Campus Network upgrade and Wi-Fi Rollout

REVIEW AND PHASE 3 PROJECT MANAGER TASKS

CURRENT SITUATION

Campus Network upgradeand Wi-Fi Rollout

Phase 1 - Complete

• Preparation for the Wi-Fi and other requirements including; new L2 fibre optic network connections, new PoE switches, master switches and new VLAN’s

• Full Wi-Fi surveys at SDL early adopter campuses

• Remainder of campuses have been allocated 3 WAP’s each for the initial roll-out

• All WAP’s have been delivered with installation instructions

Phase 2 - Complete

VLAN-2

VLAN-1

××

Campus Network- Current

PHASE 3 - AIMS

Campus Network Upgrade and Wi-Fi Rollout

Secure and Protect the Network Itself

• Network no longer behind doors and walls - neighbours will see our Wi-Fi as well and all access must be secured.

• Only known users should connect to our private ‘education’ network.

• Non-Focus devices should only connect to the non-private network and the ‘internet’.

Secure and Protect the Network Itself

Level 5 Websites

Level 8 Websites

Protect Users

• The network needs to support website access policies.

• Act as a second level of protection to the web browsing controls in the devices and via the central Focus Internet Filter.

• Address issues with protection having been compromised by providing internet access outside of the staff and admin areas for events that take place in the campus and other reasons.

Protect Users

Support of Devices andAccess to Applications

We are all increasingly reliant on internet connectivity….to access many applications and using more portable devices:• Students and teachers with Focus devices• Teachers own laptops• CA personnel and other community support• Visitors• For events taking place in the campus

Support of Devices andAccess to Applications

PHASE 3 – PLANNED SOLUTION

Campus Network Upgrade and Wi-Fi Rollout

Campus LAN

FocusCampus

Staff LAN

FocusAssociate

Associate LAN

Campus Network - New

Teachers

Learners

Available Throughout Teaching & Learning areas

Max Level 5 Websites during core hours and Level 3 outside these

(Subject to user permissions)

Wi-Fi access via personal AD username and password

Network Controls and Internet Filter

Campus LAN

• Cabled and Wi-Fi. • Available throughout teaching and learning

areas.• For use by students and teachers. • New students laptops will connect to Wi-Fi

and users will use their normal username and password to connect to the Wi-Fi.

• Up to ‘level 5’ website access during core campus hours - depending on users personal permissions. Reduces to Level 3 outside these.

Campus LAN

Teachers

Secure Staffroom and Admin Areas Only

Staff

Level 8 WebsitesNo ‘open’ Internet

Network Controls and Internet Filter

Staff LAN

• Cabled only. • Only to be available in non-student areas

such as the staff room, office or CA rooms. • For teaching and admin staff only.• Up to Level 8 websites access at all times -

subject to users personal permission.

Staff LAN

• No longer be possible to access the ‘open internet’ from a teachers laptop or a CA team members business laptop as Firewall rules will block internet access unless through the central Focus Internet Filter.

• Non-Focus devices are not supported on the ‘private’ education part of our network.

• Enter the ‘Associate LAN’.

Staff LAN - Note

Secure Staffroom and Admin Areas Only

× Website Access not

supported

Network Controls and Internet Filter

CA Team

Community Users

Staff LAN - Note

Teachers

Available throughout the Campus

CA Team

Community Event Users

Websites as allowed by device

Wi-Fi Access only using daily changing pass-key

Associate LAN

• Wi-Fi only. • For Teachers, staff, CA team, community users

and visitors with non-focus devices.• Separate from the private ‘education’ network.• Access to websites is not forced through the

Focus Internet Filter.• Wi-Fi access is only by obtaining a daily changing

pass-key automatically emailed to each campus.• User access to pass-key at the discretion of the

CA – by auto-email or requested from the campus admin on the day.

Associate LAN

• Not possible to print from the local device connected the Associate Wi-Fi - to a printer on the Campus LAN.

• Users with access to Citrix can navigate to a document saved on their own device and then print to a local campus printer.

• Campuses are welcome to set up their own printer on the Associate LAN but will not be covered by central IT support team.

Associate LAN - Printing

• There are no changes in the way users can connect to Citrix and the website levels that users have access to through this.

• All the LAN’s in the Campus allow access to Citrix and Moodle.

Campus Networks - Citrix

• All Focus provided and approved devices have been configured with internet controls

Websites as allowed by device

Device Internet Controls

PROJECT MANAGER TASKS AND RESPONSIBILITIES

Campus Network Upgrade and Wi-Fi Rollout

• If not already installed, ALL WAP’s must now at least be connected on-line as per previous instructions - even if they may not be required or not yet fixed in final suitable locations.

Installation of WAP’s

Ensure all users and stakeholders are aware of: • What is planned, • How this will affect them• How they will connect, from where and how.A podcast has also been made available to teachers to help explain.

Communicating the Changes

• All documentation is available from the Focus Intranet site http://intranet.focus-school.com/current-projects/campus-wifi-rollout/

• Important that the project managers do check this out as it is not possible to cover every detail in this session including that certain types of computer / operating system will not be able to connect to the campus Wi-Fi.

Further Information and Guides

• Arranging and ensuring ‘first-line’ support cover for any issues relating to the Campus network for the 4 weeks following migration is in place.

• This includes how issues are to be reported and communicated.

• The central IT team will be pleased to support with any technical issues that you are unable to resolve.

Covering Post-Change Support

Use the Web form to confirm that:• Internal communication has taken place.• All WAP’s are on-line.• The locations of the WAP’s.• Local ‘first-line’ support arrangements for any

issues relating to the Campus networks are in place.

Confirming You Are Ready-to-Go

• Once the ‘ready-to-go’ confirmation has been received, a member of the project team will contact you and agree a cut-over date and time.

• This will involve a short connection outage that may impact on users in the campus so they will need to be aware.

Scheduling the Cut-over

• Commences with a Re-boot of the campus main fibre optic connection – Approx. 10 mins.

• Remote configuration work including WAP configuration, application of new Firewall rules – Approx. 60 mins.

• Set up of the Associate key and email – Approx. 30 mins.

Cut Over Programme

• It is essential that you are available on site for the period immediately following the cut-over to support and advise users.

• Basic Testing (see separate document) and any adjustments to the location of the WAP’s.

• Do your ‘LAN Housekeeping’…including removing any Staff LAN connections that are outside of staff and admin areas to avoid any confusion.

Follow-up Tasks

NEXT – PHASE 4

Campus Network Upgrade and Wi-Fi Rollout

• For many campuses, 3 x WAP’s will not provide adequate coverage, particularly as campuses facilities are upgraded for SDL and a programme of Wi-Fi surveys will follow as required.

• Following the above, existing WAP’s may need to be repositioned and additional WAP’s may need to be installed.

Wi-Fi Rollout - Phase 4

Thank you, there is no way we could have accomplished this project without your fantastic support.

We look forward to working with you again.

Thank You for Your Support!