21 june 2011 a combat support agency defense information systems agency voice services update...

21 June 2011

A Combat Support Agency

Defense Information Systems Agency

Voice Services UpdateVoice Services UpdateDRSN/VoSIP/MobilityDRSN/VoSIP/Mobility


2

• Organization• DRSN

– Modernization Update– Performance– Future of Secure Voice

• VoSIP– Update– Initiatives/Enhancements– Performance

• Mobility– SME PED Architecture– Performance– Future

AgendaAgenda

A Combat Support Agency Jim TravisChief, DISN Program Office

Bruce T. Bennett, SES Deputy Chief Technology Officer Comms

PEO-COMMS

Col Patrick Gooley, USAFDeputy Director

CMSgt Charles Sneed, USAFSenior Enlisted Advisor

NS6

Chief, Implementation Services DivMark Hinton

NS8

Chief, OperationalSupport Sys Div

Margaret Sebastian

NSB

Chief, Business Office

Linda Kjonnerod

NSC

Chief, Enterprise Connection Div

Teri Netter

NSM

Chief, Management Support Division

Melody Kebe

NSO

Chief, Ops and Metrics Ofc

John Bashore

NSS

Chief, Network Optimization Div

Richard Popp

Lisa Belt

Chief, Communications CenterNS1

NSF

Chief, NS Process Improvement Office

Cora Banks

Chief, Customer Services DivMartha Buck

NS7

DirectorCindy E. Moran, SES

Jessie Showers

Chief, Capabilities Center

Randy TanakaChief, National Leadership Command

Capabilities (NLCC) Center NS2

Vice DirectorWilliam J. Brougham, SES

Paul FiliosChief, Engineering Center

NSE

COL Michelle NassarChief, COMSATCOM

Center NSK

Mr. Charles O. Riggs, HQESpecial Advisor for NS (Comms DISN)(703) 882-1879

Charles O. Riggs, HQESpecial Advisor for NS (Comms DISN)

NSP

NST

NSN

Network Services (NS)Network Services (NS)

Unclassified3


4

NS22 – Voice Services DivisionNS22 – Voice Services Division

FUNCTIONS/CONTRIBUTIONS• Global Network System Management

(DSN & DRSN)• Includes Ntwk Ops & Sustain• Includes Design, Impl, & Transition• Includes Dev & Ops Engineering• Includes Performance Monitoring

• Additional Supported Networks• Voice over Secure IP (VoSIP) • Enhanced Pentagon Capability (EPC)• Survivable Emergency Conferencing

Network (SECN)• Secure Mobile Environment Portable

Electronic Device (SME PED)• International Stds Committee – Sec

Voice Secure Voice Liaison with NSA• Contract Management• Switch Cert & Accredit Monitoring

MAJOR PROJECTS• DSN reconfiguration to support

force restructuring• Service/Agency DRSN Switch

Replacement• DRSN Switch Modernization

(Phase III development)• DSN Global Signaling Transfer

Point (STP) reduction• Network Upgrades (MFS to MFSS)• Mobility• SECN Backup fielding• Presidential & National Voice

Conferencing (PNVC)• VoSIP Tech Refresh• IP Enabling the DRSN

DISN Program Management Office

Ms. L. SaffordProgram Manager

NSP

Voice ServicesDivision

Mr. Robert McLaughlinChief

NS22


5

Voice Services DivisionVoice Services Division

Operational Support

System Division

Mr. M. Hermosilla

GS28

Robert McLaughlinChief, Voice Services

Division

NS22

Operational Support

System Division

Mr. M. Hermosilla

GS28

Vincent NguyenChief, Voice Service

Plans & Mgmt Branch

NS223

Operational Support

System Division

Mr. M. Hermosilla

GS28

Ruben AguilarChief, Voice

Edge Services Branch

NS222

Operational Support

System Division

Mr. M. Hermosilla

GS28

Maria MedinaChief, Voice

Services Networks Branch

NS221

Operational Support

System Division

Mr. M. Hermosilla

Sue MoyerSecretary


SDS-1

DSS-1

DSS-2

DSS-2A

DSS-2A replaces all earlier models

Single Chassis version has been fielded since 2006

Final version with up to four chassis, distributed operation: Four Chassis (4 Network Elements) appear as a single switch (co-located or distributed over a campus network). Development completed and under test, expected availability late Summer/Fall 2011.

Switch Capacities

3584 User Ports (896 per Chassis)

2048 Simultaneous Conferences

Preserves all current features and functions including

Multi-level security

Rapid conferencing/conference management

Gateway interfaces (VoSIP/SATCOM/SCIP devices/LOS secure radio systems)

Information Assurance enhancements

DRSN Secure Voice Switch: DRSN Secure Voice Switch: DSS-2ADSS-2A

6


Future Of Secure VoiceFuture Of Secure Voice

• OSD NII and Joint Staff working to update secure voice requirements as replacement for 1992 DRSN ORD

• Reduce the DRSN footprint and increase VoSIP– DRSN provides some unique capabilities (Multi Level Security

(MLS), C2 large conferencing, and tailored conference management capabilities) – not supported in IP today

– Secure voice capability can be supported by VoSIP as a means for SECRET voice only and DRSN long locals for higher security voice requirements.

• JS supporting a JSAP effort for concurrence by the MILDEP’s

• IP enabling of the DRSN Network– IP enable the DSS-2A – 15 to 18 month development effort– $5.2M funded over three Fiscal Years– Implements a new board with embedded hardware and software

that translates digital TDM voice to and from IP while preserving the separation and handling that allows multilevel security.

7


8"Management Threshold defined in JS MROC 4-85, Sep 1986"*Average number of calls from MAY-10 to MAY-11 was “1020760” calls/month

"Management Threshold defined in JS MROC 4-85, Sep 1986""Management Threshold defined in JS MROC 4-85, Sep 1986"

90.0%

91.0%

92.0%

93.0%

94.0%

95.0%

96.0%

97.0%

98.0%

99.0%

100.0%

May-10 Jun-10 Jul-10 Aug-10 Sep-10 Oct-10 Nov-10 Dec-10 Jan-11 Feb-11 Mar-11 Apr-11 May-11

Pe

rce

nta

ge

s

Months

DRSN SWITCH AVAILABILITY(MAY 10 - MAY 11)

CONUS EUR PAC SWA

90.0%

91.0%

92.0%

93.0%

94.0%

95.0%

96.0%

97.0%

98.0%

99.0%

100.0%


Pe

rce

nta

ge

s

Months

DRSN NETWORK AVAILABILITY(MAY 10 - MAY 11)

CONUS EUR PAC SWA

90.0%

91.0%

92.0%

93.0%

94.0%

95.0%

96.0%

97.0%

98.0%

99.0%

100.0%


Per

cen

tag

es

Months

DRSN TRUNK AVAILABILITY(MAY 10 - MAY 11)

CONUS EUR PAC SWA

7973

55

9316

00

9904

92

7204

63

1097

867

1105

321

1138

463

1048

764

9510

68

9772

92

1236

813

1111

685

1162

693

0

200000

400000

600000

800000

1000000

1200000

1400000


Num

ber o

f Cal

ls p

er M

onth

Months

DRSN COMPLETED CALLS PER MONTHS (MAY 10 - MAY 11)

Network Mgnt Threshold 99.00 %

Average # of Calls

Switch Mgnt Threshold 99.90 %

Trunk Mgnt Threshold 99.00 %

DRSN Performance MetricsDRSN Performance Metrics May 2010– May 2011


Future of Secure Voice Future of Secure Voice (Cont)(Cont)

• Pressing hard with assistance from OSD CIO to interconnect other secure voice IP networks such as JWICS, NSTS, CMS and others. – Should result in a greater degree of interoperability as well as

cost savings

– One instrument could support all voice requirements

– Policy is impacting the capability for full connection

• For Now, DRSN will continue to be the provider of MLS voice and C2 Voice Conferencing capabilities with smaller footprint– VoSIP will be the “common user” adjunct to the DRSN for

Secret requirements that do not require the conferencing and other MUFs that DRSN provides

– DRSN likely to be the MLS arbiter for users on multiple system high VoSIP networks

9


Alternate Secure Voice SolutionsAlternate Secure Voice Solutions

• STE/vIPer

• VoSIP

– World-wide network (126 enclaves and over 80,000 customers)

– Integrated with the DRSN

– SECRET Voice ONLY

– Low cost to implement and manage

• Other VoSIP Networks

– JWICS

– Other Classified Voice Networks

10

Voice over Secure IP Voice over Secure IP (VoSIP)(VoSIP)



12

• VoSIP is the current DISN voice service that allows voice

communications to be transmitted by the IP (Secret)

Data service as a separate secure voice service from the

traditional TDM circuit-switched service.

• VoSIP architecture provides a Gateway to the circuit-

switched DRSN, providing interoperability between the

VoSIP Service and the Secure Voice Service.

• VoSIP will be evolving over the coming years as we

upgrade both software and hardware which will

accommodate the introduction of new features and

capabilities coming from the DoD UC Initiative.

VoSIPVoSIP


Unclassified/For Official Use OnlyUnclassified/For Official Use Only

VoSIP UpdateVoSIP Update• VoSIP is a “current”“current” DISN secure voice capability

– It is part of DISA Real Time Services (RTS) and DoD CIO Unified Capabilities (UC) initiatives

– It is an “accessory” to DRSN

• From an accreditation perspective, VoSIP is treated as part of the DRSN

– It is not a complete replacement for DRSNIt is not a complete replacement for DRSN

• There are “technology” limitations• VoSIP provides interfaces to the DRSN and other

networks

13


AFRICOM(301)

Architecture Briefs:Architecture Briefs:Area Code – Distinguish VoSIP RegionsEnclave NNX – Enclave UniqueEnclave SDN – Local Established FormatIP Address – Separate SIPRNet Data & VoiceDirectory – Globally AccessibleSecurity – IA Compliant, JITC CertifiedDRSN Access – DISA CoreDISA Administrative Domain (DAD) – DISA ManagedEnclave Administrative Domain (EAD) – Enclave Managed

CONUSArea Code

(302, 702, 201)22.14.XX.XX/16

EUR Area Code (304, 704)22.161.0.XX/20

SWAArea Codes

(308, 708, 718)22.130.0.XX/16

PAC Area Code

(305)22.161.128.XX/20

“DAD” or “EAD”

DRSN

DRSN

Tier 0

DRSN DRSN

DRSN

Tier 0 Tier 0 Tier 0

“EAD” “EAD”

Enterprise VoSIP ArchitectureEnterprise VoSIP Architecture

14


VoSIP Call Volume SummaryVoSIP Call Volume Summary

0

50000

100000

150000

200000

250000

300000

350000

May-10

Jun-10

Jul-10

Aug-10

Sep-10

Oct-10

Nov-10

Dec-10

Jan-11

Feb-11

Mar-11

Apr-11

May-11

CONUS

CENT

EUR

PACTotal Calls

CONUS Data for June 2010 omitted due to loss of data during a tech refresh.

CENT Data for September 2010 an estimate due to data loss (eight days) during tech refresh. Estimate is based

upon actual.

Unclassified

Unclassified 15


On-going InitiativesOn-going Initiatives

• Enterprise Voice Services and Capability

• Interface with other classified networks (JWICS/EOP)

• Implementation of a VoSIP Gateway (UK/Australia)

• DRSN footprint reduction– Submitted a recommendation for switch decommissioning;

JS processing a JSAP

16


VoSIP Projected EnhancementsVoSIP Projected Enhancements

• Improved “Directory” capability based on a combination of “WEB Services” and “Active Directory®”

• Implementation of a “core” conferencing capability

– MeetingPlace®

– User “WEB” scheduling

• Implementation of an “standardized” interface/dialing plan for interoperability with STU/STE/SCIP devices on DSN/PSTN

• Advocate the use of “Identity Management”

• Pursue spiral migration of VoSIP into applicable portions of DoD CIO/NII Unified Capabilities (UC) vision

17


VoSIP Performance MetricsVoSIP Performance MetricsMay 2010 – May 2011

• No reportable outages at any location (Availability % shown within standard deviations)• Trouble tickets issued only when outages exceed 10 minutes

• No reportable outages at any location (Availability % shown within standard deviations)• Trouble tickets issued only when outages exceed 10 minutes

• Total 126 VoSIP Tier 1 Enclaves are currently in the network 18

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

0.00%

20.00%

40.00%

60.00%

80.00%

100.00%


Pe

rce

nta

ge

s

Monthly

SIPRNET to VoSIP Circuit Availability(MAY 10 - MAY 11)

CONUS EUR PAC SWA

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

10

0.0

0%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

100.

00%

0.00%

20.00%

40.00%

60.00%

80.00%

100.00%


Pe

rce

nta

ge

s

Monthly

VoSIP Gateway Availability(MAY 10 - MAY 11)

CONUS EUR PAC SWA

8091

0

8298

8

9146

7

1058

41

1027

30

1078

64

9993

1

9706

1

1038

93

8975

4

1114

90

1095

52

1163

57

6163

6591 6813

8625

8183

8527

9203

8836

9585

8290

1329

5

1509

7

1400

1

714

922 91

0

907

909

968

890

1500

1837

1481

2830

1306 1117

2252

17

2377

20

2518

44

2594

65

2419

36 2672

92

1698

24

2452

44

2545

21

2717

50

3412

58

3223

83

3097

14

0

50000

100000

150000

200000

250000

300000

350000

400000


Num

ber o

f Cal

ls

Monthly

VoSIP Calls Completed(MAY 10 - MAY 11)

CONUS EUR PAC SWA

111112

115 115116

117 117 117

119121

123125 126

100

110

120

130


Nu

mb

er

of

En

cla

ve

s

Monthly

VoSIP Enclaves Trend(MAY 10 - MAY 11)

MobilityMobility



UNCLASSIFIED//FOR OFFICIAL USE ONLY

Current SME-PED MCEP Current SME-PED MCEP Network ArchitectureNetwork Architecture

20

Cingular

Verizon

Sprint

ManagementConsole

Multi-Protocol Router

APN-I

POPROUTER

SWITCH

PREMISE ROUTER

SIPRNet

CAVirus Scan

Web Server

Mail Server

Customer Enclave Managed Service

SME PED MCEP

SME PEDSERVER

HAIPE

FIREWALL

DECC

Post camp site

NIPRNet

Mail Server

Web Server

Virus ScanCA

SME PEDSERVER

Post camp site

SWITCHPREMISE ROUTER

FIREWALL

Tier 0Tier 0

APN-I

DISN Trunk

DHS Trunk

SME PED: Secure Mobile Environment Portable Electronic Device

MCEP: Multi Carrier Entry Point

DHS

DHS

T-Mobile

APN-I

Verizon

APN-I


Secure Voice - MobilitySecure Voice - Mobility

• Working with NSA partners on the next generation of secure mobile phones and the concept of mobility.

– Will technology refresh our Multi Carrier Entry Point (MCEP) to support not only SME PED, but other NSA approved commercial secure mobile devices using Mobile Virtual Network Operator (MVNO) technology.

– MVNO approach has received broad NSA and DISA support because it enhances security, management, and performance of secure mobile voice and data solutions.

– Worked with NSA and developed a request for information (RFI) to industry to determine industry's readiness to delivery this capability.

• End goal: Ensure the network connectivity and secure mobile communications for consumption of data and services anywhere, anytime in the network

21


22

DISA Multi-Carrier Entry Point (1&2) DISA Multi-Carrier Entry Point (1&2) SME-PEDSME-PED

• Total 671 SME-PED devices Connected to MCEP

* AVG number of traffic from May-10 to May-11 was 1915389096 Bytes

5903

2609

4

1004

7636

14

1397

7162

61

1389

3892

39

1876

4627

28

2415

0954

25

1875

0965

89

1314

7554

99

3734

2407

03

2507

4207

84

3541

5838

00

1599

4832

33

1653

7242

77

0

500000000

1000000000

1500000000

2000000000

2500000000

3000000000

3500000000

4000000000


Num

ber o

f Tra

ffic

(Byt

es)

Monthly

Total Monthly Traffic Usages(MAY 2010 - MAY 2011)

99.9

99%

99.9

90%

99.9

99%

99.9

98%

99.9

96%

100.

000%

100.

000%

99.9

98%

99.9

96%

99.9

99%

99.9

99%

99.9

75%

99.9

95%

99.9

98%

99.9

99%

99.9

99%

99.9

96%

100.

000%

100.

000%

100.

000%

100.

000%

99.9

93%

99.9

99%

99.9

99%

99.9

93%

99.9

90%

100.

000%

100.

000%

100.

000%

100.

000%

100.

000%

100.

000%

100.

000%

100.

000%

99.9

98%

100.

000%

100.

000%

100.

000%

100.

000%

90.000%

92.000%

94.000%

96.000%

98.000%

100.000%


Up

tim

e in

Per

cen

t

DISA MCEP Uptime

DISA MCEP-1 Overall Uptimes(MAY 2010 - MAY 2011)

MCEP All Devices and Circuits Uptimes MCEP Carrier APN Overall Uptime MCEP OC3 to DECC Uptimes

99.9

99%

99.9

90%

99.9

99%

99.9

99%

99.9

98%

99.9

99%

99.9

99%

99.9

95%

99.9

85%

99.9

97%

99.9

99%

99.9

83%

99.9

98%

99.9

99%

100.

000%

100.

000%

100.

000%

100.

000%

99.9

99%

100.

000%

99.9

76%

99.9

52%

99.9

92%

99.9

99%

99.9

96%

99.9

92%

100.

000%

99.9

99%

99.9

99%

99.9

98%

99.9

86%

100.

000%

99.9

99%

99.9

93%

99.9

95%

99.9

99%

100.

000%

99.9

96%

99.9

94%

90.000%

92.000%

94.000%

96.000%

98.000%

100.000%


Up

tim

e in

Per

cen

t

DISA MCEP Uptime

DISA MCEP-2 Overall Uptimes(MAY 2010 - MAY 2011)

MCEP All Devices and Circuits Uptimes MCEP Carrier APN Overall Uptime MCEP OC3 to DECC Uptimes

355

391417

443

411

443468

503533 562

613641

671

100

200

300

400

500

600

700


Nu

mb

er

of

De

vic

es

Period

SME PED Devices Connected During Period( MAY 2010 - MAY 2011)

6

35

59

7

1721

3

71

74

13

17

11

40

1013

3

11

1 2

21

49

5

36

28

14

23

69

10

24

41

0

10

20

30

40

50

60

70

80

Site/Command

Nu

mb

er

of

De

vic

es

Devices Connected Per Enclave(MAY 2010 - MAY 2011)

7th SIGCMD AFNIC CENTCOMCERDEC DIA DISA HQDoD IG EUCOM - Patch EUCOM- ShapeFORSCOM HQDA-PENTAGON HQMCJFCOM JS NCISNETCOM NMCI-Hampton Road NMCI-Pearl HarborNMCI-San Diego NMCI-Washington Navy Yard NORTHCOMNSA-FT MEADE NSA-HI OSDRSAC SECDEF SOCCENT-MacDillSOCOM SOCSOUTH SOUTHCOMSTRATCOM


(U) Anywhere, Anytime Access(U) Anywhere, Anytime Access

TOP SECRETUnclassified SECRET

CommercialCommercialTechnologyTechnology

23


BridgeBridge

The Cloud

Mobility ComponentsMobility Components

+ Data + Voice

IPIPADAD

TableTablet PCt PC

LaptoLaptopp

3G/4G3G/4G Wi-Fi 802.11Wi-Fi 802.11

24


Multi Carrier Entry Point (MCEP) /MobileMulti Carrier Entry Point (MCEP) /MobileVirtual Network Operator (MVNO) IntegrationVirtual Network Operator (MVNO) Integration

Centralized, Controlled Access for Mobile DevicesCentralized, Controlled Access for Mobile Devices

DoD Mobile Virtual Network Operator (MVNO) Service

Firewall / Threat Detection

MCEP Key Tenets

• Create IA boundary for wireless interconnects

• Single entry point for DISN wireless extensions

• Supports DoD e-mail and collaboration

• Survivability through backup MCEPs

Commercial Wireless and IP Service Carriers

DoD Users with Mobile Devices

25

UC SessionProcessing

(Voice, Video, Collaboration)

Unified Communications Aware Firewall

MCEP

DISN Core

Security and Application

Services

(VPN, E-mail, etc.)

MCEP Access Point

DoD Mobile Virtual Network Operator

DoD Secure Service Overlay

To DISN UC Services


26

DRSN

1/2 3/4

1 = SRTP/DTLS2=TLS3= RTP4= TLS5= TDM/PRI6=IP

External NetworksGW

5

6

6

• APN –Wireless Carrier Access Point (multiple as required)• VPN – VPN Server--Serves to terminate VPN from Mobile Handsets• SBC – BBUA--Serves to terminate SRTP/DTLS Session and Generate. RTP flow• SIP - SIP registration/Session Controller for Mobile Handsets• LSC – To provide IP Telephony connection to classified IP Networks

And to establish connection to classified TDM network through Media Gateway

WirelessCarrier Data

Service

UATLS/RTP

Session Border Controller (SBC)

UATLS/SRTP

LSC EBC

Classified IPNetwork

@ applicable security level

APN

VPN

1/21/2

Mobile Secure Voice Enabled

DISA MCEP

SIP Server(LSC)

Legend:

DISA MCEP DISA MCEP Mobile Secure Voice Mobile Secure Voice

21 june 2011 a combat support agency defense information systems agency voice services update...

Documents