Network Usage Standards

The following provides guidelines for departments to follow when connecting to and using the University of Pittsburgh's Network (PittNet).

Scope

University of Pittsburgh policy 10-02-13 establishes the provisions for the installation, maintenance, and operation of the University of Pittsburgh's Network (PittNet).

Definitions

Network Infrastructure Device: Any device intended to construct, extend, support, or manage a network. These devices include routers, hubs, switches, repeaters, wireless hubs, firewalls, gateways, or any end user device configured to enable it to perform the function of a network infrastructure device including Proxy servers, network address translation devices, or DHCP servers.

End-User Device

Any device intended for use by one or more individual users on the network. These devices include:

  • personal computers and workstations
  • network-aware scanners, printers, and similar devices.

Workgroup Device

Any device configured to be used by more than one end user for the purpose of sharing files, printers, scanners, or other end user devices.

Remote Control Software

Software that allows any device to control the keyboard, mouse and display functions of another device attached to the network. Examples of remote control software include: pcAnywhere, NetOP, Netbus, Carbon Copy, VNC, and similar products.

Responsibilities

CSSD Responsibilities

  1. Install, configure, manage, and maintain all network infrastructure devices.
  2. Design and implement PittNet including extensions and improvements to serve the needs of the University community following applicable approved planning documents and University policies as established from time to time.
  3. Provide, configure, manage, and maintain all network infrastructure devices enabling connections to all external organizations and entities.
  4. Install and maintain network cable in accordance with current network and facility standards.
  5. Provide connectivity to the public commodity Internet and to private research networks.
  6. CSSD has the sole responsibility for providing the University of Pittsburgh with IPv4 and IPv6 address space and the assignment of addresses to machines.
  7. CSSD has the sole responsibility for DNS services and name and address resolution for pitt.edu and the other University of Pittsburgh registered domains.

University Unit Responsibilities

  1. Manage workgroup and end-user devices in accordance with applicable University policies and procedures.
  2. Ensure that workgroup and end-user devices meet appropriate standards for attachment to PittNet wherever applicable. A single device per PittNet port is permitted.
  3. Submit Data Connectivity Services request forms needed to obtain sufficient CSSD-provided network access points for all workgroup and end user devices to ensure that one and only one device is attached to any network access point.
  4. Submit IP Address request forms to request new or changes to an existing IP address and fully qualified domain name (FQDN) from CSSD for each device attached to a PittNet port.
  5. Ensure that any workgroup or end user device is operating properly to avoid creation of excessive or malformed network traffic that prevents normal use of PittNet by other users, workgroups, or units.

Network Use Standards

Cabling

Installation of cabling (including fiber-optic cable) and network access points (ports) is the responsibility of CSSD. University units must not engage in the installation of network cable and/or network infrastructure devices either on their own or by engaging the services of any third party. All requests for port or cable (including fiber-optic cable) installation must be submitted on a Data Connectivity Services request form.

Network Attachment Points

Each network access point (port) is intended to support one and only one workgroup or end-user device. PittNet ports are RJ-45 10/100/1000 baseT connections. Speed and duplex setting may be set to a fixed speed and duplex or to auto-negotiate as requested by the user.

Network Addresses

Network Addresses, (IPv4 and IPv6 Addresses) are the property of the University, not individual units or persons. CSSD has sole responsibility for the assignment of both static and dynamic (DHCP) addresses. User or Departmental assignment on address space used on PittNet is not permitted without a specially expectation being granted by CSSD for a special application. Any statically- assigned IP Address assigned to a workgroup or end user device that is not in use for sixty (60) days or longer may be reclaimed by CSSD for assignment to another end user device. This restriction will not apply in those situations where IP addresses are assigned by CSSD dynamically to end user devices.

Network Protocols

In order to ensure network reliability, CSSD provides network support only for the IP version 4 and IP version 6 protocols on PittNet effective January 3, 2004. Many transport protocols are supported ( TCP, UDP, ICMP, IPSec, etc. ) and both unicast and multicast transports are supported. Units must not attach any device that relies only on an unsupported protocol to a network access point.

Remote Access

Remote Access is available to end users via VPN connectivity using the Secure Remote Access service. PittNet is connected to the public internet and many public services are available without VPN connectivity, but access to private or secure services may only be through VPN connectivity. Units must not configure any modem to support incoming connections other than facsimile connections. This type of connectivity is allowed for use with a device that is granted through the network firewall request process.

Proxy Servers and Similar Devices

CSSD has provided alternatives to access IP restricted services. The installation of any type of device that allows the sharing of a single IP address by multiple devices compromises the operation of the network and must not occur. This includes proxy servers, personal routers, and residential network equipment. It is expected that each end-user device on PittNet will be configured with a single registered IP address from one of University's networks.

Extended Network Connections

CSSD will provide all network connections to extended locations and services. For near off-campus, non-University buildings including rental and leased space, it is the responsibility of the University unit occupying the space or Property Management to fund the cost of a dark fiber connection to PittNet including the installation cost and monthly rental costs. For locations outside of a 25 mile radius, CSSD will specify other non-dark fiber carrier transport services. Carrier T1 services do not provide adequate bandwidth to make a useful connection to PittNet. Any requirements for special connections to extended locations must be requested through CSSD by submitting a help request to the Technology Help Desk.

Network Management

In order to ensure the fair use of network resources by all members of the University community, CSSD must take steps to identify devices that adversely affect PittNet. CSSD will attempt to notify the unit responsible for the offending device to correct the problem. In extreme situations, the network access point to which the offending device is attached may be disconnected until the unit or individual can demonstrate that the problem has been resolved. Upon disconnecting a network port for this reason, CSSD will notify both the individual using the network access point and the Unit Administrator of the unit in which the network access point is located.

CSSD is responsible for the University's connectivity to the Internet and Research Networks (I2, NLR). CSSD reserves the right to selectively block any traffic that does or may have a harmful effect on internet connectivity or enterprise systems or that represents a security threat to the University network or systems that comprise the University network. This applies to all PittNet traffic including internal, outgoing and incoming.

Units may wish to use network management tools to manage the workgroup and end user devices under their control. Units must not use network management tools to discover or attempt to manage network infrastructure devices or workgroup and end user devices under the control of any other unit. The use of network traffic monitoring and analysis devices by anyone other than designated CSSD staff impedes the network operation and must not occur.

References

Policy 10-02-05 Computer Access and Use
Policy 10-02-13 - University Network