Owner's manual

ManualsBrandsGoogle ManualsSoftwareEducation – access infrastructure guide

Table of Contents

Overview ................................................................................................... 2

Disclaimer .................................................................................................. 2

Elements of access infrastructure .......................................................... 2

Minimum standards for accessing Google cloud services .................. 3

Deployment guide .................................................................................... 4

Possible solutions ..................................................................................... 9

Bandwidth into the campus (including redundancy),

WAN connections and intercampus links ....................................... 9

Firewalls .............................................................................................. 9

LAN : Routers, Switches .................................................................... 9

LAN : WiFi ( including access controllers) ...................................... 10

DHCP & DNS ..................................................................................... 10

Network Management & Monitoring software ........................... 10

 Contentltering ............................................................................... 10

Access controls / Security (SSO, RADIUS) ..................................... 10

Develop your action plan ....................................................................... 11

Google Education –

access infrastructure guide

Summary of content (11 pages)

PAGE 1
Google Education – access infrastructure guide Table of Contents Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Disclaimer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 2
Google Education – access infrastructure guide Overview This document is written to give a guide for building campus internet access (networking) infrastructure that would support cloud services. It walks through various access elements you should consider, standards required for a functional network that can be used to access cloud services, and things to do when deploying the infrastructure.
PAGE 3
Minimum standards for accessing Google cloud services The table below lists the minimum speed you need per concurrent user for them to have a minimally acceptable experience. In summary Per concurrent user you will need between 64kbps to 1Mbps depending on what services your users use. Simple formula is: TBWx = (%C * CCUx * SBWx)1+ (%C * CCUx * SBWx)2+......
PAGE 4
Deployment guide For the Elements of the access network not covered in the Google document “network best practices for large deployments”, the table below walks through a deployment guide for small, medium and large networks.
PAGE 5
Access area Small network Medium network large network LAN : Wired Ports Consider if wired network ports are needed and in which areas Consider if wired network ports are needed and in which areas Consider if wired network ports are needed and in which areas How many ports per area for users and how many for APs and other devices How many ports per area for users and how many for APs and other devices How many ports per area for users and how many for APs and other devices Cabling - at least CAT
PAGE 6
Access area Small network Medium network large network LAN : WiFi Access Controller(s) For very small networks < 10 access points you may be able to implement without a access controller It is likely for a network this size you will have over 10 AP’s and thus it is recommended you have an access controller that matches the brand of AP’s you deploy. It is virtually a requirement that you have an access controller that matches the brand of AP’s you deploy.
PAGE 7
Access area Small network Medium network large network LAN DHCP Use a DHCP server in your network to assign dynamic IP addresses to each device. Use a DHCP server in your network to assign dynamic IP addresses to each device. Use a DHCP server in your network to assign dynamic IP addresses to each device. Most routers and switches have DHCP servers integrated. If yours doesn’t have, you can use the DHCP server in a Linux machine (dhcpd). Most routers and switches have DHCP servers integrated.
PAGE 8
Access area Small network Medium network large network Network Management software & monitoring SW A management software will help you manage your network from a single point, many times with a GUI. For medium and large networks the same network management and monitoring software can be used. Note that the licensing model for some of these paid solutions is based in number of devices managed/monitored. So the larger the network, the more expensive the software license will be.
PAGE 9
Access area Small network Medium network large network Access controls / Security : Radius / SSO Access to your network especially WIFi should be controlled. This can be done by using a radius server and configuring WiFi AP’s to use your Radius AAA infrastructure for authentication and accounting Access to your network especially WIFi should be controlled.
PAGE 10
4. LAN : WiFi ( including access controllers) a. Cisco b. Ubiquiti c. Dell d. HP e. Juniper f. Huawei g. ZyXel h. MicroTik (Routerboard) i. DLink j. Fortinet k. Aruba l. Ruckus m. Aerohive n. Meru o. Xirrus (High Performance) 5. DHCP & DNS Most of the Switch products above would also have DHCP / DNS servers built in or standalone options. Others to consider are: a. ISC.org b. Solarwinds 6.
PAGE 11
Develop your action plan 1. Scope your network size a. Planning horizon for this network ( 1, 2, 3, 4, 5 ...10 years) b. Total number of users and devices c. Number of concurrent users, taking in to account light and peak usage times d. % of wired and wireless users e. other types of applications other than cloud based services that will be running on your network f. Discuss and decide on any policy issues, content filtering, who has access when 2.