Download N3 Network User Guide

Transcript
Contents
1
INTRODUCTION ................................................................................................................................ 5
1.1
1.2
1.3
1.4
2
PURPOSE ...................................................................................................................................... 5
READERSHIP ................................................................................................................................. 5
SCOPE .......................................................................................................................................... 5
DISCLAIMER .................................................................................................................................. 5
N3 OVERVIEW .................................................................................................................................. 6
2.1
HISTORY ....................................................................................................................................... 6
2.2
PURPOSE ...................................................................................................................................... 6
2.2.1
National Applications ........................................................................................................... 6
2.2.2
Ownership ............................................................................................................................ 7
2.3
OVERVIEW/DIAGRAM ..................................................................................................................... 7
2.4
ACCESS (CATALOGUE) SERVICES .................................................................................................. 8
2.4.1
End User Services ............................................................................................................... 8
2.4.2
Data Centre Services ........................................................................................................... 8
2.5
SECURITY ..................................................................................................................................... 8
2.6
CORE/FOUNDATION SERVICES ....................................................................................................... 9
2.6.1
Core/PoP Bandwidth Policy ................................................................................................. 9
2.6.2
Network Use & QoS ............................................................................................................. 9
2.6.3
DNS.................................................................................................................................... 10
2.7
COINS ....................................................................................................................................... 10
2.8
GATEWAYS ................................................................................................................................. 10
2.8.1
Internet Gateway ................................................................................................................ 10
2.8.2
Pharmacy Gateway(s) ....................................................................................................... 10
2.8.3
JANET Gateway ................................................................................................................ 10
2.8.4
NHS Wales & NHS NI Gateways ....................................................................................... 10
3
NETWORK IN DETAIL .................................................................................................................... 11
3.1
IP ADDRESSING........................................................................................................................... 11
3.1.1
Policy.................................................................................................................................. 11
3.1.2
Address Ranges ................................................................................................................ 11
3.1.3
Legacy RIPE vs Private Addressing .................................................................................. 11
3.1.4
VoIP Ranges ...................................................................................................................... 12
3.1.5
Requesting IP address ranges .......................................................................................... 12
3.2
QOS ........................................................................................................................................... 12
3.2.1
QoS Profiles ....................................................................................................................... 13
3.2.2
QoS Profile Refresh ........................................................................................................... 14
3.3
DNS ........................................................................................................................................... 15
3.3.1
Why DNS? ......................................................................................................................... 15
3.3.2
nhs.uk ................................................................................................................................ 15
3.3.3
How DNS works ................................................................................................................. 15
3.3.4
N3/nhs.uk DNS setup ........................................................................................................ 15
3.3.5
DNS Records ..................................................................................................................... 16
3.3.6
DNS Change Requests...................................................................................................... 16
4
NETWORK SECURITY.................................................................................................................... 17
4.1
4.2
4.3
4.4
4.5
4.6
4.7
5
GENERAL SECURITY .................................................................................................................... 17
PHYSICAL SECURITY.................................................................................................................... 17
PATIENT/SENSITIVE DATA ............................................................................................................ 18
NETWORK BORDER SECURITY - FIREWALLS ................................................................................... 18
ANTI-VIRUS/ANTI-WORM/DENIAL OF SERVICE ATTACK MEASURES ................................................. 18
USER SECURITY CHECKLIST ........................................................................................................ 19
INTERNET GATEWAY BLOCKING.................................................................................................... 20
CAPACITY MANAGEMENT ............................................................................................................ 21
File: N3 Network User Guide v1.3_N3SP-TEC-TRG-148
Issue N3SP-TEC-TRG-148: 6 July 2010
3 of 25
©British Telecommunications Plc 2010