ÄûÃÊÊÓƵ

1

1. Provides wired and wireless data connectivity within the University campus and University residences to internal services (operated by IT Services, the Library and other authorised service providers) and connectivity to external services (connected to JANET and the Internet).
2. Web caches are used to optimise the access to web resources and to assist in monitoring usage of the network.

1. Members of the ÄûÃÊÊÓƵ.
2. Visiting members of other HEIs participating in the eduroam programme.
3. Attendees at conferences and similar events being held at the University.
4. Contractors working at the ÄûÃÊÊÓƵ, by agreement.

1. Access to the data network requires authentication and particular configuration parameters are needed.  IT Services provide documentation and a tool to set up devices to use the data network; users need administrative rights on their device(s) to do this.
2. Members of the University must register to use IT Services to gain access to the data network; they also need to configure their device(s) appropriately, using information and a tool from IT Services.
3. Visitors from other institutions participating in eduroam who have already set up their device to use eduroam may simply use the data network at the University using their credentials from their home institution.  They must seek assistance in setting up their eduroam access from their home institution.
4. Attendees at conferences and similar events and contractors who do not have eduroam access may be issued with access details to enable them to make use of the data network.  They will have to follow the procedure set out by IT Services and use the tool provided to configure their device to use the University’s data network  (this requires administrative rights on their device).

The service is available 24/7.

0800-1800 Normal working days.

Service is at risk every Tuesday 0700-0900. Three working days’ notice will be given of any scheduled maintenance; where possible maintenance will be scheduled outside the hours 0900-1700. 

The normal IT Services change control process applies.

1. To monitor service usage.
2. To respond to abuse of the network.

1. To make reasonable use of the facility.
2. To follow instructions on setting up connections set out in IT Services documentation.

Transfer rate of 2mb per second from IT Services Standard PC to on site monitoring server.

The University has an extensive data network of both wired and Wi-Fi Access points, providing connectivity to all areas of the campus and is used to support teaching, research, administration and management across the organisation.

The University’s network has two connections to JANET,  the UK academic network; these provide service resilience.  The main connection is a 2Gbps SDH link and the backup connection a 1Gbps Ethernet circuit. 

The network backbone on campus runs at 20Gbps and provides dual links into most University buildings at speeds between 1Gbps and 10Gbps depending on the requirements of users in the building.

The network is distributed to users via a CAT5 “structured cable” infrastructure to offices, labs and other locations and normally provides 100Mbps connections for end-user equipment, though there are some 1Gbps connections where these speeds are required. 

The cabling is shared with the provision of analogue telephone services: the telephony multicore cables are terminated in the same racks as the data network and telephones are patched through in the network concentration points.  The network connection points do not have backup power supplies and a power failure to the building also takes the network down in that building.

There are approximately 22,000 wired data points available across the estate.

The data network protocols are TCP/IP IPV4 with IPV6 being used in a few areas.  Network access is controlled through MAC address validation and through Enterprise Authentication using 802.1X (with Radius servers).  The University makes use of VLANs to partition the network space.   When devices connect to the network they will be given an IP address dynamically (DHCP).  Devices which are known to belong to the University (through MAC address registration) are given class C IP addresses and those which belong to end-users (or are not registered as “university” devices) are given NATed addresses.

The network covers academic and residential buildings and IT Services make use of firewall systems to protect the servers and critical service points inside the network from outside attacks.

The Wi-Fi network provides an overlay to the wired network, allowing users to more easily connect their own devices and to move around the campus with their connected device.  The coverage of Wi-Fi is focused around where students congregate.  It covers lecture theatres, many seminar rooms, labs, cafes, the Library, and other student study spaces.  The University’s residences on campus (and Kings Road in Brighton) are covered by the Wi-Fi service.  Access and authentication to the Wi-Fi service is analogous to wired connections.

Users may bring their own devices and connect these to the network: this requires their device to be configured in a particular way and for them to have a valid Sussex IT account.

Sussex is also part of the eduroam community: this allows member of the University to access the network when they are visiting other HEIs and academic institutions, using their Sussex credentials.  Sussex provides the same access to members of other participating institutions when they are on our campus:

IT Services operate a VPN service to provide secure access to certain services (and for remote support).

The service can also carry traffic across the network  for delivery to alternative carriers (as in, for example, the bookshop located in the Library).