campus network upgrade and wi-fi rollout review and phase 3 project manager tasks
TRANSCRIPT
Campus Network upgrade and Wi-Fi Rollout
REVIEW AND PHASE 3 PROJECT MANAGER TASKS
CURRENT SITUATION
Campus Network upgradeand Wi-Fi Rollout
Phase 1 - Complete
• Preparation for the Wi-Fi and other requirements including; new L2 fibre optic network connections, new PoE switches, master switches and new VLAN’s
• Full Wi-Fi surveys at SDL early adopter campuses
• Remainder of campuses have been allocated 3 WAP’s each for the initial roll-out
• All WAP’s have been delivered with installation instructions
Phase 2 - Complete
VLAN-2
VLAN-1
××
Campus Network- Current
PHASE 3 - AIMS
Campus Network Upgrade and Wi-Fi Rollout
Secure and Protect the Network Itself
• Network no longer behind doors and walls - neighbours will see our Wi-Fi as well and all access must be secured.
• Only known users should connect to our private ‘education’ network.
• Non-Focus devices should only connect to the non-private network and the ‘internet’.
Secure and Protect the Network Itself
Level 5 Websites
Level 8 Websites
Protect Users
• The network needs to support website access policies.
• Act as a second level of protection to the web browsing controls in the devices and via the central Focus Internet Filter.
• Address issues with protection having been compromised by providing internet access outside of the staff and admin areas for events that take place in the campus and other reasons.
Protect Users
Support of Devices andAccess to Applications
We are all increasingly reliant on internet connectivity….to access many applications and using more portable devices:• Students and teachers with Focus devices• Teachers own laptops• CA personnel and other community support• Visitors• For events taking place in the campus
Support of Devices andAccess to Applications
PHASE 3 – PLANNED SOLUTION
Campus Network Upgrade and Wi-Fi Rollout
Campus LAN
FocusCampus
Staff LAN
FocusAssociate
Associate LAN
Campus Network - New
Teachers
Learners
Available Throughout Teaching & Learning areas
Max Level 5 Websites during core hours and Level 3 outside these
(Subject to user permissions)
Wi-Fi access via personal AD username and password
Network Controls and Internet Filter
Campus LAN
• Cabled and Wi-Fi. • Available throughout teaching and learning
areas.• For use by students and teachers. • New students laptops will connect to Wi-Fi
and users will use their normal username and password to connect to the Wi-Fi.
• Up to ‘level 5’ website access during core campus hours - depending on users personal permissions. Reduces to Level 3 outside these.
Campus LAN
Teachers
Secure Staffroom and Admin Areas Only
Staff
Level 8 WebsitesNo ‘open’ Internet
Network Controls and Internet Filter
Staff LAN
• Cabled only. • Only to be available in non-student areas
such as the staff room, office or CA rooms. • For teaching and admin staff only.• Up to Level 8 websites access at all times -
subject to users personal permission.
Staff LAN
• No longer be possible to access the ‘open internet’ from a teachers laptop or a CA team members business laptop as Firewall rules will block internet access unless through the central Focus Internet Filter.
• Non-Focus devices are not supported on the ‘private’ education part of our network.
• Enter the ‘Associate LAN’.
Staff LAN - Note
Secure Staffroom and Admin Areas Only
× Website Access not
supported
Network Controls and Internet Filter
CA Team
Community Users
Staff LAN - Note
Teachers
Available throughout the Campus
CA Team
Community Event Users
Websites as allowed by device
Wi-Fi Access only using daily changing pass-key
Associate LAN
• Wi-Fi only. • For Teachers, staff, CA team, community users
and visitors with non-focus devices.• Separate from the private ‘education’ network.• Access to websites is not forced through the
Focus Internet Filter.• Wi-Fi access is only by obtaining a daily changing
pass-key automatically emailed to each campus.• User access to pass-key at the discretion of the
CA – by auto-email or requested from the campus admin on the day.
Associate LAN
• Not possible to print from the local device connected the Associate Wi-Fi - to a printer on the Campus LAN.
• Users with access to Citrix can navigate to a document saved on their own device and then print to a local campus printer.
• Campuses are welcome to set up their own printer on the Associate LAN but will not be covered by central IT support team.
Associate LAN - Printing
• There are no changes in the way users can connect to Citrix and the website levels that users have access to through this.
• All the LAN’s in the Campus allow access to Citrix and Moodle.
Campus Networks - Citrix
• All Focus provided and approved devices have been configured with internet controls
Websites as allowed by device
Device Internet Controls
PROJECT MANAGER TASKS AND RESPONSIBILITIES
Campus Network Upgrade and Wi-Fi Rollout
• If not already installed, ALL WAP’s must now at least be connected on-line as per previous instructions - even if they may not be required or not yet fixed in final suitable locations.
Installation of WAP’s
Ensure all users and stakeholders are aware of: • What is planned, • How this will affect them• How they will connect, from where and how.A podcast has also been made available to teachers to help explain.
Communicating the Changes
• All documentation is available from the Focus Intranet site http://intranet.focus-school.com/current-projects/campus-wifi-rollout/
• Important that the project managers do check this out as it is not possible to cover every detail in this session including that certain types of computer / operating system will not be able to connect to the campus Wi-Fi.
Further Information and Guides
• Arranging and ensuring ‘first-line’ support cover for any issues relating to the Campus network for the 4 weeks following migration is in place.
• This includes how issues are to be reported and communicated.
• The central IT team will be pleased to support with any technical issues that you are unable to resolve.
Covering Post-Change Support
Use the Web form to confirm that:• Internal communication has taken place.• All WAP’s are on-line.• The locations of the WAP’s.• Local ‘first-line’ support arrangements for any
issues relating to the Campus networks are in place.
Confirming You Are Ready-to-Go
• Once the ‘ready-to-go’ confirmation has been received, a member of the project team will contact you and agree a cut-over date and time.
• This will involve a short connection outage that may impact on users in the campus so they will need to be aware.
Scheduling the Cut-over
• Commences with a Re-boot of the campus main fibre optic connection – Approx. 10 mins.
• Remote configuration work including WAP configuration, application of new Firewall rules – Approx. 60 mins.
• Set up of the Associate key and email – Approx. 30 mins.
Cut Over Programme
• It is essential that you are available on site for the period immediately following the cut-over to support and advise users.
• Basic Testing (see separate document) and any adjustments to the location of the WAP’s.
• Do your ‘LAN Housekeeping’…including removing any Staff LAN connections that are outside of staff and admin areas to avoid any confusion.
Follow-up Tasks
NEXT – PHASE 4
Campus Network Upgrade and Wi-Fi Rollout
• For many campuses, 3 x WAP’s will not provide adequate coverage, particularly as campuses facilities are upgraded for SDL and a programme of Wi-Fi surveys will follow as required.
• Following the above, existing WAP’s may need to be repositioned and additional WAP’s may need to be installed.
Wi-Fi Rollout - Phase 4
Thank you, there is no way we could have accomplished this project without your fantastic support.
We look forward to working with you again.
Thank You for Your Support!