Changes
Added network policies, UC info
=== Network Topology ===
CNS has about 4 Gbps aggregate bandwidth of commodity Internet from its Cogent uplink in the [[Andrews Information Systems Building]], which is fed to campus via redundant fiber connections to both Burruss Hall and Cassell Colliseum. Owens Hall, Hillcrest Hall, and Shanks Hall also serve as routers for some buildings. Additional connections for [[Network Virginia]], [[National Lamba RailLambaRail]], [[Mid-Atlantic Terascale Partnership]], and [[Internet2]] exist at AISB. Nearly all ethernet portals on campus are capable of 100 Mbps or Gigabit speeds, due to fiber interconnects between buildings; however, intrabuilding wiring varies in age and may not support high speeds. The vast majority of campus IPv4s come from two directly-allocated blocks (128.173.0.0/16 and 198.82.0.0/16).
CNS is a leader in the transition to IPv6, as their [[w:Autonomous System|ASN]] consistently ranks in the top 5 in terms of percentage of IPv6 traffic, according to [http://www.worldipv6launch.org/measurements/ World IPv6 Launch Measurements]. A dual-stack topology exists for the entirety of campus, with the notable exception of the main university website. However, Virginia Tech does not currently have its own IPv6 block; the addresses used are from a /48 sub-allocated from [[w:University of Maryland|UMD]].
In December 2011, CNS announced that a contract had been awarded to IBM and Avaya for ''Unified Communications'', a project to both replace the aging ROLM phone system with SIP phones and upgrade the network infrastructure in each building. This has also somewhat reduced monthly rates of common telephone and ethernet services for departments. While most buildings will be undergoing upgrades through 2014, it is unknown whether or not each will have full gigabit speeds at actual user ports. It is also unknown whether users will be able to use SIP softphones in conjunction with this.
=== Network Policies ===
Contrary to popular belief, CNS does not actively monitor users for torrenting activity; however, they are obligated to forward DMCA notifications to the relevant parties. Residential users that engage in peer-to-peer filesharing are often throttled (according to policy) if their daily upload average exceeds 4.9 GB. Campus-wide intrusion detection systems are deployed through cooperation with the [[IT Security Lab]].
Port security is enabled, meaning that users are not permitted to attach a switch to the network and must pay for new connections for all devices. While the $20/month fee for gigabit connectivity is generally thought to be reasonable, many department networks require them to evade this restriction through the use of NAT routing, ARP proxies, and/or NDP proxies. For most public portals, MAC address registration is often required, although some department ports are known to not carry this restriction.
NAT routers are officially banned, largely due to dorm residents bringing their own NAT router, plugging it in backwards, and sending DHCP leases to their entire building. While the ban is generally unenforced unless a problem arises, users are encouraged to purchase additional connections through CNS instead.
=== Controversies ===
* In January 2013, emergency maintenance was done at Virginia Tech's uplink in Ashburn, but users were not informed in advance of the potential downtime. This initially took out VT's edge IPv4 access for several hours, and later resulted in intermittent routing issues at the BGP level until the next morning.
* Like most administrative university offices, CNS is often regarded as having much bureaucracy. For example, the processes for obtaining SSL certificates or a DNS entry directly under "vt.edu" are especially tedious.
* CNS services such as VPN and VT-Wireless (the secure wireless network) require use of MS-CHAPv2, which is proven to be very insecure.
[[Category:Blacksburg ISPs]]