Docstoc

IP Address Management _IPAM_ - NISN - NASA

Document Sample
IP Address Management _IPAM_ - NISN - NASA Powered By Docstoc
					National Aeronautics and Space Administration




                   IP Address Management
                           (IPAM)

                                       Johnny Busby

                                                July 01, 2009


                                                Fourteenth NISN Customers' Forum
                           IPAM
                          Agenda
•   Official Baseline Changes
•   Architecture
•   Operations
•   RIDs
•   Scheduling/Migrations
•   Open Migration Issues/Actions
•   Activities
•   Risks
•   Training
•   Future Initiatives
•   Next Steps

                       Fourteenth NISN Customers' Forum   2
                                  IPAM
                                  About
• Develop and deploy IP address management architecture
  for the Agency support Enterprise IP Address
  Management
  – 4.3 million IPv4
  – 79 octillion IPv6
  – 30+ autonomous system numbers (ASNs)
• Goals
  –   Provide for management of IPv4 and IPv6 address space
  –   Track all IP addresses that are assigned to NASA
  –   Track location, system information, and IP address assignment
  –   Determine utilization of IP address space for the Agency
  –   Define three distinct boundaries: Local, Agency, and Public (external)
  –   Track non-routable (RFC 1918) address space


                             Fourteenth NISN Customers' Forum                  3
       Official Documentation Changes

     Changed documentation since 2008 NISN Forum

• System Implementation Plan (IPAM-019)
• Detailed Implementation Plan (IPAM-026)
• Data Import Template (IPAM-Form-055)
• Contingency Plan (IPAM-020)
• Baseline Schedule




                      Fourteenth NISN Customers' Forum   4
                                                       Architecture

                Public                                                                                     Agency
                                                         Internet                               Caching-only
                                                                                                   DNS
                                                                                                                    Non-privileged
                                                                                                                    Agency Clients


                External DNS



                                                                     IPAM
                                                                     Server
                     Executive / Private

   IPAM
Report Server                                                                                                     Privileged Agency
                                                                                                  Agency                 Clients
                                                                                                   DNS          (Including NAF/NDC)
                     IPAM
                   DR Server


    CRF                        DNS
                                      Pre-NCAD Local




                                                           Database Copy
                                                           DHCP Traffic
                                                           DNS Update Traffic
                                                           Configuration Mgmt Traffic
                                                           DNS Traffic
Local Client                   DHCP
                                                           Active Directory _zone DNS Traffic



                                                        Fourteenth NISN Customers' Forum                                              5
                     Post-NCAD/DDNS Architecture

                Public                                                                                          Agency
                                            Internet                                                 Caching-only
                                                                                                        DNS
                                                                                                                         Non-privileged
                                                                                                                         Agency Clients


                External DNS



                                                        IPAM
                                                        Server
                     Executive / Private

   IPAM
Report Server                                                                                                            Privileged Agency
                                                                                                       Agency                   Clients
                                                                                                        DNS            (Including NAF/NDC)
                     IPAM
                   DR Server


                                                                                                                DNS               RNAF




                                                                                   Post-NCAD Local
                                              Database Copy
                                              DHCP Traffic
                                              DNS Update Traffic
                                              Configuration Mgmt Traffic
                                              DNS Traffic
                                                                                                                DHCP          Local Client
                                              Active Directory _zone DNS Traffic



                                           Fourteenth NISN Customers' Forum                                                                  6
                                                                                                                                           IPAM
                                                                                                                                         Operations

                          Report Period: August 2008 to June 2009
             Executive Service Outages                  DNS & DHCP Service
          70                                                  Outages
          60
                                                                                                                                                                                                         140
          50                                                                                                                                                                                             120
minutes




          40                                                                                                                                                                                             100




                                                                                                                                                                                               minutes
          30                                                                                                                      SLA (99.99%)                                                            80
                                                                                                                                                                                                          60                                                                                                                  SLA (99.99%)
          20                                                                                                                      Executive                                                               40
          10                                                                                                                                                                                              20                                                                                                                  DNS & DHCP
           0                                                                                                                                                                                               0
                                                                              Feb-05
                                                                                       Mar-05




                                                                                                                                                                                                                                             Oct-04




                                                                                                                                                                                                                                                                                 Feb-05
                                                                                                                                                                                                                                                                                          Mar-05
                                                                                                                                                                                                                                                                                                   Apr-05
                                          Oct-04




                                                                                                Apr-05




                                                                                                                                                                                                                                                      Nov-04
                                                                                                                                                                                                                                                               Dec-04
                        Aug-04
                                 Sep-04


                                                   Nov-04
                                                            Dec-04
                                                                     Jan-05




                                                                                                                    Jun-05




                                                                                                                                                                                                                  Jul-04
                                                                                                                                                                                                                           Aug-04
                                                                                                                                                                                                                                    Sep-04




                                                                                                                                                                                                                                                                        Jan-05




                                                                                                                                                                                                                                                                                                                     Jun-05
               Jul-04




                                                                                                                                                                                                                                                                                                            May-05
                                                                                                         May-05




                                                                                                                                             Trouble Tickets
                                                                                                18
                                                                                                16
                                                                                                14
                                                                                                12
                                                                                                10
                                                                                                                                                                                                                                       >Priority 2
                                                                                                 8
                                                                                                 6                                                                                                                                     Priority 2
                                                                                                 4
                                                                                                                                                                                                                                       Priority 1
                                                                                                 2
                                                                                                 0
                                                                                                                                         Oct-04


                                                                                                                                                           Dec-04
                                                                                                           Jul-04




                                                                                                                                                                    Jan-05




                                                                                                                                                                                                                  Jun-05
                                                                                                                                                                             Feb-05
                                                                                                                                                                                      Mar-05
                                                                                                                                                                                               Apr-05
                                                                                                                                                  Nov-04
                                                                                                                       Aug-04
                                                                                                                                Sep-04




                                                                                                                                                                                                         May-05




                                                                                                                                         Fourteenth NISN Customers' Forum                                                                                                                                                                    7
                                                                                                                                       queries per second




                                                                                                                                               100
                                                                                                                                                         150
                                                                                                                                                                   200
                                                                                                                                                                         250
                                                                                                                                                                               300




                                                                                                                                       50
                                                                                                                                   0
                                                                                                                          Jul-04
                                                                                                                         Aug-04
                                                                                                                         Sep-04
                                                                                                                         Oct-04
                                                                                                                         Nov-04
                                                                                                                         Dec-04
                                                                                                                         Jan-05
                                                                                                                         Feb-05
                                                                                                                         Mar-05
                                                 queries per second                                                      Apr-05
                                                                                                                         May-05




                                                         100
                                                                   150
                                                                         200
                                                                               250
                                                                                     300




                                                 50
                                             0
                                                                                                                         Jun-05
                                    Jul-04
                                   Aug-04
                                                                                                                                                                                     Public DNS Performance




                                   Sep-04
                                   Oct-04
                                                                                                                                            Peak




                                   Nov-04
                                                                                                                                                   Average




                                   Dec-04
                                   Jan-05
                                   Feb-05
                                   Mar-05
                                                                                                                                                                                                                                                             IPAM




                                   Apr-05                                                                                              queries per second
                                   May-05
                                                                                                                                               100
                                                                                                                                                             150
                                                                                                                                                                   200
                                                                                                                                                                         250




                                                                                                                                       50
                                                                                                                                                                               300




                                                                                                                                   0




Fourteenth NISN Customers' Forum
                                   Jun-05
                                                                                                                          Jul-04
                                                                                                                         Aug-04
                                                                                                                         Sep-04
                                                                                                                                                                                                                                                        Operations (Cont)




                                                                                           Total Local DNS Performance




                                                                                                                         Oct-04
                                                      Peak
                                                             Average




                                                                                                                         Nov-04
                                                                                                                                                                                                  Report Period: August 2008 to June 2009




                                                                                                                         Dec-04
                                                                                                                         Jan-05
                                                                                                                         Feb-05
                                                                                                                         Mar-05
                                                                                                                         Apr-05
                                                                                                                         May-05
                                                                                                                         Jun-05
                                                                                                                                                                                                                               Agency DNS Performance




                                                                                                                                            Peak
                                                                                                                                                   Average




8
                     IPAM
                 RID Overview
50


45


40


35


30

                                                                           Closed
25                                                                         Dispositioned
                                                                           Deferred
                                                                           Open
20


15


10


5


0
     SRR   PDR        CDR                     ORR    Last Updated (05/26/09): Closed 2 RIDs

                  Fourteenth NISN Customers' Forum                                            9
                               IPAM
                             RID Status
                                                                    0
                                                                    0

                0                                               2
            3
                                                                                                     Closed
                              Closed
                                                                                                     Dispositioned
                              Dispositioned
                                                                                                     Deferred
                              Deferred                                         9
                                                                                                     Open
                    43
                              Open


                    SRR                                                   PDR



                                                                    0
    0
                                                                    0
0       1

                             Closed
                                                                                                    Closed
                             Dispositioned
                                                                                                    Dispositioned
                             Deferred
                                                                                                    Deferred
                         7   Open                                   29                              Open



                CDR                                                      ORR
                                                                         Last Updated (05/26/09): Closed 2 RIDs

                             Fourteenth NISN Customers' Forum                                                     10
                 IPAM
        Unclosed RIDs by Network

            1




    1                                                   3




                                                                                     HST
                                                                                     SSC
1                                                                                    Mission
                                                                                     KSC
                                                                                     Russia




                         2




           Must be closed by Local MRR

                                                   Last Updated (05/26/09): Closed 2 RIDs

                Fourteenth NISN Customers' Forum                                            11
                                                           IPAM
                                                         Scheduling
NISN Mission Support                                                                                                                 IPAM Preparation
                LaRC                                                                                                                 IPAM Testing
                   HQ                                                                                                                IPAM Transition
               DFRC                                                                                                                  NCAD
        MSFC/MLAN
               NSSTC
                NSSC
                  SSC
                 ARC
           KSC/VAFB
          GSFC/WFF
                  SEN
           JSC/WSTF
          NAS/NREN
                 GRC
                   JPL
                IV&V
                 GISS
                 WSC
               ETLAN
           HST/Russia
       IONet/EBNet
                         08/08

                                 09/08

                                         10/08

                                                 11/08

                                                           12/08

                                                                   01/09

                                                                           02/09

                                                                                   03/09

                                                                                           04/09

                                                                                                   05/09

                                                                                                           06/09

                                                                                                                   07/09

                                                                                                                           08/09

                                                                                                                                   09/09

                                                                                                                                           10/09

                                                                                                                                                   11/09
                                                         Fourteenth NISN Customers' Forum                                                                  12
                                       IPAM
                                Migration Planning

            Weekly meetings begin


Migration             Receive               Complete                    Complete                                 Migration
                                                                                               Migration
Kick-Off             Critical Site          Process                     Customer                                Completion
                                                                                               Weekend
Meeting                  Data                Setup                      Validation                             Review (MCR)




                                                                                  Migration            Migration
                                                                                 Readiness             Check-Out
                                                                                Review (MRR)            (MCO)




                                     Fourteenth NISN Customers' Forum                                                    13
                                 IPAM
                       Migration Planning (Cont)
Core IPAM

                                           Complete

NISN Mission Support

                                          Complete
NDC and IEM

                                          Complete

HQ
                                          Complete

LaRC



DFRC



MSFC

                                          Complete


                              Fourteenth NISN Customers' Forum   14
                  IPAM
        Migration Planning (Cont)
NSSTC

                           Complete

MLAN

                           Complete

SSC



NSSC

                           Complete

ARC

                           Complete

JSC



KSC




               Fourteenth NISN Customers' Forum   15
                     IPAM
           Migration Planning (Cont)
GSFC
CNE /
WFF
GISS



IV&V



SEN



GRC


NAS/NREN



WSC




                  Fourteenth NISN Customers' Forum   16
                  IPAM
        Migration Planning (Cont)
JPL



ETLAN



HST



IONet




               Fourteenth NISN Customers' Forum   17
                        IPAM
             Overall Migration Progress
Sites that have completed Migration Check-Out (MCO)




                      Fourteenth NISN Customers' Forum   18
                          IPAM
                   Open Migration Issues
• LaRC
  – Determine disposition of STI network


• DFRC
  – Decommission RASE DNS service


• SSC
  – Complete and obtain signatures for CLI IDA




                           Fourteenth NISN Customers' Forum   19
                           IPAM
                        Commandments
• Commandments
  – Thou shalt have no other DNS, DHCP, or IPAM services
  – Thou shalt have no automated data import for only I am authoritative
  – Thou shalt supply me data via the data import template correctly, the
    first time, every time
  – Thou shalt have no DNS zone transfers from me
  – Thou shalt lose DNS permissions on new NCAD converted
    workstations
  – Thou shalt obey your IPAM and NCAD project leader and adhere to
    their schedule
  – Thou shalt love your new services as you loved your old services



                            Fourteenth NISN Customers' Forum                20
                                   IPAM
                              Lessons Learned
• Comprehensive list uploaded to IPAM SP site:
   – Lessons Learned folder

• Two sections
   – Local (site/center) team
   – Core (Agency) team

• Covers
   –   Data Delivery
   –   Preparation
   –   Testing
   –   Execution
   –   Validation / Closing



                                Fourteenth NISN Customers' Forum   21
       IPAM
       Risks




Fourteenth NISN Customers' Forum   22
                               IPAM
                           Risks (Top 5)
• Mission freezes
   – Mission freezes such as Shuttle, ISS Docking/Un-docking, and Ares
     testing may impact the project migrations
   – Status: July and August missions (STS-127 & STS-128) currently being
     monitored for impact to IPAM migrations. Additionally, Ares and
     satellite launches are evaluated for scheduled constraints at certain
     sites
• Software functionality
   – Critical software bugs pose risk to migrations and fulfilling complete
     IPAM requirements
   – Status: Continuing to monitor database/executive service for
     performance issues. Software upgrade to version 3.0.66 completed on
     05/09/09



                             Fourteenth NISN Customers' Forum             23
                               IPAM
                        Risks (Top 5) (Cont)
• Mission database and operations separation
   – Mission/flight system support is concerned with the implication of introducing
     IPAM into their environment
   – Status: Meetings are being held with NISN Mission/IONet and HOSC. Further
     meetings to be held with other Mission representatives

• IPAM architecture non-compliance/workaround configurations
   – Non-compliant or workaround configurations can seriously impact resource
     availability
   – Watch: Non-compliant configurations must be approved by the IPAM Program
     Executive and workarounds must be limited and have definitive expirations

• Locally integrated processes and procedures
   – Failure to convert current local procedures to use IPAM may exhaust core
     IPAM team
   – Status: The Core IPAM team completed local procedure templates to assist
     local management teams in modifying their procedures
                                 Fourteenth NISN Customers' Forum                     24
                                  IPAM
                                 Training
• Procedure Templates
  – Purpose:
     • Provides step-by-step how-to for performing certain common tasks
     • Provides additional training opportunities to administrators and users
     • Serves as a communication tool for future interface changes and/or
       clarifications by Agency IPAM Operations organization

  – IPAM SharePoint > Controlled Documentation
     • IPAM-030: DNS
     • IPAM-031: IPAM
     • IPAM-032: Report Generation
     • IPAM-033: Administrator Roles
     • IPAM-034: DHCP



                              Fourteenth NISN Customers' Forum                  25
                                IPAM
                           Training (Cont)
• SATERN course
  – Five modules
     •   IPControl IP Address Management Administrator Training
     •   IPControl DHCP Administrator Training
     •   IPControl DNS Administrator Training
     •   IPControl Reporting Functionality Training
     •   NASA-specific IPControl site administrator training video
  – Access to training
     • Log in to SATERN (https://satern.nasa.gov)
     • Search Catalog for “IPControl” or “IPAM”


• Product manuals are available on IPAM SharePoint
  – Documentation > Technical Documentation > IPControl Manuals
  – Not all features may be enabled/implemented in production

                               Fourteenth NISN Customers' Forum      26
                       IPAM
                  Future Initiatives
• Agency-wide Dynamic DNS

• DHCP OMAPI Support

• DNS/DHCP simulated transactions

• CLI Export of DNS zone records

• Agency-wide RFC1918 Address Management




                      Fourteenth NISN Customers' Forum   27
                            IPAM
                          Next Steps

• Upcoming transition dates:
   –   GSFC CNE, SEWP, WFF and SEN: 2009-07-01
   –   JSC: 2009-07-17
   –   NAS/NREN: 2009-07-28
   –   GRC: 2009-07-31


• Future project review dates:
   – Post Completion Review (PCR): November 2009




                          Fourteenth NISN Customers' Forum   28

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:19
posted:12/25/2012
language:Unknown
pages:28