safety Bldg Fire Sub
Station Garage and Car Pool Henry Administration
Building I Building Inst Gov Public Affairs
Bldg
Inst of Aviation Admin Building Intramural-Physica
l Education Bldg Irwin Indoor Football
Facility Japan House Krannert Center for
Performing Arts Library Remote Storage
Warehouse Materials Science Lab (old Ceramics
Kiln House) Motorola Building Mumford
Hall National Soybean Research Center North
Campus Parking Deck Optical Physics and
Engineering Bldg Ponds Site Laboratory
57
Remaining Electronics Buildings - 3
Post-Genomics Institute Presidential
Tower Psychology Laboratory Richard T. Ubben
Basketball Complex Roger Adams Laboratory Siebel
Center for Computer Science South Farms Office
Building (Beef/Sheep) Spurlock Museum Student
Services Arcade Building Swanlund Administration
Building Technology Plaza The Irwin Academic
Service Center Undergraduate Library Z and Z-2
Buildings
58
UIUCnet Wireless Deployment

• 60 of all classrooms by the end of 2006
• Armory and Union next summer
• 2009 for last of campus buildings
• Dependency on Network Upgrade

59
The Problems

• Timing of noisy drilling pounding
• Space for CERs
• Adequate power and cooling
• Changing unit requirements
• Asbestos
• Availability of carpenters plumbers

60
The Bucks Stop Here

• 55 of the 4.4 million total net assignable
  square feet of the 5-year project is either
  finished or under construction
• Costs for that 55 are running less than 55 of
  the 20 million total budget

61
Net Assignable Square Feet
4.4 Million Total
Completed Buildings Under Construction In
Planning Not Worked
62
The Bucks Stop Here - 2

• Lots of big buildings up front
• Lots of little buildings at the end
• Cost per square foot will go up with smaller
  buildings
• Too early to extrapolate final financial results,
  but better to be under budget than over budget at
  this point

63
The Dark Side of Fiber

• The Inter-Campus Communications Network (ICCN) is
  about to light up
• The dark fiber will no longer be dark
• November 20th target for test light
• Production services in mid 2007

64
The Dark Side of Fiber - 2

• What will ICCN do for campus?
• Cheaper Internet access
• 10 Gb/s connections to Internet 2 and the
  National Lambda Rail
• Faster access to Banner in Chicago
• Better video conferencing
• Enables on-line remote storage
• Storage working group discussion

65
Questions Discussion