Network Upgrade and Perimeter Firewall Defenses Project

The ITS Data Network Team, in collaboration with the BSD Information Security Office, is upgrading aging and outdated network equipment. Upgrades will result in improved network connectivity, faster network speeds and superior network perimeter safeguards to protect devices from an ever-growing wave of cyber-attacks.

This webpage is intended to provide up-to-date information about the project scope and schedule. A FAQ section is included at the bottom, for Frequently Asked Questions. If you have any questions please contact the project managers:

 

Role Name E-mail
ITS Project Manager Debbie Bomba debbie9@uchicago.edu
BSD ISO Project Manager Stephanie Ferguson sferguson5@bsd.uchicago.edu

 

 

Project Highlights:

  • Network connectivity will change from 100 Mbps to 1000 Mbps
  • Campus network speed will change from 1 GB to 10 GB (10 times faster)
  • Perimeter defenses will be setup to prevent hackers from connecting to devices
  • Access switch controls will be configured to prevent the following issues:
    • Address spoofing
    • Rogue DHCP servers
    • Unauthorized devices connecting to the network

 

What You Can Expect:

To make these improvements, a few fundamental network changes are required:

  • Devices with static IP addresses (e.g. workstations, laptops, printers, lab equipment) will need to be reconfigured with a new IP address with a DHCP reservation.
  • Devices that operate as servers (e.g., web server etc.) will need to be reconfigured with a new IP address to network segments designed for this specific purpose (i.e. BSD DMZ).
  • When at home or traveling abroad and require to access on-campus devices, you will need to connect via the University’s VPN services (for more information go to https://itservices.uchicago.edu/services/vpn-cvpn).

To avoid network service interruption we need to know about any devices connected to the network that require special attention.  These are devices that do not support DHCP (If you are unsure of what DHCP is, then you are likely a user that will not be impacted by these changes.)

 

Project Schedule:

The Project Manager will send out the implementation dates to each location.  The “Beta” McGiffert House will be implemented on Saturday, March 19, 2016.   The remainder of the BSD sites will be scheduled over a multi-year schedule.   The BSD ISO Project Manager will notify building contacts at a minimum of 60 days in advance of the targeted implementation date.

NetUpFirewall

 

Where do I send any questions I may have?

 

Frequently Asked Questions

Q1. Can we begin prepping our respective areas/buildings early?

A1. Yes. The schedule listed above should by no means be interpreted as “you have to wait until X date to begin.” In fact, for those tasks that don’t specifically rely upon BSD ISO or ITS personnel, it is strongly recommended to begin early. This avoids delays and brings potential issues to your attention with sufficient time to respond.

Q2.  Do you have any tools to assist in mapping out my area of responsibility?

A2.  Visit http://space.bsd.uchicago.edu, which may help, but keep in mind that neither the BSD ISO nor ITS maintains the site. Each building in purple can be clicked, which will produce a dropdown menu. Depending on your selections, you can get blueprints with room-by-room occupant listings. Note: All occupants are not completely up to date.

Q3.  My computer or printer is currently using DHCP but it should have a static IP address. How do I get a static IP address?

A3.  Requests for machines that are currently using DHCP to be configured for static IP addresses are sent through ITS Network @ itservices@uchicago.edu.

Q4.  How can I tell if my machine has a Static or Dynamic IP address?

A4. On a Windows machine: Click on the windows (globe) icon located in lower left corner of your device. In the search window (your mouse should by default be here), type “cmd”, followed by enter. You will now have a black window on your screen with a command prompt ready for the next entry. At the command prompt, type “ipconfig /all” and hit return. Found under the “Ethernet adapter Local Area Connection” section, listed as “DHCP Enabled.”

On a Mac machine: Click on the Apple icon at the upper-left corner of the screen.  From the menu that appears, scroll down and select System Preferences.  In the System Preferences screen, click on the Network icon in the third row.  In the network box, on the right, ensure that the active network connection is selected with the green circle.  This screen may show the “Configure IPv4” field here.  If not, click on Advanced, then click on the TCP/IP tab.  The “Configure IPv4” field should show “Using DHCP” if using a dynamic IP address.