SlideShare a Scribd company logo
March 19, 2014
Daemons Frequent and Urgent Net-
Traders LLP Implementation Plan
By Shampy Singh and Tina Piotrowski
1
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Table of Contents
TECHNICAL SUMMARY................................................................................................... 5
WIDE AREA NETWORK INFRASTRUCTURE ......................................................................... 7
WIDE AREA NETWORK TECHNOLOGY ........................................................................... 7
LOGICAL DIAGRAM .................................................................................................... 9
IP ADDRESSING SCHEME ............................................................................................11
ROUTER SPECIFICATION .............................................................................................13
TELECOMMUNICATION FACILITY (WAN LINKS) SPECIFICATION AND PRICING......................14
TORONTO OFFICE INFRASTRUCTURE ...............................................................................17
LOGICAL DIAGRAM ...................................................................................................17
IP ADDRESSING SCHEME ............................................................................................19
PHYSICAL LAYOUT ....................................................................................................24
PHYSICAL DIAGRAM..................................................................................................25
AUTHENTICATION .....................................................................................................26
ACTIVE DIRECTORY ..................................................................................................26
DOMAIN CONTROLLER...............................................................................................26
DNS .......................................................................................................................26
DHCP.....................................................................................................................26
INTERNET CONNECTIVITY ..........................................................................................26
WIRELESS................................................................................................................27
VOICE/VIDEO CONFERENCING ....................................................................................27
MONITORING............................................................................................................27
NETWORK MONITORING ............................................................................................28
SERVER MONITORING................................................................................................30
TORONTO DATA CENTER ...............................................................................................32
LOGICAL DIAGRAM ...................................................................................................32
IP ADDRESSING SCHEME ............................................................................................33
PHYSICAL DESIGN.....................................................................................................35
POWER SPECIFICATIONS .............................................................................................38
COOLING SPECIFICATION............................................................................................39
SERVERS .................................................................................................................39
DEVELOPMENT .........................................................................................................39
PRODUCTION............................................................................................................40
VIRTUALIZATION ......................................................................................................41
BACKUP AND DISASTER RECOVERY .............................................................................42
EQUIPMENT LIST AND PRICING ....................................................................................43
NASSAU HEADQUARTER NETWORK INFRASTRUCTURE .......................................................47
LOGICAL DIAGRAM ...................................................................................................47
IP ADDRESS SCHEME.................................................................................................48
PHYSICAL LAYOUT ....................................................................................................49
2
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
PHYSICAL DIAGRAM ..................................................................................................50
POWER CONSUMPTION...............................................................................................51
INTERNET AND CONNECTIONS.....................................................................................51
WIRELESS INTERNET .................................................................................................52
EQUIPMENT LIST AND PRICING ....................................................................................53
CHICAGO OFFICE..........................................................................................................56
LOGICAL DIAGRAM ...................................................................................................56
IP ADDRESS SCHEME.................................................................................................57
PHYSICAL LAYOUT ....................................................................................................59
PHYSICAL DIAGRAM ..................................................................................................60
POWER CONSUMPTION...............................................................................................61
SERVERS .................................................................................................................61
HISTORIAN DATABASE...............................................................................................61
VOICE/VIDEO CONFERENCING ....................................................................................62
MONITORING............................................................................................................62
NETWORK MONITORING ............................................................................................62
SERVER MONITORING................................................................................................62
EQUIPMENT LIST AND PRICING ....................................................................................63
NEW YORK OFFICE.......................................................................................................66
LOGICAL DIAGRAM ...................................................................................................66
IP ADDRESS SCHEME.................................................................................................67
PHYSICAL LAYOUT ....................................................................................................69
PHYSICAL DIAGRAM ..................................................................................................70
POWER CONSUMPTION...............................................................................................71
SERVERS .................................................................................................................71
HISTORIAN DATABASE...............................................................................................71
MONITORING............................................................................................................72
NETWORK MONITORING ............................................................................................72
SERVER MONITORING................................................................................................72
EQUIPMENT LIST AND PRICING ....................................................................................73
CHICAGO SOLSTICTIX ...................................................................................................76
LOGICAL DIAGRAM ...................................................................................................76
IP ADDRESS SCHEME.................................................................................................77
PHYSICAL DIAGRAM..................................................................................................78
POWER SPECIFICATIONS .............................................................................................79
SERVERS .................................................................................................................79
EQUIPMENT LIST AND PRICING ....................................................................................80
NEW YORK SOLSTICTIX.................................................................................................82
LOGICAL DIAGRAM ...................................................................................................82
IP ADDRESS SCHEME.................................................................................................83
3
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
PHYSICAL DIAGRAM..................................................................................................84
POWER SPECIFICATIONS .............................................................................................85
SERVERS .................................................................................................................85
EQUIPMENT LIST AND PRICING ....................................................................................86
SECURITY POLICY ........................................................................................................88
FINANCIALS ................................................................................................................89
EQUIPMENT MAINTENANCE/REPLACEMENT STRATEGY ......................................................92
WORK CITED ...............................................................................................................94
4
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Executive Summary
Daemons Frequent and Urgent Net-Traders LLP (DaFun) is a new Hedge Fund company, which
needs a High Frequency Trading platform to be successful and provide return of investments to
their clients. DaFun is looking for a network that can suit their overall business goal. For this
reason DaFun has hired the team of Shampy Singh and Tina Piotrowski to find an innovative top
tier, fast-paced and low latency solution.
DaFun has recently acquired office space in Chicago, New York, Nassau and Toronto. DaFun
has also decided to lease rack space in both Chicago and New York Solsticix locations. Toronto
acts as the headquarters of the entire company and supports about 140 staff and 13 guest office.
Toronto also has the main Data Center for all of DaFun. Toronto is not as dependent on low
latency as other locations such as Chicago and New York Solsticix locations.
Nassau Headquarters in the Bahamas only has two people in staff and five guest offices. The
National Bank of the Bahamas and United Funds of the Bahamas is used as the main banks for
DaFun. Nassau is not highly reliant on low latency, but still needs to be connected with Toronto
Headquarters for financial reasons.
Chicago and New York Office both support 20 traders and trade strategist. Traders input trade
strategies and monitor trade daily. Traders and trade strategists need to have immediate access to
overwrite portal in order to change trading parameters. Both offices need to support low latency
and high availability solution.
All trading for DaFun will occur in the Chicago and New York Solsticix locations. These data
centers act as a colocation for both the MYSE and MASDAQ. DaFun will be using a trading
application called DGenie, which will be placed at the Solsticix locations because of the
proximity to the exchanges.
In order to stay competitive in a highly competitive market, the Singh and Piotrowski team will
have to find a solution that encompasses finding the best networking hardware that will suit our
need for a low latency and high availability network. We need to use a Telco provider that can
provide us with the connections that we need, have a high availability and provide a low
downtime guarantee.
5
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Technical Summary
The trading industry is a very fast past industry. Any mistake, maybe seconds could cost
thousands if not millions of dollars. Our company has designed this proposal to the needs of
DaFun and also keeping in mind what is needed to have DaFun succeed for years to come. The
network that needs to be built must have low-latency, redundant systems and must have high
performance. The main components that will impact these requirements are the network and
server equipment. For this proposal we have used Cisco across the board, Cisco has excellent
service and reputation. We have chosen the Cisco Nexus 3548 for all critical areas. This switch
has the best in class feature sets, best in class for latency, around 300ns switching and routing
latency and 50ns latency to the servers. Also, the Nexus 3548 handles market volatility and
micro bursts very well. To meet the needs specified, this switch will be perfect for the low
latency infrastructure of DaFun. For the data center we will be using the Cisco Nexus 5596T.
This has a throughput of roughly 2 Tbps, this will allow high availability to all development and
production servers. At the non-critical access layer switches, the Cisco Catalyst 2960x will be
used, this is also best in the class for enterprise class access for branches. At Nassau we will be
using the Cisco 3945E.
High performance and low latency is very important in this environment, because of this there
will be no virtualization used at the Chicago and New York co-locations or at the Chicago and
New York offices. At these locations we will be deploying HP ProLiant BL620c Gen7 servers.
These servers will have SSD drives, duo 10 core Intel Xeon processor and 64GB of RAM. These
will be directly connected with 10 Gb connections allowing a low latency network path.
However, there will be virtualization used at the main data center in Toronto. This will allow us
to have replicated testing and development environments. We will be using VMWare vSphere to
make this possible. The analysts at the other offices will be able to use the development
resources as they deem necessary. The servers that will be used at the Toronto Datacenter are the
HP ProLiant BL460c Gen8 servers. These servers will have Duo Intel Xeon 2.6Ghz processors
and 128GB of RAM. The RAM in these servers, is able to be upgrade to 1 TB. Most of the
servers will be running virtualization other than the latency dependent applications.
For the massive database storage needs, we will be implementing the HP ProLiant DL560 Gen8
server with the HP MSA 2040 SAN. These will be located at the New York and Chicago
Offices, since we will be getting the feed from those locations. This allows 250Tb of storage.
This SAN will allow a 10Gbps iSCSi connection running Raid 5. This will allow for high
redundancy. Since each location will have this setup, if any hardware failure were to happen that
made the data unrecoverable, this will not cause a loss of data since both locations will have this
data available.
6
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
The WAN connectivity between Toronto, Chicago and New York offices will be 100 Mbps
MPLS over Ethernet and 1 Gbps Metro Ethernet from Chicago and New York offices to their co-
locations. These connections are provided from JP Telco and KQ Telco. We will be use two
different connections for redundancy. There will be a point to point connection from Toronto to
Nassau also provided by JP and KQ Telco. There will also be 100 Mb Internet connections at all
locations except at the Chicago and New York Solsticix locations since this will not be necessary
and also to decrease security risks. These internet connections will be using Cisco ASA 5585
firewalls for security. Also, the routers that will be used to terminate these connections will be
the ASR 1004 except at the Nassau location, which will be using the Cisco 3945E.
The operating systems that will be used on these servers will be either Microsoft Server 2012 or
Red Hat Enterprise. This will depend on which application will be running on that server. The
user desktops will vary from who will be using the desktops. These will range from the HP Z420
with i7 Processors to HP Z230 with i5 processors.
7
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Wide Area Network Infrastructure
Wide Area Network Technology
Wide Area Network Technology
For DaFun to be successful, the technology we choose needs to be secure, redundant and be
highly available. When considering any technology we need to keep these requirements in mind.
Connecting all the office together will consist of using point to point and MPLS connections.
The point to point will be from Nassau and Toronto Headquarters, since there are no other
connections available. The MPLS over Ethernet will be from Chicago and New York office to
Toronto also, from Toronto to Chicago and New York Co-locations.
The Chicago and New York Co-Locations will have BGP peering with Lyric A and Lyric B as
well as having BGP peering with the Exchanges. The connections from each Solsticix location to
Lyric A and Lyric B will have a 10 Gbps connection. The BGP numbers can be seen below:
NY-SOL
● MYSE
o New York DaFUN to MYSE: AS# 65301
o New York MYSE: AS #301
● MASDAQ
oNew York DaFUN to MASDAQ: AS #65421
oNew York MASDAQ: AS #421
● Lyric “A” Feed
o DaFUN: AS #65138
o Lyric: AS #138
● Lyric “B” Feed
o DaFUN: AS #65188
o Lyric: AS #188
CHI-SOL
● MYSE
o Chicago DaFUN to MYSE: AS# 65329
o Chicago MYSE: AS #329
● MASDAQ
8
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
o Chicago DaFUN to MASDAQ: AS #65422
o Chicago MASDAQ: AS #422
● Lyric “A” Feed
o DaFUN: AS #65238
o Lyric: AS #238
● Lyric “B” Feed
o DaFUN: AS #65288
o Lyric: AS #288
We will be using two providers: JP and KQ Telco. By using two providers this will ensure that
we have redundancy that is critical for the trading and Hedge Fund environment. They also
provide the availability that we need, which will be explained more in depth later on. At the
Nassau Headquarters there will be a T1 point-to-point connection to Toronto Headquarters,
National Bank of Bahamas, United Funds of Bahamas and to the Internet. For redundancy there
will be two connections between all T1 point to point connections from JP and KQ Telco.
Between the Chicago and New York and the Chicago and New York Solsticix, respectively there
will be two 1Gbps point-to-point connection from JP and KQ Telco. The Toronto Headquarters,
Chicago and New York Offices will have two direct point-to-point 100Mbps to the internet per
office from JP and KQ Telco. There will also be two 100Mbps MPLS connection between
Toronto Headquarters to Chicago and New York Office from JP and KQ Telco. There will also
an additional 100Mbps MPLS between Toronto Headquarters and Chicago and New York
Solsticix. The MPLS connection from Toronto to the Solsticix locations is there to be the last
resort in case the two connections from the New York or Chicago offices go down to their
Solsticix co-locations. This can be seen in detail on in the Fig 1.1.
9
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Logical diagram
The logical diagram helps to give you a basic overview of how the future network will be
connected. The logical diagram of DaFun’s Wide Area Network is precarious because it helps to
outline how we are connecting six offices across three countries and thousands of miles. We
decided to use JP and KQ Telco as our provider between all of the offices. We also decided to
use 10 Gbps connections with Lyric A and Lyric B as our market data providers for our Chicago
and New York Solsticix locations and 1 Gbps connections with MYSE and MASDAQ.
As seen in the diagram, each location has two connections to the internet. The reason we decided
to do this is because it provides redundancy in case one internet line goes down. Secondly, we
decided not to route all traffic through one office through MPLS is because of security. If one
office were to be compromised, then all of the offices could be at risk since the firewalls would
be only at one location. Also, there is a BGP peering from Lyric A and B, via multicast, so in
case one router with the Lyric A connection were to go down, we still have another redundant
connection from another router from Lyric B. The feeds coming from Lyric A and B are exactly
the same. Also, since we have a BGP connection directly with these services we will not require
any firewalls at these locations. As seen below, the firewalls are only needed where we are
communicating to the public web, which would be the internet.
In the highly unlikely case that from our remote offices; the main and the backup link were to go
down. We have a MPLS direct connection from Toronto to the Chicago and New York Solsticix
co-locations. This will allow analysts at the Toronto location to act fast, and turn off any
algorithms necessary or make any changes they might find needed. This is a very good backup
design incase all connection is lost from any of the offices to their co-locations.
Each office is connected to Toronto by a 100 Mb MPLS over Ethernet direct connection, except
for Nassau, which has a point to point T1 connection. This will allow hosting of all domain
controllers, DNS, and DHCP servers at one location. Each office will be able to get authenticated
from Toronto and this frees up more space at each location to handle the necessary Trading and
data handling that is necessary for DaFun to be successful.
10
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Fig1.1
11
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Addressing Scheme
The IP Addressing Scheme for the WAN can be seen below
Device Interface IP Address Subnet Mask
TOR-HQ-INT1 Fa0/0 100.1.2.1 /30
TOR-HQ-INT2 G0/0 88.1.2.1 /30
TOR-HQ-FW1 G0/0 100.1.2.2 /30
TOR-HQ-FW1 G0/1 100.1.2.5 /30
TOR-HQ-FW2 G0/0 88.1.2.2 /30
TOR-HQ-FW2 G0/1 88.1.2.9 /30
TOR-HQ-CR1 S0/0 10.1.1.2 /30
TOR-HQ-CR1 S0/1 10.2.1.1 /30
TOR-HQ-CR1 S0/2 10.2.1.5 /30
TOR-HQ-CR1 S0/3 10.2.1.13 /30
TOR-HQ-CR2 S0/0 10.1.1.6 /30
TOR-HQ-CR2 S0/1 10.2.1.21 /30
TOR-HQ-CR2 S0/2 10.2.1.25 /30
TOR-HQ-CR2 S0/3 10.2.1.29 /30
CHI-OFF-INT1 G0/0 100.1.3.1 /30
CHI-OFF-INT2 G0/0 88.1.3.1 /30
CHI-OFF-FW1 G0/0 100.1.3.2 /30
CHI-OFF-FW1 G0/1 10.3.1.9 /30
CHI-OFF-FW2 G0/0 88.1.3.2 /30
CHI-OFF-FW2 G0/1 10.3.1.13 /30
CHI-OFF-CR1 S0/0 10.3.1.1 /30
CHI-OFF-CR1 S0/1 10.2.1.2 /30
CHI-OFF-CR2 S0/0 10.3.1.5 /30
12
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
CHI-OFF-CR2 S0/1 10.2.1.6 /30
NY-OFF-INT1 G0/0 100.1.4.1 /30
NY-OFF-INT2 G0/0 88.1.4.1 /30
NY-OFF-FW1 G0/0 100.1.4.2 /30
NY-OFF-FW1 G0/1 10.4.1.9 /30
NY-OFF-FW2 G0/0 88.1.4.2 /30
NY-OFF-FW2 G0/1 10.4.1.13 /30
NY-OFF-CR1 S0/0 10.4.1.1 /30
NY-OFF-CR1 S0/1 10.2.1.26 /30
NY-OFF-CR2 S0/0 10.4.1.5 /30
NY-OFF-CR2 S0/1 10.4.1.30 /30
CHI-SOL-CR1 S0/0 10.3.1.2 /30
CHI-SOL-CR2 S0/0 10.3.1.6 /30
CHI-SOL-CR2 S0/1 10.2.1.14 /30
NY-SOL-CR1 S0/0 10.4.1.2 /30
NY-SOL-CR2 S0/0 10.4.1.6 /30
NY-SOL-CR2 S0/1 10.2.1.30 /30
NASS-HQ-INT1 G0/0 100.1.1.1 /30
NASS-HQ-INT2 G0/0 88.1.1.1 /30
NASS-HQ-FW2 G0/0 88.1.1.2 /30
NASS-HQ-FW2 G0/1 10.1.1.13 /30
NASS-HQ-FW1 G0/0 100.1.1.2 /30
NASS-HQ-FW1 G0/1 10.1.1.9 /30
NASS-HQ-CR1 S0/0 10.1.1.1 /30
NASS-HQ-CR2 S0/0 10.1.1.5 /30
13
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Router specification
The router we chose was a Cisco ASR 1004 for the Toronto Headquarters, Chicago and New
York Offices and Solsticix locations. This router provides the high-performing edge solution for
the private WAN and WAN aggregation. These routers support provide layer 2 tunneling
protocol, layer 3 VPN, IPv4, IPv6 and Quality of Service.
In the Nassau Headquarters there is a Cisco 3945E Router. This router supports the T1 point-to-
point connections that are from the National Bank of the Bahamas, United Funds of the
Bahamas, Internet and Toronto. This router will still support high performance WAN
environments. Also, supported on this router are VPN and VoIP which is all that is really needed
in Nassau.
14
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Telecommunication facility (WAN links) specification and pricing
JP and KQ Telco provide the connections we need to make DaFun prosperous. JP and KQ Telco
provide 99.99% of uptime for their services. This means that if there is any downtime it is:
● 1.01 minutes per week
● 4.32 minutes per month
● 52.56 minutes per year
There is redundancy in place at every office and headquarter if there is any downtime or
equipment failure. Each site has redundant internet connectivity connecting to redundant routers
or firewalls. Each point to point connection is terminated into a differing network device to
provide the redundancy. If the path or equipment fails, the protocols we have in place will
reroute traffic accordingly. We will be using EIGRP as our internal routing protocol and BGP for
the external routing protocol.
Circuit Connections
Cost/Mont
h
Cost/Year Cost for 3 Years
T1 Connection
T1 Internet (JP) $2,000.00 $24,000.00 $72,000.00
T1 Internet (KQ) $2,000.00 $24,000.00 $72,000.00
T1 TOR(JP) $18,500.00 $ 222,000.00 $666,000.00
T1 TOR(KQ) $18,500.00 $222,000.00 $ 666,000.00
National Bank of the
Bahamas (JP)
$ 600.00 $7,200.00 $21,600.00
National Bank of the
Bahamas (KQ)
$ 600.00 $7,200.00 $21,600.00
United Funds of the
Bahamas (KQ)
$600.00 $7,200.00 $21,600.00
United Funds of the
Bahamas (JP)
$ 600.00 $7,200.00 $21,600.00
Cumulative Cost $43,400.00 $520,800.00 $1,562,400.00
1 Gbps Point to
Point
CHI OFF to CHI SOL
(JP)
$2,300.00 $27,600.00 $82,800.00
CHI SOL to CHI OFF
(KQ)
$2,300.00 $27,600.00 $82,800.00
15
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
NY OFF to NY SOL
(JP)
$2,200.00 $26,400.00 $79,200.00
NY SOL to NY CHI
OFF (KQ)
$2,200.00 $ 26,400.00 $ 79,200.00
Cumulative Cost $9,000.00 $108,000.00 $324,000.00
100 Mbps
Internet
TOR (KQ) $2,000.00 $24,000.00 $72,000.00
TOR (JP) $2,000.00 $24,000.00 $ 72,000.00
CHI-OFF (JP) $ 1,400.00 $ 16,800.00 $50,400.00
CHI-OFF (KQ) $1,400.00 $ 16,800.00 $50,400.00
NY-OFF (JP) $1,400.00 $16,800.00 $50,400.00
NY-OFF (KQ) $ 1,400.00 $16,800.00 $50,400.00
Cumulative Cost $9,600.00 $115,200.00 $345,600.00
100 Mbps MPLS
CHI OFF (JP) $1,600.00 $19,200.00 $ 57,600.00
CHI OFF (KQ) $1,600.00 $19,200.00 $57,600.00
NY OFF (JP) $ 1,600.00 $ 19,200.00 $57,600.00
NY OFF (KQ) $1,600.00 $19,200.00 $57,600.00
CHI SOL (JP) $1,100.00 $ 13,200.00 $39,600.00
NY SOL (JP) $1,100.00 $13,200.00 $39,600.00
Cumulative Cost $8,600.00 $103,200.00 $309,600.00
MYSE
NY SOL X2 $6,000.00 $72,000.00 $216,000.00
CHI SOL X2 $6,000.00 $72,000.00 $ 216,000.00
Cumulative Cost $12,000.00 $144,000.00 $432,000.00
MASDAQ
NY SOL X2 $6,000.00 $72,000.00 $ 216,000.00
CHI SOL X2 $6,000.00 $72,000.00 $216,000.00
Cumulative Cost $12,000.00 $144,000.00 $432,000.00
16
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Lyric A and B
NY SOL Lyric A $7,000.00 $ 84,000.00 $252,000.00
NY SOL Lyric B $7,000.00 $84,000.00 $252,000.00
CHI SOL Lyric A $7,000.00 $84,000.00 $252,000.00
CHI SOL Lyric B $7,000.00 $84,000.00 $252,000.00
Cumulative Cost $ 28,000.00 $336,000.00 $1,008,000.00
Total Cost $122,600.00
$1,471,200.0
0
$4,413,600.00
1Gpbs Metro Ethernet MPLS (One-Way)
To/From CHI-OFF NY-OFF CHI-SOL NY-SOL TOR-HQ
CHI-OFF N/A 9 ms 2 ms 8 ms 7 ms
NY-OFF 9 ms N/A 8 ms 2 ms 8 ms
CHI-SOL 2 ms 8 ms N/A 8 ms 7 ms
NY-SOL 8 ms 2 ms 8 ms N/A 7 ms
TOR-HQ 7ms 8 ms 7 ms 7 ms N/A
17
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Toronto Office Infrastructure
Logical diagram
When coming up with a design for the Toronto Headquarters, we need to keep in mind that it
should be easy to follow and functional. As more complex the network gets, the chances of error
increases. This diagram can be seen Fig 2.1.
From the Chicago and New York Office there is a redundant 100Mbps MPLS connection.
There is another 100Mbps MPLS connection coming from both the Chicago and New York
Solsticix locations. There is also a T1 point-to-point connection from Nassau Headquarters. All
of the connections terminate at one of two core routers (e.g. TOR-HQ-CR1 or TOR-HQ-CR2).
The connections from Nassau and both the Chicago and New York Office have two connections
from two different ISPs that will terminate on the opposing core routers for redundancy. Lastly,
the 100Mbps internet connection will also have two connections from two different ISPs and
terminate on opposing routers (TOR-HQ-INT1 or TOR-HQ-INT1).
Internet traffic will hit the Firewalls (TORF-HQ-FW1 or TOR-HQ-FW2) then proceed to be
routed through our DMZ network. Within our DMZ there are three servers: public web server,
DNS and email server. Traffic that is permitted will be routed to another set of Firewalls (TOR-
HQ-FW3 or TOR-HQ-FW4) which will end up at the Core switches (TOR-HQ-CSW1 or TOR-
HQ-CSW2). The traffic will then proceed to go through the Distribution switches and Access
switches and down to their respective location either the users or the data center. Traffic that is
coming directly from the Chicago and New York Office, Chicago and New York Solsticix and
the Nassau Headquarters is routed through the core routers first, then passes through the
distribution switches and access switches to its respective location either the users or data center.
All connections terminate into either a Cisco ASA 5585 Firewall or a Cisco ASR 1004 Router.
All traffic that is permitted into the network is forwarded through a Cisco 4510RE switch then
goes to the access layer Cisco 2950X switch or Cisco Nexus 5596T. This equipment provides the
low latency, high availability and high performance that the Toronto Headquarter needs as the
center of the company. Connections between devices will be either Multimode fiber or CAT6
cabling.
18
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Fig 2.1
19
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Addressing Scheme
For the Toronto office we have been given an IP address allocation of 100.1.2.0/24 from JP
Telco and an IP address allocation of 88.1.2.0/24 by KQ Telco. As seen in Fig. 2.2, the public IP
addresses have been assigned to all routers, firewalls going into the DMZ. NAT will be
performed on the servers inside of the DMZ with a 1 to 1 IP translation. NAT/PAT will be
performed on all addresses coming out from TOR-HQ-DMZR1 and TOR-HQ-DMZR2.
For the private network we have allocated 10.2.1.0 /24 addresses for all of the networking
equipment. These were broken into /30 subnets for each link. The devices that will be using
DHCP for dynamic addressing have been given 10.2.16.0 /20 subnet. This will give the DHCP to
allocate 4094 addresses. The server’s subnet has been given a 10.2.32.0 /20 subnet range. This
will give the Toronto office 4094 addresses that are available to be assigned statically. The
devices and users inside are able to communicate with all offices through MPLS over Ethernet.
Fig. 2.2
Device Interface IP Address
Subnet
Mask
TOR-HQ-INT1 Fa0/0 100.1.2.1 /30
TOR-HQ-INT2 G0/0 88.1.2.1 /30
TOR-HQ-FW1 G0/0 100.1.2.2 /30
TOR-HQ-FW1 G0/1 100.1.2.5 /30
TOR-HQ-FW2 G0/0 88.1.2.2 /30
TOR-HQ-FW2 G0/1 88.1.2.9 /30
TOR-HQ-DMZ1 G0/0 100.1.2.6 /30
TOR-HQ-DMZ1 G0/1 10.2.1.33 /30
TOR-HQ-DMZ2 G0/0 88.1.2.10 /30
TOR-HQ-DMZ2 G0/1 10.2.1.37 /30
TOR-HQ-DMZ3 G0/0 10.2.1.34 /30
TOR-HQ-DMZ3 G0/1 10.2.1.41 /30
TOR-HQ-DMZ4 G0/0 10.2.1.38 /30
TOR-HQ-DMZ4 G0/1 10.2.1.45 /30
20
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
TOR-HQ-FW3 G0/0 10.2.1.42 /30
TOR-HQ-FW3 G0/1 10.2.1.49 /30
TOR-HQ-FW4 G0/0 10.2.1.46 /30
TOR-HQ-FW4 G0/1 10.2.1.53 /30
TOR-HQ-CR1 S0/0 10.1.1.2 /30
TOR-HQ-CR1 S0/1 10.2.1.1 /30
TOR-HQ-CR1 S0/2 10.2.1.5 /30
TOR-HQ-CR1 S0/3 10.2.1.13 /30
TOR-HQ-CR1 G0/4 10.2.1.57 /30
TOR-HQ-CR1 G0/5 10.2.1.61 /30
TOR-HQ-CR2 S0/0 10.1.1.6 /30
TOR-HQ-CR2 S0/1 10.2.1.21 /30
TOR-HQ-CR2 S0/2 10.2.1.25 /30
TOR-HQ-CR2 S0/3 10.2.1.29 /30
TOR-HQ-CR2 G0/4 10.2.1.65 /30
TOR-HQ-CR2 G0/4 10.2.1.69 /30
TOR-HQ-CRSW1 G0/0 10.2.1.50 /30
TOR-HQ-CRSW1 G0/1 10.2.1.58 /30
TOR-HQ-CRSW1 G0/2 10.2.1.66 /30
TOR-HQ-CRSW1 G0/3 10.2.1.73 /30
TOR-HQ-CRSW1 G0/4 10.2.1.85 /30
TOR-HQ-CRSW1 G0/5 10.2.1.93 /30
TOR-HQ-CRSW1 G0/6 10.2.1.97 /30
TOR-HQ-CRSW2 G0/0 10.2.1.54
TOR-HQ-CRSW2 G0/1 10.2.1.62 /30
21
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
TOR-HQ-CRSW2 G0/2 10.2.1.70 /30
TOR-HQ-CRSW2 G0/3 10.2.1.77 /30
TOR-HQ-CRSW2 G0/4 10.2.1.81 /30
TOR-HQ-CRSW2 G0/5 10.2.1.89 /30
TOR-HQ-CRSW2 G0/6 10.2.1.101 /30
TOR-HQ-DSW1 G0/0 10.2.1.74 /30
TOR-HQ-DSW1 G0/1 10.2.1.78 /30
TOR-HQ-DSW1 G0/2 10.2.1.105 /30
TOR-HQ-DSW1 G0/3 10.2.1.109 /30
TOR-HQ-DSW1 G0/4 10.2.1.113 /30
TOR-HQ-DSW1 G0/5 10.2.1.117 /30
TOR-HQ-DSW1 G0/6 10.2.1.121 /30
TOR-HQ-DSW1 G0/7 10.2.1.125 /30
TOR-HQ-DSW1 G0/8 10.2.1.129 /30
TOR-HQ-DSW1 G0/9 10.2.1.133 /30
TOR-HQ-DSW2 G0/0 10.2.1.82 /30
TOR-HQ-DSW2 G0/1 10.2.1.86 /30
TOR-HQ-DSW2 G0/2 10.2.1.137 /30
TOR-HQ-DSW2 G0/3 10.2.1.141 /30
TOR-HQ-DSW2 G0/4 10.2.1.145 /30
TOR-HQ-DSW2 G0/5 10.2.1.149 /30
TOR-HQ-DSW2 G0/6 10.2.1.153 /30
TOR-HQ-DSW2 G0/7 10.2.1.157 /30
TOR-HQ-DSW2 G0/8 10.2.1.161 /30
TOR-HQ-DSW2 G0/9 10.2.1.165 /30
22
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
TOR-HQ-DSW3 G0/0 10.2.1.90 /30
TOR-HQ-DSW3 G0/1 10.2.1.94 /30
TOR-HQ-DSW3 G0/2 10.2.1.169 /30
TOR-HQ-DSW3 G0/3 10.2.1.173 /30
TOR-HQ-DSW4 G0/0 10.2.1.98 /30
TOR-HQ-DSW4 G0/1 10.2.1.102 /30
TOR-HQ-DSW4 G0/2 10.2.1.177 /30
TOR-HQ-DSW4 G0/3 10.2.1.181 /30
TOR-HQ-SSW1 G0/0 10.2.1.170 /30
TOR-HQ-SSW1 G0/1 10.2.1.178 /30
TOR-HQ-SSW2 G0/0 10.2.1.174 /30
TOR-HQ-SSW2 G0/1 10.2.1.182 /30
TOR-HQ-ASW1 G0/0 10.2.1.106 /30
TOR-HQ-ASW1 G0/1 10.2.1.138 /30
TOR-HQ-ASW2 G0/0 10.2.1.110 /30
TOR-HQ-ASW2 G0/1 10.2.1.142 /30
TOR-HQ-ASW3 G0/0 10.2.1.114 /30
TOR-HQ-ASW3 G0/1 10.2.1.146 /30
TOR-HQ-ASW4 G0/0 10.2.1.118 /30
TOR-HQ-ASW4 G0/1 10.2.1.150 /30
TOR-HQ-ASW5 G0/0 10.2.1.122 /30
TOR-HQ-ASW5 G0/1 10.2.1.154 /30
TOR-HQ-ASW6 G0/0 10.2.1.126 /30
TOR-HQ-ASW6 G0/1 10.2.1.158 /30
TOR-HQ-ASW7 G0/0 10.2.1.130 /30
23
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
TOR-HQ-ASW7 G0/1 10.2.1.162 /30
TOR-HQ-ASW8 G0/0 10.2.1.134 /30
TOR-HQ-ASW8 G0/1 10.2.1.166 /30
DHCP Devices 10.2.16.0 /20
Server Assignments 10.2.32.0 /20
24
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical layout
The physical layout can be seen on Fig. 2.3. The circled T’s represent where the telecom closets
need to be located. User work stations, VoIP phones (Cisco Unified IP Phone 7942G) and
wireless Access Point will terminate in these telecom closets. The circled DC represents the Data
Center that will contain all the servers. All internet and internal WAN connections will terminate
here as well. We also need to consider physical security for this physical layout. The data center
houses the critical information, multi-millions of dollars in equipment and all the connections to
the internal WAN and internet. On a hardware level, there are measures that can be taken to
ensure that the device is secure and encrypted properly. The data center needs to be locked at all
times, and access should only be granted to those who need to be there i.e. IT staff. There should
be a form of surveillance to watch the room and log who goes in and out. Electronic locks help to
keep log of who goes in and out. As an extra precaution racks should be locked inside the data
center. The telecom closets also need a form of physical security. On a hardware level, the
switches will be configured with passwords, which will be needed for them to be unlocked.
Fig. 2.3
25
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical Diagram
This rack design encompasses both Telecom closets that are in the Toronto Headquarters. The
Cisco 2960X switches will connect the workstation users, Access Points and VoIP phones to the
internal WAN and internet. The Cisco 4510 distribution switches will connect back to the data
center. All connections from the workstation users, Access Points and VoIP phones will connect
using CAT 6 cabling. This design is meant to support all the cubicle and offices that have
multiple drops (drops mean physical connections to the network). There will be a connection for
each workstation and separate connections for each VoIP phones.
26
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Authentication
Authentication for all offices will be single sign on (SSO). This will be hosted from the Toronto
Headquarters. Any domain sign on will be authenticated from Toronto through the domain
controllers. This will help to centralize all sign on; also this has been designed to be highly
available. No downtime is expected from the implementation. .
Active Directory
The software we will be using to authenticate all domain logins will be Active Directory (AD).
AD has many features that will be helpful for this enterprise. Features such as, you will be able
to separate server names by location by OU same goes for users in different locations. AD also
has a function for SSO, which you may implement in many of the applications, such as any of
the portals that require domain logins.
All users from Chicago, New York and Nassau will be authenticated through the Toronto office.
Our MPLS over Ethernet will allow this fairly easily. Since there are redundant connections, the
SLA is 99.999% up time. The way the datacenter has been designed, there will be one Active
Directory server that will be in use and two backup in case anything were to happen to the main
server. This is mirrored anytime any change is made, so both will have the same information in
it.
Domain Controller
All users will be authenticated through the domain controllers. There will be one primary domain
controller. The other two will be the backup in case the primary goes down. All of the data will
be the same across all DC’s.
DNS
There will also be a Domain Name System that will be in the Microsoft Server 2012. This will
allow the engineers to only remember the naming convention to login into servers and the
networking equipment. This makes it easier and faster to remember names instead of IP
Addresses.
DHCP
The DHCP will also be on a Microsoft Server, this will allow the automatic assignment of IP
addresses to all machines. Making it easier for the engineers so they will not need to statically
assign an IP address to every machine they build.
Internet Connectivity
The internet connects to our internet router. Since we are using two different providers (JP and
KQ) each service is connected to either router, this helps to ensure that there is redundancy if the
service provider goes down or if the router malfunctions. Internet traffic will be routed through
our internet routers to (if permitted) to the DMZ network. Within our DMZ there are three
27
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
servers, public web server, DNS and email server. Traffic will be routed to the servers or if
allowed to the Core switches. The traffic will then proceed to go through distribution switches
and access switches.
Wireless
There will be a total of 14 Access Points (Cisco C602I) that will be placed around the Toronto
Office that provide coverage throughout the office. The coverage will provide users with
seamless coverage throughout the Toronto Headquarters. All Access Points are power over
Ethernet (PoE) and will terminate in either the telecom closets or datacenter. All access point
will be connected with CAT 6 cabling.
Voice/Video Conferencing
The voice and video conferencing tool that we will be implementing is Cisco’s WebEx. This is a
VoIP solution that any of the employees may use on their personal laptops, or from any
computer with a video camera. This will be implemented at each office, making it easier to have
conversations without having to fly over to the offices.
This solution allows you to have conference calls with anyone in the world, up to 25 people per
conversation. With this anyone can share his or her desktop, documents, applications and also be
able to give remote control access to anyone in the conversation. It is a very easy and powerful
tool.
Monitoring
When it comes to moving parts, there should always be tools to monitor what is happening.
Knowing what is going to happen to the equipment could help prevent many extensive issues
28
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
and downtime. Monitoring has been added to this proposal for this reason. Below you will see
solutions for Network equipment monitoring along with Server monitoring solutions.
Network Monitoring
The network monitoring solution that we will be implementing is the Network Performance
Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature,
fan speed, and power supply. The Network Performance Monitor also tracks response time,
availability and uptime of routers and switches. This will allow the enterprise to detect and
diagnose network issues before any outages occur. The GUI is very intuitive. Few examples may
be seen below:
29
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
30
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Server Monitoring
We will be implementing PRTG Network Monitoring for the servers. This solution is also web
based, installed on Windows Server 2012. This will allow the enterprise to monitor all servers at
every location and not just at Toronto. This will monitor bandwidth usage, CPU usage, Ping rate,
disk space, and uptime/downtime. There will be an email that will be sent out with a report of the
top 100 instance of what was stated above. These will show if there are any devices that need
action to be taken on or if there is a recurring culprit. Below an example of the GUI may be seen:
31
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
32
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Toronto Data Center
Logical diagram
The data center has sensitive information stored including the daily backups from all of the
virtual machines and physical servers. So there must be redundancy and a fault tolerant design.
In Fig.3.1, you are able to see the design that has been proposed for the data center. There are
two core routers that have redundant connections from all ISPs. These routers then have
connections to the core switches. Keep in mind that there are multiple links that go to the core
switches and core switches to distribution switches that are aggregated together. So it will only
fail over to the other switch if all links go down or if the core router goes down.
The server switches (TOR-HQ-SSW1 and TOR-HQ-SSW2) will then be connected to the 6
c7000 chassis and also the EMC VNX8000 backup units. They all have multiple redundant fiber
connections to the switches. Fig.3.1
33
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Addressing Scheme
The IP addressing has been kept simple in the Toronto data center. Simplicity allows it to be
easier to solve any issues that might arise. The networking devices were given a 10.2.1.0/24
allocation that has been split into /30 for every link. For the servers the IP address range of
10.2.16.0/20 has been allocated. The 6 HP c7000 chassis will have two Onboard Controllers, two
on each chassis for redundancy, both having a fiber connection to the switches. There will be
multiple IP addresses, and also depending on how many virtual machines are created. So the IP
address scheme for this was not shown.
Fig. 3.2
Device Interface IP Address Subnet Mask
TOR-HQ-CR1 S0/0 10.1.1.2 /30
TOR-HQ-CR1 S0/1 10.2.1.1 /30
TOR-HQ-CR1 S0/2 10.2.1.5 /30
TOR-HQ-CR1 S0/3 10.2.1.13 /30
TOR-HQ-CR1 G0/4 10.2.1.57 /30
TOR-HQ-CR1 G0/5 10.2.1.61 /30
TOR-HQ-CR2 S0/0 10.1.1.6 /30
TOR-HQ-CR2 S0/1 10.2.1.21 /30
TOR-HQ-CR2 S0/2 10.2.1.25 /30
TOR-HQ-CR2 S0/3 10.2.1.29 /30
TOR-HQ-CR2 G0/4 10.2.1.65 /30
TOR-HQ-CR2 G0/4 10.2.1.69 /30
TOR-HQ-CRSW1 G0/0 10.2.1.50 /30
TOR-HQ-CRSW1 G0/1 10.2.1.58 /30
TOR-HQ-CRSW1 G0/2 10.2.1.66 /30
TOR-HQ-CRSW1 G0/3 10.2.1.73 /30
TOR-HQ-CRSW1 G0/4 10.2.1.85 /30
TOR-HQ-CRSW1 G0/5 10.2.1.93 /30
34
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
TOR-HQ-CRSW1 G0/6 10.2.1.97 /30
TOR-HQ-CRSW2 G0/0 10.2.1.54
TOR-HQ-CRSW2 G0/1 10.2.1.62 /30
TOR-HQ-CRSW2 G0/2 10.2.1.70 /30
TOR-HQ-CRSW2 G0/3 10.2.1.77 /30
TOR-HQ-CRSW2 G0/4 10.2.1.81 /30
TOR-HQ-CRSW2 G0/5 10.2.1.89 /30
TOR-HQ-CRSW2 G0/6 10.2.1.101 /30
TOR-HQ-DSW3 G0/0 10.2.1.90 /30
TOR-HQ-DSW3 G0/1 10.2.1.94 /30
TOR-HQ-DSW3 G0/2 10.2.1.169 /30
TOR-HQ-DSW3 G0/3 10.2.1.173 /30
TOR-HQ-DSW4 G0/0 10.2.1.98 /30
TOR-HQ-DSW4 G0/1 10.2.1.102 /30
TOR-HQ-DSW4 G0/2 10.2.1.177 /30
TOR-HQ-DSW4 G0/3 10.2.1.181 /30
TOR-HQ-SSW1 G0/0 10.2.1.170 /30
TOR-HQ-SSW1 G0/1 10.2.1.178 /30
TOR-HQ-SSW2 G0/0 10.2.1.174 /30
TOR-HQ-SSW2 G0/1 10.2.1.182 /30
Server Assignments 10.2.32.0 /20
35
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical Design
The Toronto Data Center will consist of six racks that will house our network hardware and
servers. These racks have been designed with redundancy in mind. For example TOR-HQ-FW1
will not have TOR-HQ-FW2 in the same rack; they will be in opposite racks on different power
circuits. Just in case one rack loses power the chances of the other rack going down are slim. The
racks that have been selected are 45Us in size and are designed for maximum flexibility for
mounting equipment, thermal, and cable and power management. Each rack will have two PDUs
mounted to the side of it that each provides 24 outlets. All connections terminate in to Cisco
ASR 1004 routers, these high performance routers have the ability to handle high traffic quickly
and efficiently. All traffic that is routed will be sent to Cisco Nexus 5596T or Cisco 4510E
switches. These switches are low latency and provide the lowest delay in packets. There is also
one EMC VNX8000 storage system that will be in the data center. These are not shown below,
but will be used for storage. There will be three UPS Eaton 9390IT to support the power
consumption of the data center.
36
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
37
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
38
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power specifications
Out of all the locations, Toronto will have the most power consumption. For this reason we will
be using the Eaton 9390IT Uninterruptible Power Supplies. There will be three UPS devices to
support the amount of wattage that we will have. This UPS is designed to support up to 36,000
watts for 30 minutes. The power will need to be divided amongst the UPS to ensure that if there
is a power failure each UPS can handle the wattage. This will also provide that extra redundancy
for our network in case a UPS fails. This UPS system has been chosen because it uses 99 percent
efficiency to reduce energy and heat costs. This system works as a plug-and-play procedure,
which makes it easy to set up. The table listed below depicts the power consumption for all of
the Toronto Headquarters.
Toronto Power Consumption
Device Quantity Watts/Device Total Watts
Cisco Catalyst 4510R+E Switch w/Line Cards 6 74394.00 74394.00
Cisco Catalyst 2960X 8 740.00 5920.00
Cisco Nexus 5596T 2 120.00 240.00
Cisco ASR 1004 6 1020.00 6120.00
Cisco ASA 5585-X 4 120.00 480.00
Cisco 2504 Wireless Controller 1 120.00 120.00
Cisco Aironet 3602I 14 12.95 181.30
Cisco Unified IP Phone 7942G 150 6.30 945.00
HP BLc7000 6 2460.00 14760.00
VNX 8000 1 500.00 500.00
Total 198 79493.25 103660.3
39
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Cooling specification
There are many things to consider when having to cool a data center with the amount of
equipment that Toronto Data Center has. When setting up the data center we need to consider
having Hot and Cold Aisle. Hot and Cold aisle are design to prevent the mixing of hot and cold
air. You have to design these aisles so that only cold air is being absorbed through the intake on
devices and the hot air is being push out into an area where it can't be absorbed by other devices.
Fig. 3.3
Fig 3.3 shows one of the many options of setting up a hot and cold zone. There are many varying
opinions on what the temperature should be in a data center. For the amount of wattage that is
being used, the support staff that will be there daily, UPS, and lighting, we recommend that the
temperature be between 55 to 60F. The cabinets that we have chosen help us to control the
airflow that is coming out of devices; we can choose the direction that we want it to go.
Servers
In the Toronto Data Center we decided to go with two types of servers. The first one would be
the HP ProLiant BL460c Gen8 and the second type is the HP ProLiant BL620c Gen7. Alongside
the servers we will be running Red Hat Enterprise Linux 6 and Windows Server 2012. Most of
the nodes will be virtualized and only the most critical services will be running straight off of the
hardware.
Development
We have included a development environment in the plans since there was a concern to test new
services and changes in production, which is not recommended since testing services and
changes in production could lead to unplanned downtime and interrupting trading. All of the
development environment will be virtualized. This will allow developers to test out any changes
without having to worry about bringing anything down that shouldn’t be down. All of the
40
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
production environment will also be replicated into this environment, all of the trades for the day
and any strategies that are used during the trading day alongside with any programs that are used.
This will insure the changes or new services the developers are implementing will not break
anything else. These development boxes will be on the HP ProLiant BL460c Gen8. These boxes
will have two Intel Xeon 2.6GHz and 128GB of RAM per box. So this can be allocated as
required for the new Development VMs. Also, this is upgradable to 512GB of RAM per box, in
case more RAM is needed. There will be a total of 48 of the HP BL460c Gen8 at the Toronto
office. Inside of these boxes there are two 500GB Drives, equaling up to 24TB of hard drive
space.
Production
The production servers will have all of the critical services and applications running. This
includes the external customer and trader portal system. Likewise, the trading strategy input and
emergency overwrite portal, alongside with the DNS server, DHCP server, AD and the domain
controllers. The servers that will be handling all of the production data will be the HP ProLiant
BL620c Gen7. The specs for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon
processor 2.00GHz. The RAM is upgradeable to 1TB. Most of the applications will be run on
41
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
VMs, which will have redundant VMs in case one would fail or anything were to happen to it.
Virtualization
VMWare vSphere Enterprise edition will be the virtualization environment that we will be using.
VMWare has many advanced features that will come in handy in the data replication and backup
processes. Using vSphere allows us to have many data clusters where multiple virtual machines
can run. The data clusters are backed up in case something goes corrupt. The Enterprise edition
includes:
42
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Backup and Disaster Recovery
Backup and Disaster recovery is very important issues that need to be looked at when having an
ample amount of important information. The last thing one needs to worry about is something
failing and not having a backup to restore the data. Since this issue is highly important, we
decided to host all of the backup servers at the Toronto office. This will allow us to have all of
the backups at one consolidated place. Also, the backups that are in house are daily uploaded to
the Amazon Glacier, to house this information off site. In case something was to happen to the
information in the backup servers on site. Amazon Glacier is a cloud solution for archiving data.
The onsite solution that we decided to go with was the EMC VNX8000. This has a 3 PB hard
drive capability and can be maxed out at 6 PB. Also, it is connected to the network via fiber.
The data will be backed up in this solution, and backed up to the Amazon cloud daily. The data
that is backed up onsite will be stored for one month. Then it will be deleted. However, this data
will always be available on the cloud in case it is ever needed.
The offsite solution, as discussed before is the Amazon Glacier. This is a cloud solution that
allows the archival of unlimited data. This is a highly available solution with 99.99999% uptime.
Only seconds of downtime is expected per year. The data will go through the Internet connection
and if ever needed, it can be retrieved at any time.
43
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
This also contains Toronto’s infrastructure equipment list and pricing. Cross-Connect pricing is
not included in this table. Please see Financials section.
Toronto Equipment and Price List
Network Hardware
Type Description Size
(U)
Quantit
y
Cost Total Cost
Core Switch Cisco Catalyst 4510R+E
Switch
14 6 $6,751.99 $40,511.94
Access Switch Cisco Catalyst 2960X-
48FPD-L
2 8 $4,935.99 $9,871.98
Data Center
Switch
Cisco Nexus 5596T 48
ports
2 2 $28,615.99 $57,231.98
Router Cisco ASR 1004 Router
40Gbps / Route Processor
2 / SPA Interface
Processor 40G / 4 x 1-
Port 10 Gigabit Ethernet
Shared Port Adapter
2 6 $70,927.99 $425,567.94
Firewall Cisco ASA 5585-X
Security Plus Firewall
Edition SSP-20 bundle
2 4 $47,279.99 $189,119.96
Wireless
Controller
Cisco 2504 Wireless
Controller with 15
Access Point License
1 1 $2,404.99 $2,404.99
SFP, Line Cards, Modules
Line Card Cisco Supervisor Engine
7-E - control processor
N/A 12 $13,506.99 $162,083.88
Line Card 48 port 10/100/1000 Line
CardsWS-X4748-
RJ45V+E 48 ports
N/A 12 $6,075.99 $72,911.88
Line Card 12 port E-Series Gigabit
Ethernet SFP WS-X4612-
SFP-E
N/A 18 $4,049.99 $72,899.82
44
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Line Card 48 port 10/100/1000 Line
Cards WS-X4648-RJ45-
E
N/A 6 $3,711.99 $72,911.88
Line Card 24 port E-Series Gigabit
Ethernet SFP WS-X4624-
SFP-E
N/A 6 $13,508.99 $22,271.94
Line Card 12 port E-Series Gigabit
Ethernet SFP WS-X4712-
SFP-E
N/A 6 $18,764.99 $112,589.94
Power Supply Hot Plug 6000W power
supply WS-CAC-6000W
N/A 12 $3,475.99 $41,711.88
Module Cisco 8 Port Gigabit
Ethernet Shared Port
Adapter Mfr P/N SPA-
8X1GE-V2
N/A 2 $4,505.43 $9,010.86
Module Cisco 10G SR SFP
Module
N/A 20 $435.99 $8,719.80
Access Points, Phones
Access Points Cisco Aironet 3602I N/A 14 $1,069.99 $14,979.86
Desk Phones Cisco Unified IP Phone
7942G
N/A 150 $343.99 $51,598.50
Cabinets, PDU, ect.
Cabinet N-Series TeraFrame Gen
3 Network Cabinet
45 6 $4,275.95 $25,655.70
Cabinet HP 11642 1200mm Pallet
Universal Rack
42 2 $1,599.00 $ 3,198.00
UPS Eaton 9390IT N/A 3 $23,392.00 $70,176.00
PDU ServerTech CW-24V
PDU
N/A 12 $1,160.95 $13,931.40
Fiber Patch RackMount Fiber Patch
Panel JPM370-A-PR, 24
Port
1 2 $393.53 $787.06
45
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Copper Patch SpaceGain CAT6 High
Density , Unshielded 48
Port
1 1 $437.95 $ 437.95
Servers
Server
Enclosure
HP BLc7000 Platinum
Enclosure w/ 1 Phase 2
Power Supplies 4 Fans
ROHS
10 6 $7,381.00 $44,286.00
Storage VNX 8000 N/A 1 $108,000.0
0
$108,000.00
Blades BL620c Blade N/A 24 $15,096.00 $362,304.00
Blades BL460c Blade N/A 48 $6,439.99 $309,119.52
$2,796,718.66
Licenses and Warranties
Type Description Quantity Cost
Total
Cost/Month
Total
Cost/Year
Total Cost for
3 Years
extended
service
agreement
Cisco ASA
5585
4 $13,753.99 $4,584.66 $55,015.96 $ 165,047.88
extended
service
agreement
Cisco ASR
1004
6 $8,038.99 $4,019.50 $48,233.94 $144,701.82
extended
service
agreement
Cisco Catalyst
2960X-48FPD-
L
8 $471.99 $314.66 $55,015.96 $165,047.88
extended
service
agreement
Nexus 5596T 2 $2,512.99 $418.83 $48,233.94 $144,701.82
extended
service
agreement
Cisco Aironet
3602I
14 $94.99 $110.82 $3,775.92 $11,327.76
46
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
extended
service
agreement
Cisco 2504
Wireless
Controller
1 $479.99 $ 40.00 $5,025.98 $15,077.94
extended
service
agreement
Cisco Unified
IP Phone
7942G
150 $9.99 $124.88 $1,329.86 $3,989.58
License
Websense
Triton
1 $ 9,450.00 $787.50 $479.99 $1,439.97
License Cisco WebEx 1 $ 240.00 $20.00 $1,498.50 $4,495.50
License Linux Red Hat 30 $3,528.00 $8,820.00 $9,450.00 $28,350.00
License
Microsoft
Server 2012
8 $6,153.00 $4,102.00 $49,224.00 $147,672.00
Support
Care Package
BL460c Blade
48 $879.00 $3,516.00 $42,192.00 $126,576.00
Support
vmware
vsphere
enterprise
24X7
24 $4,773.16 $9,546.32
$114,555.8
4
$343,667.52
$36,405.17
$436,861.9
9
$1,310,585.97
47
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Nassau Headquarter Network Infrastructure
Logical diagram
The logical connections for Nassau will not be as complicated as the rest of the locations. At
Nassau we have two T1 connections from separate providers for the Internet; this will provide
redundancy in case one of the links was to go down. These connections enter two separate
firewalls and into separate routers. We have two separate T1 connections from different
providers going to the National Bank of the Bahamas and United Funds of the Bahamas. Having
two links from different providers gives us redundancy so we do not lose any connection to the
banks. This logical diagram can be seen at Fig. 4.1.
Fig. 4.1
48
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Address Scheme
For each Internet link we have been provided with a 100.1.1.0 /24 allocation for JP Telco and for
KQ Telco we have been provided with an 88.1.1.0 /24 allocation. As we can see from Fig. 4.2,
we have allocated the IP addresses that were given to the addresses on the routers and firewall
interfaces. The firewalls will perform NAT overload (PAT) the internal private addresses to one
single public IP address. We decided to not use the full /24 allocation inside since we have a
point-to-point connection with the Toronto office, this will allow us to use private addressing to
communicate directly with that office through that point-to-point.
The 10.1.1.0 /24 block will be dedicated to any networking equipment and the 10.1.2.0 /24 block
will be reserved for DHCP to assign to all other devices that do not need a static IP. Since there
are only a few employees and only limited visitors that will be coming to this location, a private
/24 allocation will suffice.
Fig. 4.2
Device Interface IP Address Subnet Mask
NASS-HQ-INT1 G0/0 100.1.1.1 /30
NASS-HQ-INT2 G0/0 88.1.1.1 /30
NASS-HQ-FW1 G0/0 100.1.1.2 /30
NASS-HQ-FW1 G0/1 10.1.1.9 /30
NASS-HQ-FW2 G0/0 88.1.1.2 /30
NASS-HQ-FW2 G0/1 10.1.1.13 /30
NASS-HQ-CR1 G0/0 10.1.1.10 /30
NASS-HQ-CR1 G0/1 10.1.1.17 /30
NASS-HQ-CR1 G0/2 10.1.1.18 /30
NASS-HQ-CR1 S0/0 10.1.1.1 /30
NASS-HQ-CR2 G0/0 10.1.1.14 /30
NASS-HQ-CR2 G0/1 10.1.1.21 /30
NASS-HQ-CR2 G0/2 10.1.1.22 /30
NASS-HQ-CR2 S0/0 10.1.1.5 /30
DHCP Devices 10.1.2.0 /24
49
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical layout
Nassau’s office layout can be seen in Fig. 4.3. The telecom closet can be seen at the upper left
corner and indicated with the red-circled T. This diagram also shows the locations of the Access
Points and also the rooms in the office.
Fig. 4.3
50
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical diagram
The data center will house the equipment for Nassau Headquarters to the Internet and the internal
WAN. The equipment will provide Nassau Headquarters with the capabilities to access the
Internet; connect to the internal WAN network and both banks. All T1 connections terminate
into a Cisco 3945E router, Internet traffic is routed through Cisco ASA 5585-X and internal
traffic is immediately terminated on the core routers. All traffic (that is permitted) is sent to the
Cisco 2960X Switches. The assumption can be made that all user workstations, VoIP phones and
access point will terminate in the Data Center. Access Points will terminate into the wireless
LAN controller to provide for easy configuration and deployment.
51
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power Consumption
Nassau is our smallest office, but it still needs redundancy in power for its equipment. We will
be using an Eaton FERRUPS rack mount UPS system to support the power consumption. This
UPS is able to handle full power for 12 minutes if the power does fail at Nassau headquarters.
This UPS provides customizable receptacles, input plugs and voltage matching transformers.
There will only be a need for one UPS at this location.
Nassau Power Consumption
Device Quantity Watts/Device Total Watts
Cisco ASA 5585-X 2 120.00 240.00
Cisco 3945E 4 520.00 2080.00
Cisco Catalyst 2960X 2 740.00 1480.00
Cisco 2504 Wireless Controller 1 120.00 120.00
Cisco Aironet 3602 3 12.95 38.85
Cisco Unified IP Phone 15 6.30 94.50
Total 27 1519.25 4053.35
Internet and Connections
For the Internet connection we are using T1 connections from JP Telco and KQ Telco. The
reason for two is redundancy. If one line were to go down, we still have the second ISP to keep
the Internet connection going. JP Telco has provided us with a /24 allocation for 100.1.1.0 and
KQ Telco has provided us a /24 allocation of 88.1.1.0.
The connection to Toronto HQ is also provided by JP Telco and KQ Telco, these are redundant
point to point connections. Since most of the Finances will be going here and being transferred to
the banks, having redundancy is very keen
52
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Wireless Internet
Nassau will have 3 Access Points in the office. This can be seen in Fig: 6.4.1. Having 3 AP’s in
the office allows for maximum coverage. There will be one Wireless Controller in the Telecom
closet and these AP’s will be connected to this WLC.
53
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
Nassau Equipment and Price List
Network Hardware
Hardware Description Size
(U)
Quantit
y
Cost Total Cost
Firewall Cisco ASA 5585-X
Security Plus Firewall
Edition SSP-20 bundle
2 2 $
47,279.99
$
94,559.98
Router Cisco 3945E 3 4 $
12,158.99
$
48,635.96
Switch Cisco Catalyst 2960X-
48FPD-L
2 2 $
4,935.99
$
9,871.98
Wireless
Controller
Cisco 2504 Wireless
Controller with 5 Access
Point License
1 1 $799.99 $799.99
SFP, Line Cards, Modules
Expansion
module
4-Port T1/E1 Multiflex
Trunk Voice/WAN
Interface Card VWIC3-
4MFT-T1/E1
N/A 8 $
2,972.99
$
23,783.92
Access Points, Phones
Access Points Cisco Aironet 3602I N/A 3 $
1,069.99
$
3,209.97
Desk Phones Cisco Unified IP Phone
7942G
N/A 15 $
343.99
$
5,159.85
Cabinets, PDU, ect.
Cabinet HP 11642 1200mm Pallet
Universal Rack
42 1 $
1,599.00
$
1,599.00
54
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
PDU ServerTech CW-24V PDU N/
A
2 $
1,160.95
$
2,321.90
Fiber Patch RackMount Fiber Patch
Panel JPM370-A-PR, 24
Port
1 2 $
393.53
$
787.06
Copper Patch SpaceGain CAT6 High
Density , Unshielded 48
Port
1 1 $ 437.95 $437.95
Mounting Kit Cisco 2504 Wireless
Controller Rack Mount
Bracket - rack mounting kit
N/
A
1 $67.99 $67.99
UPS Eaton FERRUPS RM 60Hz 10 1 $
15,292.00
$
15,292.00
Total Of Network Hardware $
191,167.56
Licenses and Warranties
Type Description
Quantit
y
Cost
Total
Cost/Month
Total Cost/
Year
Total Cost
For 3 Years
extended
service
agreement
Cisco ASA
5585
2
$13,753.9
9
$2,292.33 $27,507.98 $82,523.94
extended
service
agreement
Cisco
Router
3945E
4 $3,705.99 $1,235.33 $14,823.96 $44,471.88
extended
service
agreement
Cisco
Catalyst
2960X-
48FPD-L
2 $471.99 $78.67 $943.98 $2,831.94
extended
service
agreement
Cisco
Aironet
3602I
3 $94.99 $23.75 $284.97 $854.91
extended
service
agreement
Cisco 2504
Wireless
Controller
1 $479.99 $40.00 $479.99 $1,439.97
extended
service
Cisco
Unified IP
15 $9.99 $12.49 $149.85 $449.55
55
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
agreement Phone
7942G
Warranty
Eaton
FERRUPS
Rackmount
UPS
1 $935.00 $77.92 $935.00 $2,805.00
$4,617.56 $45,125.73 $135,377.19
56
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Chicago Office
Logical diagram
The Chicago Office is supporting 20 traders and trade strategist. This office has a dual point-to-
point 100Mbps connection from both JP and KQ Telco and terminates in either CHI-OFF-INT1
or CHI-OFF-INT2. This will give traders or trade strategist to do any research that might be
required of them quickly. Our internal WAN has two connections that either terminate in CHI-
OFF-CR1 or CHI-OFF-CR2. There is a dual direct point-to-point 1Gbps connection between the
Chicago Office and the Chicago Solsticix. Lastly, there is a dual 100Mbps MPLS connection
between the Chicago Office and the Toronto Headquarters. The routers that terminate all of the
connections to the Chicago Office are Cisco ASR 1004 and Internet traffic is firewalled by Cisco
ASA 5585. The Cisco Nexus 3548 switches are used to forward traffic to the users.
57
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Address Scheme
For each Internet link we have been provided with a 100.1.3.0 /24 allocations from JP Telco and
from KQ Telco we have been provided with an 88.1.3.0 /24 allocations. As we can see from
Fig.5.1, we have allocated the IP addresses that were given to us on the routers and firewall
interfaces. The firewalls will NAT/PAT the internal private addresses out to the Internet. We
decided to not use the full /24 allocation inside since we have an MPLS connection with the
Toronto office, this will allow us to use private addressing to communicate directly with that
office through that MPLS over Ethernet.
The IP Address will be in the range of 10.3.1.0 /24 for the networking equipment. This has been
broken down into /30 for each link. We have reserved the 10.3.16.0/20 for DHCP. This will be
dynamically assigned to devices that will connect to this private network, which does not require
static IPs. The 10.3.32.0/20 block has been reserved for all servers. The static IP for servers will
be pulled from this allocation.
Fig. 5.1
Device Interface IP Address Subnet Mask
CHI-OFF-INT1 G0/0 100.1.3.1 /30
CHI-OFF-INT2 G0/0 88.1.3.1 /30
CHI-OFF-FW1 G0/0 100.1.3.2 /30
CHI-OFF-FW1 G0/1 10.3.1.9 /30
CHI-OFF-FW2 G0/0 88.1.3.2 /30
CHI-OFF-FW2 G0/1 10.3.1.13 /30
CHI-OFF-CR1 S0/0 10.3.1.1 /30
CHI-OFF-CR1 S0/1 10.2.1.2 /30
CHI-OFF-CR1 G0/0 10.3.1.10 /30
CHI-OFF-CR1 G0/1 10.3.1.17 /30
CHI-OFF-CR1 G0/2 10.3.1.25 /30
CHI-OFF-CR2 S0/0 10.3.1.5 /30
CHI-OFF-CR2 S0/1 10.2.1.6 /30
CHI-OFF-CR2 G0/0 10.3.1.14 /30
58
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
CHI-OFF-CR2 G0/1 10.3.1.21 /30
CHI-OFF-CR2 G0/2 10.3.1.29 /30
CHI-OFF-SW1 G0/0 10.3.1.18 /30
CHI-OFF-SW1 G0/1 10.3.1.22 /30
CHI-OFF-SW2 G0/0 10.3.1.26 /30
CHI-OFF-SW2 G0/1 10.3.1.30 /30
Devices 10.3.16.0 /20
Servers 10.3.32.0 /20
59
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical layout
The circled red T is the location of the Telecom room for the Chicago Office. This is a shared
space between all tenants on the floor. I will make the assumption that all network drops and
connections will terminate in the Telecom room. Since we are using a shared space it is
important to remember physical security. Physical security of our hardware is very prevalent in
this situation, subsequently we can’t control who enters into our telecom room (shared space).
We need to lock all our equipment up and make sure all configurations that are done on the
equipment are encrypted correctly. Not knowing what the space looks like or how much is
allocated to us, it might be wise to consider fencing in our equipment for that added layer of
security.
60
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical diagram
At the Chicago Office there is a telecom room that is shared with the other tenants on the floor.
This room will house the hardware that we will be using to connect Chicago Office to the
Internet and the internal WAN. All Internet and internal WAN connections will terminate into
one of four Cisco ASR 1004 Routers. All Internet traffic will be routed through one of two Cisco
ASA 5585 Firewalls. All traffic will be sent to one of two Cisco Nexus 3548 Switches. An
assumption can be made that all user workstations, VoIP phones and Access Points are
terminated in the telecom closet. CAT 6 cabling will terminate in the Nexus 3548 using a GLC-T
Compatible 1000Base-T Copper SFP. The PDU is attached vertically to accommodate for the
spacing on the rack. The routers that are being used are designed for High Performance routing
which ensures QoS (Quality of Service), high availability and high bandwidth speeds. The
switches that are being used are low latency switches that will decrease the delay. This will help
be beneficial for the traders that are in Chicago to get their information fast.
61
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power Consumption
There will be one Eaton 9390IT will be present for the Chicago location. The UPS will be able to
cover any power is to go down for 30 minutes. This UPS is designed to support up to 36,000
watts for 30 minutes. It is its own unit that stands on its own.
Chicago Office Power Consumption
Device Quantity Watts/Device
Total
Watts
Cisco ASR 1004 Router 4 152.00 608.00
Cisco ASA 5585 2 1020.00 2040.00
Cisco Nexus 3548 2 152.00 304.00
Cisco 2504 Wireless Controller 1 120.00 120.00
Cisco Unified IP Phone 30 6.30 189.00
Cisco Aironet 3 12.95 38.85
HP Modular Smart Array 2040 2 500.00 1000.00
HP ProLiant DL560 Gen8
Server
1 2640.00 2640.00
HP BLc7000 Platinum
Enclosure
1 2640.00 2640.00
Total 48 7243.25 9605.75
Servers
The rest of the servers that will be at this location will be the HP ProLiant 620c. There will be 8
of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X
10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. Some the services will
be on VMs, however any of the important services that retrieve information will be running on
the hardware and not through a virtual machine.
The development environment will be hosted at the Toronto datacenter. The developers will be
able to connect to any of the servers through the MPLS connection and make changes or add
services to their VMs from there. This removes the need for development boxes on-site at the
Chicago office.
Historian Database
The Historian Database will be on a completely different server. Since we need to be able to
store 50TB of data, that will be update every day. We decided to go with a SAN solution for this.
62
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
This will allow us to store this data plus be able to back this up since we will be using Raid 5,
everything from the disks on the main SAN will be backed up on 3 copies of disks. If one of the
drives fail no data will be lost, this also allows the engineer to be able to switch out the drive
without having to worry about turning off the SAN since the drives are hot swappable. This will
be at both the New York office and Chicago Office.
The SAN solution we are going with is the HP MSA 2040 SAN Dual Controller SFF Storage
with the MSA 2040 LFF disk Enclosure expansion. This will allow up to 288 TB of space. This
SAN is connected via Fiber to a HP ProLiant DL560 Gen8 Server.
Voice/Video Conferencing
The voice and video conferencing tool that we will be implementing is Cisco’s Webex. This is a
VoIP solution that any of the employees may use on their personal laptops, or from any
computer with a video camera. This will be implemented at each office, making it easier to have
conversations without having to fly over to the offices.
This solution allows you to have a conference with anyone in the world, up to 25 people per
conversation. With this anyone can share their desktop, documents, applications and also be able
to give remote control access to anyone in the conversation. It is a very easy and powerful tool.
Monitoring
When it comes to moving parts, there should always be tools to monitor what is happening.
Knowing what is going to happen to the equipment could help prevent many extensive issues
and downtime. A monitoring has been added to this proposal for this reason. This will allow the
engineers at Chicago office to monitor the health of the networking equipment at the Chicago
office and Chicago colocation.
Network Monitoring
The network monitoring solution that we will be implementing is the Network Performance
Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature,
fan speed, and power supply. The Network Performance Monitor also tracks response time,
availability and uptime of routers and switches. This will allow the enterprise to detect and
diagnose network issues before any outages occur. The GUI is very intuitive.
Server Monitoring
The server monitoring solution we will be implementing is PRTG Network Monitoring. This
solution is also web based, installed on Windows Server 20008. This will allow the enterprise to
monitor all servers at every location and not just at Toronto. This will monitor bandwidth usage,
CPU usage, Ping times, disk space, and uptime/downtime. There will be an email that will be
sent out with a report of the top 100 instance of what was stated above. This will allow Chicago
engineers to monitor the health of the Servers at the Chicago Office and Chicago Colocation:
63
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
Chicago Office Equipment and Price
Network Hardware
Type Description
Size
(U)
Quantit
y
Cost Total Cost
Router
Cisco ASR 1004 Router
40Gbps / Route Processor 2 /
SPA Interface Processor 40G /
4 x 1-Port 10 Gigabit Ethernet
Shared Port Adapter
4 4 $70,927.99 $283,711.96
Firewall Cisco ASA 5585 2 2 $37,580.00 $75,160.00
Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98
Wireless
Controller
Cisco 2504 Wireless
Controller with 15 Access
Point License
1 1 $2,404.99 $2,404.99
SFP, Line Cards, Modules
Router
Module
Cisco 8 Port Gigabit Ethernet
Shared Port Adapter Mfr P/N
SPA-8X1GE-V2
N/A 8 $4,505.43 $36,043.44
Switch SFP
Proline Cisco GLC-T
Compatible 1000Base-T
Copper SFP
N/A 48 $97.99 $4,703.52
Access Points, Phones
Desk Phones
Cisco Unified IP Phone
7942G
N/A 30 $343.99 $10,319.70
Access Points Cisco Aironet 3602I N/A 3 $1,069.99 $5,349.95
Cabinets, PDU, ect.
UPS Eaton 9390IT N/A 1 $23,392.00 $23,392.00
64
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Cabinet
N-Series TeraFrame Gen 3
Network Cabinet
45 1 $4,275.95 $4,275.95
PDU ServerTech CW-24V PDU N/A 3 $1,160.95 $3,482.85
Copper Patch
SpaceGain CAT6 High
Density , Unshielded 48 Port
1 1 $437.95 $437.95
Fiber Patch
RackMount Fiber Patch Panel
JPM370-A-PR, 24 Port
1 2 $393.53 $787.06
Rack
Mounting
Cisco 2504 Wireless
Controller Rack Mount
Bracket - rack mounting kit
N/A 1 $67.99 $67.99
Servers and OS
Storage
HP Modular Smart Array
2040 SAN Dual Controller
2 2 $80,000.00 $160,000.00
50TB historian
HP ProLiant DL560 Gen8
Server
2 1 $10,000.00 $10,000.00
Server
Enclosure
HP BLc7000 Platinum
Enclosure w/ 1 Phase 2 Power
Supplies 4 Fans ROHS
10 1 $7,381.00 $7,381.00
Blades BL620c Blade N/A 8 $15,096.00 $120,768.00
Total Hardware $808,690.34
License and Warranties
Type Description Quantity Cost
Total
Cost/Mont
h
Total
Cost/Year
Total Cost
For 3 Years
extended
service
agreement
Cisco ASA
5585
2 $13,753.99 $2,292.33 $27,507.98 $82,523.94
extended
service
agreement
Cisco Nexus
3548
2 $2,648.99 $441.50 $5,297.98 $ 5,893.94
extended
service
Cisco ASR
1004
2 $8,038.99 $1,339.83 $16,077.98 $48,233.94
65
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
agreement
extended
service
agreement
Cisco Aironet
3602I
3 $94.99 $23.75 $284.97 $854.91
extended
service
agreement
Cisco 2504
Wireless
Controller
1 $497.99 $41.50 $497.99 $1,493.97
extended
service
agreement
Cisco Unified
IP Phone
7942G
30 $9.99 $ 24.98 $299.70 $899.10
License Linux Red Hat 8 $ 3,528.00 $2,352.00 $28,224.00 $84,672.00
Support
vmware
vsphere
enterprise
24X7
8 $ 4,773.16 $ 3,182.11 $38,185.28
$114,555.8
4
Total Cost $ 9,697.99
$116,375.8
8
$349,127.6
4
66
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
New York Office
Logical diagram
The New York Office is supporting 20 traders and trade strategist. The office has a dual point-to-
point 100Mbps connection from both JP and KQ Telco and terminates in either NY-OFF-INT1
or NY-OFF-INT2. This will give traders or trade strategist to do any research that might be
required of them quickly. Our internal WAN has two connections that either terminates in NY-
OFF-CR1 or NY-OFF-CR2. There is a dual direct point-to-point 1Gbps connection between the
New York Office and the New York Solsticix. Lastly, there is a dual 100Mbps MPLS connection
between the New York Office and the Toronto Headquarters. The routers that terminate all of the
connections to the New York Office are Cisco ASR 1004 and Internet traffic is firewalled by
Cisco ASA 5585. The Cisco Nexus 3548 switches are used to forward traffic to the users.
67
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Address Scheme
For each Internet link we have been provided with a 100.1.4.0 /24 allocation from JP Telco and
from KQ Telco we have been provided with an 88.1.4.0 /24 allocation. As we can see from
figure IP.8.2, we have allocated the IP addresses that were given to us on the routers and firewall
interfaces. The firewalls will NAT/PAT the internal private addresses out to the Internet. We
decided to not use the full /24 allocation inside since we have an MPLS connection with the
Toronto office, this will allow us to use private addressing to communicate directly with that
office through that MPLS over Ethernet.
The IP Address will be in the range of 10.4.1.0 /24 for the networking equipment. This has been
broken down into /30 for each link. We have reserved the 10.4.20.0/20 for DHCP. This will be
dynamically assigned to devices that will connect to this private network, which does not require
static IPs. The 10.4.32.0/20 block has been reserved for all servers. The static IP for servers will
be pulled from this allocation.
Device Interface IP Address Subnet Mask
NY-OFF-INT1 G0/0 100.1.4.1 /30
NY-OFF-INT2 G0/0 88.1.4.1 /30
NY-OFF-FW1 G0/0 100.1.4.2 /30
NY-OFF-FW1 G0/1 10.4.1.9 /30
NY-OFF-FW2 G0/0 88.1.4.2 /30
NY-OFF-FW2 G0/1 10.4.1.13 /30
NY-OFF-CR1 S0/0 10.4.1.1 /30
NY-OFF-CR1 S0/1 10.2.1.26 /30
NY-OFF-CR1 G0/0 10.4.1.10 /30
NY-OFF-CR1 G0/1 10.4.1.17 /30
NY-OFF-CR1 G0/2 10.4.1.25 /30
NY-OFF-CR2 S0/0 10.4.1.5 /30
NY-OFF-CR2 S0/1 10.4.1.30 /30
NY-OFF-CR2 G0/0 10.4.1.14 /30
NY-OFF-CR2 G0/1 10.4.1.21 /30
68
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
NY-OFF-CR2 G0/2 10.4.1.29 /30
NY-OFF-SW1 G0/0 10.4.1.18 /30
NY-OFF-SW1 G0/1 10.4.1.22 /30
NY-OFF-SW2 G0/0 10.4.1.26 /30
NY-OFF-SW2 G0/1 10.4.1.30 /30
Devices 10.4.16.0 /20
Servers 10.4.20.0 /20
69
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical layout
The circled red T is the location of the Telecom room for the New York Office. This is a shared
space between all tenants on the floor. I will make the assumption that all network drops and
connections will terminate in the Telecom room. Since we are using a shared it is important to
remember physical security. Physical security of our hardware is very prevalent in this situation,
subsequently we can’t control who enters into our telecom room (shared space). We need to lock
all our equipment up and make sure all configurations that are done on the equipment are
encrypted correctly. Not knowing what the space looks like or how much is allocated to us, it
might be wise to consider fencing in our equipment in our equipment for that added layer of
security.
70
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical diagram
At the New York Office there is a telecom room that is shared with the other tenants on the floor.
This room will house the hardware that we will be using to connect Chicago Office to the
Internet and the internal WAN. All Internet and internal WAN connections will terminate into
one of four Cisco ASR 1004 Routers. All internet traffic will be routed through one of two Cisco
ASA 5585 Firewalls. All traffic will be sent to one of two Cisco Nexus 3548 Switches. An
assumption can be made that all user workstations, VoIP phones and Access Points are
terminated in the telecom closet. CAT 6 cabling will terminate in the Nexus 3548 using a GLC-T
Compatible 1000Base-T Copper SFP. The PDU is attached vertically to accommodate for the
spacing on the rack. The routers that are being used are designed for High Performance routing
which ensures QoS (Quality of Service), high availability and high bandwidth speeds. The
switches that are being used are low latency switches that will decrease the delay.
71
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power Consumption
There will be one Eaton 9390IT will be present for the New York location. The UPS will be able
to cover any power is to go down for 30 minutes. This UPS is designed to support up to 36,000
watts for 30 minutes. It is its own unit that stands on its own.
New York Office Power Consumption
Device Quantity Watts/Device
Total
Watts
Cisco ASR 1004 Router 4 152.00 608.00
Cisco ASA 5585 2 1020.00 2040.00
Cisco Nexus 3548 2 152.00 304.00
Cisco 2504 Wireless Controller 1 120.00 120.00
Cisco Unified IP Phone 30 6.30 189.00
Cisco Aironet 3 12.95 38.85
HP Modular Smart Array 2040 2 500.00 1000.00
HP ProLiant DL560 Gen8 Server 1 2640.00 2640.00
HP BLc7000 Platinum Enclosure 1 2640.00 2640.00
Total 48 7243.25 9605.75
Servers
The rest of the servers that will be at this location will be the HP ProLiant 620c. There will be 8
of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X
10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. Some the services will
be on VMs, however any of the important services that retrieve information will be running on
the hardware and not through a virtual machine.
The development environment will be hosted at the Toronto datacenter. The developers will be
able to connect to any of the servers through the MPLS connection and make changes or add
services to their VMs from there. This removes the need for development boxes on-site at the
New York office.
Historian Database
The Historian Database will be on a completely different server. Since we need to be able to
store 50TB of data, which will be updated every day. We decided to go with a SAN solution for
72
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
this. This will allow us to store this data plus be able to back this up since we will be using Raid
5, everything from the disks on the main SAN will be backed up on 3 copies of disks. If one of
the drives fail no data will be lost, this also allows the engineer to be able to switch out the drive
without having to worry about turning off the SAN since the drives are hot swappable. This will
be at both the New York office and Chicago Office.
The SAN solution we are going with is the HP MSA 2040 SAN Dual Controller SFF Storage
with the MSA 2040 LFF disk Enclosure expansion. This will allow up to 288 TB of space. This
SAN is connected via Fiber to a HP ProLiant DL560 Gen8 Server.
Monitoring
When it comes to moving parts, there should always be tools to monitor what is happening.
Knowing what is going to happen to the equipment could help prevent many extensive issues
and downtime. A monitoring has been added to this proposal for this reason. This will allow the
engineers at New York office to monitor the health of the networking equipment at the New
York office and New York colocation.
Network Monitoring
The network monitoring solution that we will be implementing is the Network Performance
Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature,
fan speed, and power supply. The Network Performance Monitor also tracks response time,
availability and uptime of routers and switches. This will allow the enterprise to detect and
diagnose network issues before any outages occur. The GUI is very intuitive.
Server Monitoring
The server monitoring solution we will be implementing is PRTG Network Monitoring. This
solution is also web based, installed on Windows Server 20008. This will monitor bandwidth
usage, CPU usage, Ping times, disk space, and uptime/downtime. There will be an email that will
be sent out with a report of the top 100 instance of what was stated above. This will allow New
York engineers to monitor the health of the Servers at the New York Office and New York
Colocation:
73
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
New York Office Equipment and Price
Network Hardware
Type Description
Size
(U)
Quantit
y
Cost Total Cost
Router
Cisco ASR 1004 Router
40Gbps / Route Processor 2 /
SPA Interface Processor 40G /
4 x 1-Port 10 Gigabit Ethernet
Shared Port Adapter
4 4 $70,927.99 $283,711.96
Firewall Cisco ASA 5585 2 2 $37,580.00 $75,160.00
Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98
Wireless
Controller
Cisco 2504 Wireless
Controller with 15 Access
Point License
1 1 $2,404.99 $2,404.99
SFP, Line Cards, Modules
Router
Module
Cisco 8 Port Gigabit Ethernet
Shared Port Adapter Mfr P/N
SPA-8X1GE-V2
N/A 8 $4,505.43 $36,043.44
Switch SFP
Proline Cisco GLC-T
Compatible 1000Base-T
Copper SFP
N/A 48 $97.99 $4,703.52
Access Points, Phones
Desk Phones
Cisco Unified IP Phone
7942G
N/A 30 $343.99 $10,319.70
Access Points Cisco Aironet 3602I N/A 3 $1,069.99 $5,349.95
Cabinets, PDU, ect.
UPS Eaton 9390IT N/A 1 $23,392.00 $23,392.00
74
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Cabinet
N-Series TeraFrame Gen 3
Network Cabinet
45 1 $4,275.95 $4,275.95
PDU ServerTech CW-24V PDU N/A 3 $1,160.95 $3,482.85
Copper Patch
SpaceGain CAT6 High
Density , Unshielded 48 Port
1 1 $437.95 $437.95
Fiber Patch
RackMount Fiber Patch Panel
JPM370-A-PR, 24 Port
1 2 $393.53 $787.06
Rack
Mounting
Cisco 2504 Wireless
Controller Rack Mount
Bracket - rack mounting kit
N/A 1 $67.99 $67.99
Servers and OS
Storage
HP Modular Smart Array
2040 SAN Dual Controller
2 2 $80,000.00 $160,000.00
50TB historian
HP ProLiant DL560 Gen8
Server
2 1 $10,000.00 $10,000.00
Server
Enclosure
HP BLc7000 Platinum
Enclosure w/ 1 Phase 2 Power
Supplies 4 Fans ROHS
10 1 $7,381.00 $7,381.00
Blades BL620c Blade N/A 8 $15,096.00 $120,768.00
Total Hardware $808,690.34
License and Warranties
Type Description Quantity Cost
Total
Cost/Mont
h
Total
Cost/Year
Total Cost
For 3 Years
extended
service
agreement
Cisco ASA
5585
2 $13,753.99 $2,292.33 $27,507.98 $82,523.94
extended
service
agreement
Cisco Nexus
3548
2 $2,648.99 $441.50 $5,297.98 $ 5,893.94
extended
service
Cisco ASR
1004
2 $8,038.99 $1,339.83 $16,077.98 $48,233.94
75
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
agreement
extended
service
agreement
Cisco Aironet
3602I
3 $94.99 $23.75 $284.97 $854.91
extended
service
agreement
Cisco 2504
Wireless
Controller
1 $497.99 $41.50 $497.99 $1,493.97
extended
service
agreement
Cisco Unified
IP Phone
7942G
30 $9.99 $ 24.98 $299.70 $899.10
License Linux Red Hat 8 $ 3,528.00 $2,352.00 $28,224.00 $84,672.00
Support
vmware
vsphere
enterprise
24X7
8 $ 4,773.16 $ 3,182.11 $38,185.28
$114,555.8
4
Total Cost $ 9,697.99
$116,375.8
8
$349,127.6
4
76
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Chicago Solstictix
Logical diagram
For the Chicago Solsticix location low latency is vital. The Cisco ASR 1004 routers and Cisco
Nexus 3548 will provide us with the lowest latency possible. All connections will be terminated
in either CHI-SOL-CR1 or CHI-SOL-CR2. We will be using JP and KQ Telco for our
connections from Chicago Office, MYSE, MASDAQ, and Toronto Headquarters. We will also
be using Lyric A and Lyric B for our Market Data connection. Chicago Office has a dual direct
point-to-point 1Gbps connection to Chicago Solsticix, each connection will be provided by either
JP or KQ Telco and will be terminated in opposite routers for redundancy. MYSE and
MASDAQ will connect to Chicago Solsticix via a dual 1Gbps connection provided by both JP
and KQ Telco. Each pair of connections will terminate into opposite routers for redundancy.
Lastly, there is one 100Mbps MPLS connection to Toronto for precautionary measure if
something should happen to our 1Gbps connections from Chicago office.
77
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Address Scheme
The IP address allocation of 10.5.1.0 /24 was assigned to all networking devices at the Chicago
Colocation. The servers will be assigned a static IP depending on which service/application will
be running on it. Those IPs will be allocated from the MYSE, MASDAQ or from the two Lyric
feeds.
Device Interface IP Address Subnet Mask
CHI-SOL-CR1 S0/0 10.3.1.2 /30
CHI-SOL-CR1 G0/2 10.5.1.0 /30
CHI-SOL-CR1 G0/3 10.5.1.26 /30
CHI-SOL-CR2 S0/0 10.3.1.6 /30
CHI-SOL-CR2 S0/1 10.2.1.14 /30
CHI-SOL-CR2 G0/1 10.5.1.21 /30
CHI-SOL-CR2 G0/2 10.5.1.29 /30
CHI-SOL-SW1 G0/0 10.5.1.18 /30
CHI-SOL-SW1 G0/1 10.5.1.22 /30
CHI-SOL-SW2 G0/0 10.5.1.26 /30
CHI-SOL-SW2 G0/1 10.5.1.30 /30
Servers to MYSE 172.17.1.0 /24
Servers to MASDAQ 68.63.1.0 /24
Lyric A Feed 10.251.1.0 /24
Lyric B Feed 10.251.129.0 /24
78
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical Diagram
The Chicago Solsticix is unique in the sense that we will be renting a rack to house all our
network equipment. We will be using high performance routers to support all the connections
that will be terminating at our rack. There will be two Cisco ASR 1004 that will route the traffic
to our switches and two Cisco Nexus 3548 switches that will forward the traffic to our servers.
There is no firewall at this location due to the fact that firewalls will increase delay and can be
high in latency. The PDUs are mounted vertically on the rack. There are two UPS back up power
supply units to provide redundancy in case if there is any power failure.
79
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power specifications
There will be two APC Smart-UPS 5000VA 230V UPS. Both of these UPS will be installed on
the rack for the Chicago Solsticix location. This UPS is able to support 4000 watts. The reason
that we have two UPS is that this way there is redundancy in power supply. If power fails in one
UPS this way there is a backup. The devices in the rack will need to be divided among both UPS.
Chicago Solsticix Power Consumption
Device Quantity Watts/Device Total Watts
Cisco Nexus 3548 2 152.00 304.00
Cisco ASR 1004 2 1020.00 2040.00
HP BLc7000 1 2460.00 2460.00
Total 5 3632 4804
Servers
The servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these
blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core
Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. All of the services that are
needed for trading will be running on the hardware directly off of Red Hat Linux for Enterprise.
There will be no development environment at this location since it is only needed for trading. All
of the servers will be in production, also there will be redundant servers at this location in case
one of them happens to fail, and the backup server will take on the Trading responsibilities.
80
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
Cross-Connect and Rack Rental pricing is not included in this table. Please see Financials
section.
Chicago Solsticix Equipment List and Pricing
Network Hardware
Type Description Size
Quantit
y
Cost Total Cost
Router
Cisco ASR 1004 Router
40Gbps / Route Processor 2
/ SPA Interface Processor
40G / 4 x 1-Port 10 Gigabit
Ethernet Shared Port
Adapter
2 2 $70,927.99
$141,855.9
8
Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98
SFP, Line Cards, Modules
Module
Cisco 8 Port Gigabit
Ethernet Shared Port
Adapter Mfr P/N SPA-
8X1GE-V2
N/A 2 $4,505.43 $9,010.86
Module Cisco 10G SR SFP Module N/A 20 $435.99 $8,719.80
Cabinets, PDU, ect.
Copper Patch
SpaceGain CAT6 High Density
, Unshielded 48 Port
1 1 $437.95 $437.95
Fiber Patch
RackMount Fiber Patch Panel
JPM370-A-PR, 24 Port
1 2 $393.53 $787.06
PDU ServerTech CW-24V PDU
N/
A
2 $1,160.95 $2,321.90
UPS
APC Smart-UPS 5000VA
230V UPS
5 2 $3,300.00 $6,600.00
Servers and Software
81
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Server Enclosure
HP BLc7000 Platinum
Enclosure w/ 1 Phase 2 Power
Supplies 4 Fans ROHS
10 1
$15,981.0
0
$15,981.00
Blades BL620c Blade
N/
A
8 $7,381.00 $59,048.00
$
276,942.53
Licenses and Warranties
Type Description
Quantit
y
Cost
Total
Cost/Month
Total
Cost/ Year
Total Cost
For 3 Years
extended
service
agreemen
t
Cisco Nexus
3548
2 $2,648.99 $441.50 $5,297.98 $15,893.94
extended
service
agreemen
t
Cisco ASR 1004 2 $8,038.99 $1,339.83
$16,077.9
8
$48,233.94
License Linux Red Hat 8 $3,528.00 $2,352.00
$28,224.0
0
$84,672.00
Support
vmware vsphere
enterprise 24X7
8 $4,773.16 $3,182.11
$38,185.2
8
$114,555.8
4
$7,315.44
$87,785.2
4
$263,355.7
2
82
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
New York Solstictix
Logical diagram
For the New York Solsticix location low latency is vital. To provide the lowest latency we will
be using two Cisco ASR 1004 routers and Cisco Nexus 3548. These two pieces of equipment
will provide us with the lowest possible latency. All connections will be terminated in either NY-
SOL-CR1 or NY-SOL-CR2. We will be using JP and KQ Telco for our connections from New
York Office, MYSE, MASDAQ, and Toronto Headquarters. We will also be using Lyric A and
Lyric B for our Market Data connection. New York Office has a dual direct point-to-point 1Gbps
connection to New York Solsticix, each connection will be provided by either JP or KQ Telco
and will be terminated in opposite routers for redundancy. MYSE and MASDAQ will connect to
New York Solsticix via a dual 1Gbps connection provided by both JP and KQ Telco. Each pair
of connections will terminate into opposite routers for redundancy. Lastly, there is one 100Mbps
MPLS connection to Toronto for precautionary measure if something should happen to our
1Gbps connections from New York office.
83
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
IP Address Scheme
The IP address allocation of 10.6.1.0 /24 was assigned to all networking devices at the New York
Colocation. The servers will be assigned a static IP depending on which service/application will
be running on it. Those IPs will be allocated from the MYSE, MASDAQ or from the two Lyric
feeds.
Device Interface IP Address Subnet Mask
NY-SOL-CR1 S0/0 10.4.1.2 /30
NY-SOL-CR1 G0/2 10.6.1.0 /30
NY-SOL-CR1 G0/3 10.6.1.26 /30
NY-SOL-CR2 S0/0 10.4.1.6 /30
NY-SOL-CR2 S0/1 10.2.1.30 /30
NY-SOL-CR2 G0/1 10.6.1.21 /30
NY-SOL-CR2 G0/2 10.6.1.29 /30
NY-SOL-SW1 G0/0 10.6.1.18 /30
NY-SOL-SW1 G0/1 10.6.1.22 /30
NY-SOL-SW2 G0/0 10.6.1.26 /30
NY-SOL-SW2 G0/1 10.6.1.30 /30
Servers to MYSE 172.17.2.0 /24
Servers to
MASDAQ 68.63.2.0 /24
Lyric A Feed 10.250.2.0 /24
Lyric B Feed 10.250.129.0 /24
84
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Physical Diagram
The New York Solsticix is unique in the sense that we will be renting a rack to house all our
network equipment. We will be using high performance routers to support all the connections
that will be terminating at our rack. There will be two Cisco ASR 1004 that will route the traffic.
The Cisco Nexus 3548 switches will then push the traffic to our servers. There is no firewall at
this location due to the fact that firewalls will increase delay and can be high in latency. The
PDUs are mounted vertically on the rack. There are two UPS back up power supply units to
provide redundancy in case if there is any power failure.
85
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Power specifications
There will be two APC Smart-UPS 5000VA 230V UPS. Both of these UPS will be installed on
the rack for the New York Solsticix location. This UPS is able to support 4000 watts. The reason
that we have two UPS is that this way there is redundancy in power supply. If power fails in one
UPS this way there is a backup. The devices in the rack will need to be divided among both UPS.
Chicago Solsticix Power Consumption
Device Quantity Watts/Device Total Watts
Cisco Nexus 3548 2 152.00 304.00
Cisco ASR 1004 2 1020.00 2040.00
HP BLc7000 1 2460.00 2460.00
Total 5 3632 4804
Servers
The servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these
blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core
Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. All of the services that are
needed for trading will be running on the hardware directly off of Red Hat Linux for Enterprise.
There will be no development environment at this location since it is only needed for trading. All
of the servers will be in production, also there will be redundant servers at this location in case
one of them happens to fail, and the backup server will take on the Trading responsibilities.
86
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment list and pricing
Cross-Connect and Rack Rental pricing is not included in this table. Please see Financials
section.
New York Solsticix Equipment List and Pricing
Network Hardware
Type Description Size
Quantit
y
Cost Total Cost
Router
Cisco ASR 1004 Router
40Gbps / Route Processor 2
/ SPA Interface Processor
40G / 4 x 1-Port 10 Gigabit
Ethernet Shared Port
Adapter
2 2 $70,927.99
$141,855.9
8
Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98
SFP, Line Cards, Modules
Module
Cisco 8 Port Gigabit
Ethernet Shared Port
Adapter Mfr P/N SPA-
8X1GE-V2
N/A 2 $4,505.43 $9,010.86
Module Cisco 10G SR SFP Module N/A 20 $435.99 $8,719.80
Cabinets, PDU, ect.
Copper Patch
SpaceGain CAT6 High Density
, Unshielded 48 Port
1 1 $437.95 $437.95
Fiber Patch
RackMount Fiber Patch Panel
JPM370-A-PR, 24 Port
1 2 $393.53 $787.06
PDU ServerTech CW-24V PDU
N/
A
2 $1,160.95 $2,321.90
UPS
APC Smart-UPS 5000VA
230V UPS
5 2 $3,300.00 $6,600.00
Servers and Software
87
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Server Enclosure
HP BLc7000 Platinum
Enclosure w/ 1 Phase 2 Power
Supplies 4 Fans ROHS
10 1
$15,981.0
0
$15,981.00
Blades BL620c Blade
N/
A
8 $7,381.00 $59,048.00
$
276,942.53
Licenses and Warranties
Type Description
Quantit
y
Cost
Total
Cost/Month
Total
Cost/ Year
Total Cost
For 3 Years
extended
service
agreemen
t
Cisco Nexus
3548
2 $2,648.99 $441.50 $5,297.98 $15,893.94
extended
service
agreemen
t
Cisco ASR 1004 2 $8,038.99 $1,339.83
$16,077.9
8
$48,233.94
License Linux Red Hat 8 $3,528.00 $2,352.00
$28,224.0
0
$84,672.00
Support
vmware vsphere
enterprise 24X7
8 $4,773.16 $3,182.11
$38,185.2
8
$114,555.8
4
$7,315.44
$87,785.2
4
$263,355.7
2
88
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Security Policy
We have selected two different methods of making sure that our network is secure. These
methods are going to work in conjunction with our DMZ. All inbound traffic from the Internet is
sent through one of four Cisco ASA 5585 Firewalls. For Intrusion Detection Systems, Intrusion
Prevention systems and email filtering we will be using Websense Security Gateway. All of
these put together will work to stop any potential attacker that is trying to get into our network.
This product also provides reporting capabilities that help to see what is the most common traffic
being used and who is using what. Features for both shown below.
The Cisco ASA 5585-X Features:
●40 Gbps maximum firewall throughput
●350,000 connections per second
●10 million concurrent connections
●250 security contexts
●1,024 VLANs
Websense Security Gateway features:
●uses real-time, inline security analysis
●protects entire network, including headquarters, branch offices and remote and mobile users.
●conserves your network bandwidth by removing spam and threats from inbound email
● provides point-of-click threat analysis by isolating suspicious links embedded in emails and
analyzing their destination when users click on them.
● provides 99.999% service availability and 99% or higher spam detection
These two products working together will provide us with the security we need. These products
are the top leaders in their field and provide a good solution to security.
89
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Financials
These financials show the Total Cost of Ownership for Three Years. These financials do not
account for all the costs that are associated with this design. The following are the cost
exclusions:
● User Workstations, OS and Office Products
● User laptops, tablets and smartphones
● Printers
● Software Costs OS and office suite. You must however specify
● Wiring costs.
● Cost of electrical circuits
● Cost of external generator for Toronto Data Center.
● Cost of HVAC at the datacenters
● Fire suppression.
● Office lease and construction costs.
● Support staff salaries and benefits.
● Trading application software development.
● Accounting software licensing
The tables below show the Total cost of Ownership for Hardware, Implementation Plan and
Licenses and Warranties per Location, Total Cost of Circuit and services per type of services
(T1, 1Gbps) and Total Cost of Ownership for three years.
Total Cost of Ownership Hardware
Location Cost
Chicago Solsticix $276,942.53
New York Solsticix $276,942.53
Chicago Office $808,690.34
New York Office $808,690.34
Nassau
Headquarters
$191,167.56
Toronto
Headquarters
$2,796,718.66
Total Cost $5,159,151.96
Total Cost of Circuit Connects and Services
Service Cost per
Month
Cost per
Year
Cost for 3
Years
T1 Connections $ 43,400.00 $520,800.00 $1,562,400.00
90
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
1 Gbps P2P $9,000.00 $108,000.00 $324,000.00
100 Mbps Internet $9,600.00 $115,200.00 $345,600.00
100 Mbps MPLS $8,600.00 $103,200.00 $309,600.00
MYSE $12,000.00 $ 144,000.00 $432,000.00
MASDAQ $ 12,000.00 $144,000.00 $432,000.00
Lyric A and B $28,000.00 $336,000.00 $1,008,000.00
Solsticix Rack Leasing $ 8,000.00 $96,000.00 $288,000.00
Solsticix Cross-Connects
(8)
$2,400.00 $28,800.00 $86,400.00
Total $133,000.00
$1,596,000.00
$4,788,000.00
Total Cost of Licenses and Warranties
Location Cost per
Month
Cost per
Year
Cost for 3
Years
Chicago Solsticix $7,315.44 $87,785.24 $263,355.72
New York Solsticix $7,315.44 $87,785.24 $263,355.72
Chicago Office $9,697.99
$116,375.88
$ 349,127.64
New York Office $ 9,697.99 $
116,375.88
$349,127.64
Nassau
Headquarters
$3,760.48 $45,125.73 $ 135,377.19
Toronto
Headquarters
$36,405.17 $
436,861.99
$
1,310,585.97
Total $74,192.50
$890,309.96
$2,670,929.88
Implementation of Plan
Location Cost/Hour/Person Hours Total
Chicago Solsticix $200.00 35 $14,000.00
New York Solsticix $200.00 35 $14,000.00
Chicago Office $200.00 45 $18,000.00
New York Office $200.00 45 $18,000.00
Nassau
Headquarters
$200.00 30 $12,000.00
Toronto
Headquarters
$200.00 60 $26,000.00
255 $102,000.00
91
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Total Cost For 3 Years Cost
Hardware $ 5,159,151.96
Circuit Connects and
Services
$4,788,000.00
Services and Warranties $ 2,670,929.88
Implementation Plan $ 102,000.00
Total $ 12,618,081.84
92
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Equipment Maintenance/Replacement Strategy
Throughout this network that has been designed, the equipment that has been chosen is made
readily available. Since DaFun is a company that’s needs a high available network all equipment
needs to be replaced within hours rather than days. Cisco provides an extended warranty called
Cisco SMARTNet Premium. The features of this warranty are as follows:
 software updates and upgrades
 advance hardware replacement
 technical support
 support 24 hours a day/7days a week
 Response time in 4 hours
HP provides an extended warranty that is included in the price of the server. HP offers the 3/3/3
warranty, which features three years of parts, 3 years of labor and three years of on-site support.
HP also has additional features such as 24 hours a day/ 7 days a week support and four hour
replacement of part. Lastly Eaton UPS has the following features for their warranties:
 Parts and Labor for Electronics
 7x24 On-Site Corrective Maintenance
 2-Hour Response
 7x24 UPS Preventive Maintenance Visit (2 per year)
 Battery Preventive Maintenance Visit (2 per year)
 eNotify Remote Monitoring Service
93
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Implementation Plan
To implement this plan, we would do the following.
 Secure all building space and necessary connections that will be needed.
 We must deploy multiple specialized teams at each location. Engineers specialized in
Servers, SANS, and Routing & Switching would be part of these specialized teams. It
will require about 40 to 70 hours to implement and install the equipment, however some
locations might require more time.
 The equipment and software will be installed to proposal and industry standards.
 Everything will be documented, this includes all equipment, and cables will be labeled
properly. This would help future troubleshooting.
 Configure and Test equipment.
94
DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014
Work Cited
"Cisco 3900 Series Integrated Services Routers." Cisco. N.p., n.d. Web. 15 Mar. 2014.
"Cisco ASA 5585-X Adaptive Security Appliance." Cisco. N.p., n.d. Web. 15 Mar. 2014.
"Cisco Nexus 5596T Switch." Cisco. N.p., n.d. Web. 15 Mar. 2014.
"Eaton FERRUPS Rackmount UPS." FERRUPS Rackmount UPS Backup Power by Eaton. 500
VA-18 KVA. N.p., n.d. Web. 15 Mar. 2014.
"Hot Aisle/Cold Aisle Layout." : ENERGY STAR. N.p., n.d. Web. 15 Mar. 2014.
"Web Security, Email Security, Data Security, Mobile Security - Websense.com." Web Security,
Email Security, Data Security, Mobile Security - Websense.com. N.p., n.d. Web. 15 Mar. 2014.
"EMC VNX Series Software FAST Suite." (FSTS-VNX7600). Web. 16 Mar. 2014.
<http://www.costcentral.com/proddetail/EMC_VNX_Series_Software_FAST_Suite/FSTSVNX7
600/12103557/>.
"HP DL560 Gen8 E5-4610V2 32GB US Svr. 732341-001." HP's Small & Medium Business
Online Store. Web. 16 Mar. 2014.
<http://h71016.www7.hp.com/dstore/MiddleFrame.asp?page=config&ProductLineId=431&Fam
ilyId=3604&BaseId=43759&oi=E9CED&BEID=19701&SBLID=>.
"HP Modular Smart Array 2040 SAN Dual Controller SFF Storage - Hard Drive Ar."
CDW.com. Web. 16 Mar. 2014. <http://www.cdw.com/shop/products/HP-MSA-2040-SAN-DC-
SFF-
SToRAGE/3059407.aspx?RecommendedForEDC=00000001&RecoType=RS&cm_sp=Search-
_-Session&ProgramIdentifier=3>.
"HP ProLiant BL620c G7 Server Blade." HP. Web. 16 Mar. 2014.
<http://www8.hp.com/us/en/products/proliant-servers/product-
detail.html?oid=4268686#!tab=models>.
"Network Performance Monitor." Network Monitoring Software. Web. 16 Mar. 2014.
<http://www.solarwinds.com/network-performance-monitor.aspx>.
"VMware VSphere Enterprise." VMware Official Online Store Online Store -. Web. 16 Mar.
2014.
<http://store.vmware.com/store/vmware/en_US/pd/productID.288070900&src=WWW_eBIZ_pr
oductpage_vSphere_Enterprise_Buy_US>.

More Related Content

PDF
Network Design for a Small & Medium Enterprise
PPTX
Computer Network Complete Introduction
PPTX
Grid computing
DOC
REPORT ON :- Airborne internet
PDF
Edge Computing : future of IoT ?
PPTX
Mobile computing
PDF
Cloud computing Report
PPTX
Mobile Cloud Comuting
Network Design for a Small & Medium Enterprise
Computer Network Complete Introduction
Grid computing
REPORT ON :- Airborne internet
Edge Computing : future of IoT ?
Mobile computing
Cloud computing Report
Mobile Cloud Comuting

What's hot (20)

PPTX
Computer network
PPTX
Servers.pptx
PPTX
Grid computing
PDF
Classification of computer networks
PPTX
Edge Computing and Cloud Computing
PPT
Nano computing
PPTX
Cloud computing and artificial intelligence
PPTX
Ar vr group ppt
PPTX
Design of network
PPT
Cloud computing PPT
DOCX
Computer network answer
PPT
INTRODUCTION TO CLOUD COMPUTING
PDF
Proposal For M Sc Project Networks And Distributed Systems
PPTX
Itn instructor ppt_chapter1 - exploring the network
PPTX
Seminar ppt fog comp
PPT
The airborne internet final my
PPT
Grid computing [2005]
PPTX
Cloud Computing & Cloud Architecture
PDF
GRID COMPUTING PRESENTATION
PPTX
Grid computing
Computer network
Servers.pptx
Grid computing
Classification of computer networks
Edge Computing and Cloud Computing
Nano computing
Cloud computing and artificial intelligence
Ar vr group ppt
Design of network
Cloud computing PPT
Computer network answer
INTRODUCTION TO CLOUD COMPUTING
Proposal For M Sc Project Networks And Distributed Systems
Itn instructor ppt_chapter1 - exploring the network
Seminar ppt fog comp
The airborne internet final my
Grid computing [2005]
Cloud Computing & Cloud Architecture
GRID COMPUTING PRESENTATION
Grid computing
Ad

Viewers also liked (6)

PPT
Final presentation
PDF
Brand Audit for Taco Bell
PPT
Brand positioning
DOCX
Subway -marketing_plan
PDF
Hype vs. Reality: The AI Explainer
Final presentation
Brand Audit for Taco Bell
Brand positioning
Subway -marketing_plan
Hype vs. Reality: The AI Explainer
Ad

Similar to Daemons Frequent and Urgent Net1 Final edit (20)

PDF
Ngen mvpn with pim implementation guide 8010027-002-en
PDF
Eta design-guide-2019oct
PDF
Design And Implementation Of A Phone Card Company
PDF
Stopping Malware
PDF
15466 mba technology_white_paper
PDF
15466 mba technology_white_paper
PDF
Overlay Networks Toward Information Networking 1st Edition Sasu Tarkoma
PDF
Eta nonfab-deploy-guide-2019oct
PDF
Emerging Multicast VPN Applications
PDF
4 g americas_-supporting_mobile_video_growth_and_trends_april_2013
PDF
KHAN_FAHAD_FL14
PDF
Zte umts load-monitoring and expansion guide
PDF
White Paper: Indoor Positioning in Industry & Logistics
DOCX
Web Based IT Project
PDF
Project final report
PDF
PDF
PDF
Presentation data center deployment guide
PDF
My PhD Thesis
Ngen mvpn with pim implementation guide 8010027-002-en
Eta design-guide-2019oct
Design And Implementation Of A Phone Card Company
Stopping Malware
15466 mba technology_white_paper
15466 mba technology_white_paper
Overlay Networks Toward Information Networking 1st Edition Sasu Tarkoma
Eta nonfab-deploy-guide-2019oct
Emerging Multicast VPN Applications
4 g americas_-supporting_mobile_video_growth_and_trends_april_2013
KHAN_FAHAD_FL14
Zte umts load-monitoring and expansion guide
White Paper: Indoor Positioning in Industry & Logistics
Web Based IT Project
Project final report
Presentation data center deployment guide
My PhD Thesis

Daemons Frequent and Urgent Net1 Final edit

  • 1. March 19, 2014 Daemons Frequent and Urgent Net- Traders LLP Implementation Plan By Shampy Singh and Tina Piotrowski
  • 2. 1 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Table of Contents TECHNICAL SUMMARY................................................................................................... 5 WIDE AREA NETWORK INFRASTRUCTURE ......................................................................... 7 WIDE AREA NETWORK TECHNOLOGY ........................................................................... 7 LOGICAL DIAGRAM .................................................................................................... 9 IP ADDRESSING SCHEME ............................................................................................11 ROUTER SPECIFICATION .............................................................................................13 TELECOMMUNICATION FACILITY (WAN LINKS) SPECIFICATION AND PRICING......................14 TORONTO OFFICE INFRASTRUCTURE ...............................................................................17 LOGICAL DIAGRAM ...................................................................................................17 IP ADDRESSING SCHEME ............................................................................................19 PHYSICAL LAYOUT ....................................................................................................24 PHYSICAL DIAGRAM..................................................................................................25 AUTHENTICATION .....................................................................................................26 ACTIVE DIRECTORY ..................................................................................................26 DOMAIN CONTROLLER...............................................................................................26 DNS .......................................................................................................................26 DHCP.....................................................................................................................26 INTERNET CONNECTIVITY ..........................................................................................26 WIRELESS................................................................................................................27 VOICE/VIDEO CONFERENCING ....................................................................................27 MONITORING............................................................................................................27 NETWORK MONITORING ............................................................................................28 SERVER MONITORING................................................................................................30 TORONTO DATA CENTER ...............................................................................................32 LOGICAL DIAGRAM ...................................................................................................32 IP ADDRESSING SCHEME ............................................................................................33 PHYSICAL DESIGN.....................................................................................................35 POWER SPECIFICATIONS .............................................................................................38 COOLING SPECIFICATION............................................................................................39 SERVERS .................................................................................................................39 DEVELOPMENT .........................................................................................................39 PRODUCTION............................................................................................................40 VIRTUALIZATION ......................................................................................................41 BACKUP AND DISASTER RECOVERY .............................................................................42 EQUIPMENT LIST AND PRICING ....................................................................................43 NASSAU HEADQUARTER NETWORK INFRASTRUCTURE .......................................................47 LOGICAL DIAGRAM ...................................................................................................47 IP ADDRESS SCHEME.................................................................................................48 PHYSICAL LAYOUT ....................................................................................................49
  • 3. 2 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 PHYSICAL DIAGRAM ..................................................................................................50 POWER CONSUMPTION...............................................................................................51 INTERNET AND CONNECTIONS.....................................................................................51 WIRELESS INTERNET .................................................................................................52 EQUIPMENT LIST AND PRICING ....................................................................................53 CHICAGO OFFICE..........................................................................................................56 LOGICAL DIAGRAM ...................................................................................................56 IP ADDRESS SCHEME.................................................................................................57 PHYSICAL LAYOUT ....................................................................................................59 PHYSICAL DIAGRAM ..................................................................................................60 POWER CONSUMPTION...............................................................................................61 SERVERS .................................................................................................................61 HISTORIAN DATABASE...............................................................................................61 VOICE/VIDEO CONFERENCING ....................................................................................62 MONITORING............................................................................................................62 NETWORK MONITORING ............................................................................................62 SERVER MONITORING................................................................................................62 EQUIPMENT LIST AND PRICING ....................................................................................63 NEW YORK OFFICE.......................................................................................................66 LOGICAL DIAGRAM ...................................................................................................66 IP ADDRESS SCHEME.................................................................................................67 PHYSICAL LAYOUT ....................................................................................................69 PHYSICAL DIAGRAM ..................................................................................................70 POWER CONSUMPTION...............................................................................................71 SERVERS .................................................................................................................71 HISTORIAN DATABASE...............................................................................................71 MONITORING............................................................................................................72 NETWORK MONITORING ............................................................................................72 SERVER MONITORING................................................................................................72 EQUIPMENT LIST AND PRICING ....................................................................................73 CHICAGO SOLSTICTIX ...................................................................................................76 LOGICAL DIAGRAM ...................................................................................................76 IP ADDRESS SCHEME.................................................................................................77 PHYSICAL DIAGRAM..................................................................................................78 POWER SPECIFICATIONS .............................................................................................79 SERVERS .................................................................................................................79 EQUIPMENT LIST AND PRICING ....................................................................................80 NEW YORK SOLSTICTIX.................................................................................................82 LOGICAL DIAGRAM ...................................................................................................82 IP ADDRESS SCHEME.................................................................................................83
  • 4. 3 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 PHYSICAL DIAGRAM..................................................................................................84 POWER SPECIFICATIONS .............................................................................................85 SERVERS .................................................................................................................85 EQUIPMENT LIST AND PRICING ....................................................................................86 SECURITY POLICY ........................................................................................................88 FINANCIALS ................................................................................................................89 EQUIPMENT MAINTENANCE/REPLACEMENT STRATEGY ......................................................92 WORK CITED ...............................................................................................................94
  • 5. 4 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Executive Summary Daemons Frequent and Urgent Net-Traders LLP (DaFun) is a new Hedge Fund company, which needs a High Frequency Trading platform to be successful and provide return of investments to their clients. DaFun is looking for a network that can suit their overall business goal. For this reason DaFun has hired the team of Shampy Singh and Tina Piotrowski to find an innovative top tier, fast-paced and low latency solution. DaFun has recently acquired office space in Chicago, New York, Nassau and Toronto. DaFun has also decided to lease rack space in both Chicago and New York Solsticix locations. Toronto acts as the headquarters of the entire company and supports about 140 staff and 13 guest office. Toronto also has the main Data Center for all of DaFun. Toronto is not as dependent on low latency as other locations such as Chicago and New York Solsticix locations. Nassau Headquarters in the Bahamas only has two people in staff and five guest offices. The National Bank of the Bahamas and United Funds of the Bahamas is used as the main banks for DaFun. Nassau is not highly reliant on low latency, but still needs to be connected with Toronto Headquarters for financial reasons. Chicago and New York Office both support 20 traders and trade strategist. Traders input trade strategies and monitor trade daily. Traders and trade strategists need to have immediate access to overwrite portal in order to change trading parameters. Both offices need to support low latency and high availability solution. All trading for DaFun will occur in the Chicago and New York Solsticix locations. These data centers act as a colocation for both the MYSE and MASDAQ. DaFun will be using a trading application called DGenie, which will be placed at the Solsticix locations because of the proximity to the exchanges. In order to stay competitive in a highly competitive market, the Singh and Piotrowski team will have to find a solution that encompasses finding the best networking hardware that will suit our need for a low latency and high availability network. We need to use a Telco provider that can provide us with the connections that we need, have a high availability and provide a low downtime guarantee.
  • 6. 5 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Technical Summary The trading industry is a very fast past industry. Any mistake, maybe seconds could cost thousands if not millions of dollars. Our company has designed this proposal to the needs of DaFun and also keeping in mind what is needed to have DaFun succeed for years to come. The network that needs to be built must have low-latency, redundant systems and must have high performance. The main components that will impact these requirements are the network and server equipment. For this proposal we have used Cisco across the board, Cisco has excellent service and reputation. We have chosen the Cisco Nexus 3548 for all critical areas. This switch has the best in class feature sets, best in class for latency, around 300ns switching and routing latency and 50ns latency to the servers. Also, the Nexus 3548 handles market volatility and micro bursts very well. To meet the needs specified, this switch will be perfect for the low latency infrastructure of DaFun. For the data center we will be using the Cisco Nexus 5596T. This has a throughput of roughly 2 Tbps, this will allow high availability to all development and production servers. At the non-critical access layer switches, the Cisco Catalyst 2960x will be used, this is also best in the class for enterprise class access for branches. At Nassau we will be using the Cisco 3945E. High performance and low latency is very important in this environment, because of this there will be no virtualization used at the Chicago and New York co-locations or at the Chicago and New York offices. At these locations we will be deploying HP ProLiant BL620c Gen7 servers. These servers will have SSD drives, duo 10 core Intel Xeon processor and 64GB of RAM. These will be directly connected with 10 Gb connections allowing a low latency network path. However, there will be virtualization used at the main data center in Toronto. This will allow us to have replicated testing and development environments. We will be using VMWare vSphere to make this possible. The analysts at the other offices will be able to use the development resources as they deem necessary. The servers that will be used at the Toronto Datacenter are the HP ProLiant BL460c Gen8 servers. These servers will have Duo Intel Xeon 2.6Ghz processors and 128GB of RAM. The RAM in these servers, is able to be upgrade to 1 TB. Most of the servers will be running virtualization other than the latency dependent applications. For the massive database storage needs, we will be implementing the HP ProLiant DL560 Gen8 server with the HP MSA 2040 SAN. These will be located at the New York and Chicago Offices, since we will be getting the feed from those locations. This allows 250Tb of storage. This SAN will allow a 10Gbps iSCSi connection running Raid 5. This will allow for high redundancy. Since each location will have this setup, if any hardware failure were to happen that made the data unrecoverable, this will not cause a loss of data since both locations will have this data available.
  • 7. 6 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 The WAN connectivity between Toronto, Chicago and New York offices will be 100 Mbps MPLS over Ethernet and 1 Gbps Metro Ethernet from Chicago and New York offices to their co- locations. These connections are provided from JP Telco and KQ Telco. We will be use two different connections for redundancy. There will be a point to point connection from Toronto to Nassau also provided by JP and KQ Telco. There will also be 100 Mb Internet connections at all locations except at the Chicago and New York Solsticix locations since this will not be necessary and also to decrease security risks. These internet connections will be using Cisco ASA 5585 firewalls for security. Also, the routers that will be used to terminate these connections will be the ASR 1004 except at the Nassau location, which will be using the Cisco 3945E. The operating systems that will be used on these servers will be either Microsoft Server 2012 or Red Hat Enterprise. This will depend on which application will be running on that server. The user desktops will vary from who will be using the desktops. These will range from the HP Z420 with i7 Processors to HP Z230 with i5 processors.
  • 8. 7 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Wide Area Network Infrastructure Wide Area Network Technology Wide Area Network Technology For DaFun to be successful, the technology we choose needs to be secure, redundant and be highly available. When considering any technology we need to keep these requirements in mind. Connecting all the office together will consist of using point to point and MPLS connections. The point to point will be from Nassau and Toronto Headquarters, since there are no other connections available. The MPLS over Ethernet will be from Chicago and New York office to Toronto also, from Toronto to Chicago and New York Co-locations. The Chicago and New York Co-Locations will have BGP peering with Lyric A and Lyric B as well as having BGP peering with the Exchanges. The connections from each Solsticix location to Lyric A and Lyric B will have a 10 Gbps connection. The BGP numbers can be seen below: NY-SOL ● MYSE o New York DaFUN to MYSE: AS# 65301 o New York MYSE: AS #301 ● MASDAQ oNew York DaFUN to MASDAQ: AS #65421 oNew York MASDAQ: AS #421 ● Lyric “A” Feed o DaFUN: AS #65138 o Lyric: AS #138 ● Lyric “B” Feed o DaFUN: AS #65188 o Lyric: AS #188 CHI-SOL ● MYSE o Chicago DaFUN to MYSE: AS# 65329 o Chicago MYSE: AS #329 ● MASDAQ
  • 9. 8 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 o Chicago DaFUN to MASDAQ: AS #65422 o Chicago MASDAQ: AS #422 ● Lyric “A” Feed o DaFUN: AS #65238 o Lyric: AS #238 ● Lyric “B” Feed o DaFUN: AS #65288 o Lyric: AS #288 We will be using two providers: JP and KQ Telco. By using two providers this will ensure that we have redundancy that is critical for the trading and Hedge Fund environment. They also provide the availability that we need, which will be explained more in depth later on. At the Nassau Headquarters there will be a T1 point-to-point connection to Toronto Headquarters, National Bank of Bahamas, United Funds of Bahamas and to the Internet. For redundancy there will be two connections between all T1 point to point connections from JP and KQ Telco. Between the Chicago and New York and the Chicago and New York Solsticix, respectively there will be two 1Gbps point-to-point connection from JP and KQ Telco. The Toronto Headquarters, Chicago and New York Offices will have two direct point-to-point 100Mbps to the internet per office from JP and KQ Telco. There will also be two 100Mbps MPLS connection between Toronto Headquarters to Chicago and New York Office from JP and KQ Telco. There will also an additional 100Mbps MPLS between Toronto Headquarters and Chicago and New York Solsticix. The MPLS connection from Toronto to the Solsticix locations is there to be the last resort in case the two connections from the New York or Chicago offices go down to their Solsticix co-locations. This can be seen in detail on in the Fig 1.1.
  • 10. 9 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Logical diagram The logical diagram helps to give you a basic overview of how the future network will be connected. The logical diagram of DaFun’s Wide Area Network is precarious because it helps to outline how we are connecting six offices across three countries and thousands of miles. We decided to use JP and KQ Telco as our provider between all of the offices. We also decided to use 10 Gbps connections with Lyric A and Lyric B as our market data providers for our Chicago and New York Solsticix locations and 1 Gbps connections with MYSE and MASDAQ. As seen in the diagram, each location has two connections to the internet. The reason we decided to do this is because it provides redundancy in case one internet line goes down. Secondly, we decided not to route all traffic through one office through MPLS is because of security. If one office were to be compromised, then all of the offices could be at risk since the firewalls would be only at one location. Also, there is a BGP peering from Lyric A and B, via multicast, so in case one router with the Lyric A connection were to go down, we still have another redundant connection from another router from Lyric B. The feeds coming from Lyric A and B are exactly the same. Also, since we have a BGP connection directly with these services we will not require any firewalls at these locations. As seen below, the firewalls are only needed where we are communicating to the public web, which would be the internet. In the highly unlikely case that from our remote offices; the main and the backup link were to go down. We have a MPLS direct connection from Toronto to the Chicago and New York Solsticix co-locations. This will allow analysts at the Toronto location to act fast, and turn off any algorithms necessary or make any changes they might find needed. This is a very good backup design incase all connection is lost from any of the offices to their co-locations. Each office is connected to Toronto by a 100 Mb MPLS over Ethernet direct connection, except for Nassau, which has a point to point T1 connection. This will allow hosting of all domain controllers, DNS, and DHCP servers at one location. Each office will be able to get authenticated from Toronto and this frees up more space at each location to handle the necessary Trading and data handling that is necessary for DaFun to be successful.
  • 12. 11 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Addressing Scheme The IP Addressing Scheme for the WAN can be seen below Device Interface IP Address Subnet Mask TOR-HQ-INT1 Fa0/0 100.1.2.1 /30 TOR-HQ-INT2 G0/0 88.1.2.1 /30 TOR-HQ-FW1 G0/0 100.1.2.2 /30 TOR-HQ-FW1 G0/1 100.1.2.5 /30 TOR-HQ-FW2 G0/0 88.1.2.2 /30 TOR-HQ-FW2 G0/1 88.1.2.9 /30 TOR-HQ-CR1 S0/0 10.1.1.2 /30 TOR-HQ-CR1 S0/1 10.2.1.1 /30 TOR-HQ-CR1 S0/2 10.2.1.5 /30 TOR-HQ-CR1 S0/3 10.2.1.13 /30 TOR-HQ-CR2 S0/0 10.1.1.6 /30 TOR-HQ-CR2 S0/1 10.2.1.21 /30 TOR-HQ-CR2 S0/2 10.2.1.25 /30 TOR-HQ-CR2 S0/3 10.2.1.29 /30 CHI-OFF-INT1 G0/0 100.1.3.1 /30 CHI-OFF-INT2 G0/0 88.1.3.1 /30 CHI-OFF-FW1 G0/0 100.1.3.2 /30 CHI-OFF-FW1 G0/1 10.3.1.9 /30 CHI-OFF-FW2 G0/0 88.1.3.2 /30 CHI-OFF-FW2 G0/1 10.3.1.13 /30 CHI-OFF-CR1 S0/0 10.3.1.1 /30 CHI-OFF-CR1 S0/1 10.2.1.2 /30 CHI-OFF-CR2 S0/0 10.3.1.5 /30
  • 13. 12 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 CHI-OFF-CR2 S0/1 10.2.1.6 /30 NY-OFF-INT1 G0/0 100.1.4.1 /30 NY-OFF-INT2 G0/0 88.1.4.1 /30 NY-OFF-FW1 G0/0 100.1.4.2 /30 NY-OFF-FW1 G0/1 10.4.1.9 /30 NY-OFF-FW2 G0/0 88.1.4.2 /30 NY-OFF-FW2 G0/1 10.4.1.13 /30 NY-OFF-CR1 S0/0 10.4.1.1 /30 NY-OFF-CR1 S0/1 10.2.1.26 /30 NY-OFF-CR2 S0/0 10.4.1.5 /30 NY-OFF-CR2 S0/1 10.4.1.30 /30 CHI-SOL-CR1 S0/0 10.3.1.2 /30 CHI-SOL-CR2 S0/0 10.3.1.6 /30 CHI-SOL-CR2 S0/1 10.2.1.14 /30 NY-SOL-CR1 S0/0 10.4.1.2 /30 NY-SOL-CR2 S0/0 10.4.1.6 /30 NY-SOL-CR2 S0/1 10.2.1.30 /30 NASS-HQ-INT1 G0/0 100.1.1.1 /30 NASS-HQ-INT2 G0/0 88.1.1.1 /30 NASS-HQ-FW2 G0/0 88.1.1.2 /30 NASS-HQ-FW2 G0/1 10.1.1.13 /30 NASS-HQ-FW1 G0/0 100.1.1.2 /30 NASS-HQ-FW1 G0/1 10.1.1.9 /30 NASS-HQ-CR1 S0/0 10.1.1.1 /30 NASS-HQ-CR2 S0/0 10.1.1.5 /30
  • 14. 13 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Router specification The router we chose was a Cisco ASR 1004 for the Toronto Headquarters, Chicago and New York Offices and Solsticix locations. This router provides the high-performing edge solution for the private WAN and WAN aggregation. These routers support provide layer 2 tunneling protocol, layer 3 VPN, IPv4, IPv6 and Quality of Service. In the Nassau Headquarters there is a Cisco 3945E Router. This router supports the T1 point-to- point connections that are from the National Bank of the Bahamas, United Funds of the Bahamas, Internet and Toronto. This router will still support high performance WAN environments. Also, supported on this router are VPN and VoIP which is all that is really needed in Nassau.
  • 15. 14 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Telecommunication facility (WAN links) specification and pricing JP and KQ Telco provide the connections we need to make DaFun prosperous. JP and KQ Telco provide 99.99% of uptime for their services. This means that if there is any downtime it is: ● 1.01 minutes per week ● 4.32 minutes per month ● 52.56 minutes per year There is redundancy in place at every office and headquarter if there is any downtime or equipment failure. Each site has redundant internet connectivity connecting to redundant routers or firewalls. Each point to point connection is terminated into a differing network device to provide the redundancy. If the path or equipment fails, the protocols we have in place will reroute traffic accordingly. We will be using EIGRP as our internal routing protocol and BGP for the external routing protocol. Circuit Connections Cost/Mont h Cost/Year Cost for 3 Years T1 Connection T1 Internet (JP) $2,000.00 $24,000.00 $72,000.00 T1 Internet (KQ) $2,000.00 $24,000.00 $72,000.00 T1 TOR(JP) $18,500.00 $ 222,000.00 $666,000.00 T1 TOR(KQ) $18,500.00 $222,000.00 $ 666,000.00 National Bank of the Bahamas (JP) $ 600.00 $7,200.00 $21,600.00 National Bank of the Bahamas (KQ) $ 600.00 $7,200.00 $21,600.00 United Funds of the Bahamas (KQ) $600.00 $7,200.00 $21,600.00 United Funds of the Bahamas (JP) $ 600.00 $7,200.00 $21,600.00 Cumulative Cost $43,400.00 $520,800.00 $1,562,400.00 1 Gbps Point to Point CHI OFF to CHI SOL (JP) $2,300.00 $27,600.00 $82,800.00 CHI SOL to CHI OFF (KQ) $2,300.00 $27,600.00 $82,800.00
  • 16. 15 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 NY OFF to NY SOL (JP) $2,200.00 $26,400.00 $79,200.00 NY SOL to NY CHI OFF (KQ) $2,200.00 $ 26,400.00 $ 79,200.00 Cumulative Cost $9,000.00 $108,000.00 $324,000.00 100 Mbps Internet TOR (KQ) $2,000.00 $24,000.00 $72,000.00 TOR (JP) $2,000.00 $24,000.00 $ 72,000.00 CHI-OFF (JP) $ 1,400.00 $ 16,800.00 $50,400.00 CHI-OFF (KQ) $1,400.00 $ 16,800.00 $50,400.00 NY-OFF (JP) $1,400.00 $16,800.00 $50,400.00 NY-OFF (KQ) $ 1,400.00 $16,800.00 $50,400.00 Cumulative Cost $9,600.00 $115,200.00 $345,600.00 100 Mbps MPLS CHI OFF (JP) $1,600.00 $19,200.00 $ 57,600.00 CHI OFF (KQ) $1,600.00 $19,200.00 $57,600.00 NY OFF (JP) $ 1,600.00 $ 19,200.00 $57,600.00 NY OFF (KQ) $1,600.00 $19,200.00 $57,600.00 CHI SOL (JP) $1,100.00 $ 13,200.00 $39,600.00 NY SOL (JP) $1,100.00 $13,200.00 $39,600.00 Cumulative Cost $8,600.00 $103,200.00 $309,600.00 MYSE NY SOL X2 $6,000.00 $72,000.00 $216,000.00 CHI SOL X2 $6,000.00 $72,000.00 $ 216,000.00 Cumulative Cost $12,000.00 $144,000.00 $432,000.00 MASDAQ NY SOL X2 $6,000.00 $72,000.00 $ 216,000.00 CHI SOL X2 $6,000.00 $72,000.00 $216,000.00 Cumulative Cost $12,000.00 $144,000.00 $432,000.00
  • 17. 16 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Lyric A and B NY SOL Lyric A $7,000.00 $ 84,000.00 $252,000.00 NY SOL Lyric B $7,000.00 $84,000.00 $252,000.00 CHI SOL Lyric A $7,000.00 $84,000.00 $252,000.00 CHI SOL Lyric B $7,000.00 $84,000.00 $252,000.00 Cumulative Cost $ 28,000.00 $336,000.00 $1,008,000.00 Total Cost $122,600.00 $1,471,200.0 0 $4,413,600.00 1Gpbs Metro Ethernet MPLS (One-Way) To/From CHI-OFF NY-OFF CHI-SOL NY-SOL TOR-HQ CHI-OFF N/A 9 ms 2 ms 8 ms 7 ms NY-OFF 9 ms N/A 8 ms 2 ms 8 ms CHI-SOL 2 ms 8 ms N/A 8 ms 7 ms NY-SOL 8 ms 2 ms 8 ms N/A 7 ms TOR-HQ 7ms 8 ms 7 ms 7 ms N/A
  • 18. 17 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Toronto Office Infrastructure Logical diagram When coming up with a design for the Toronto Headquarters, we need to keep in mind that it should be easy to follow and functional. As more complex the network gets, the chances of error increases. This diagram can be seen Fig 2.1. From the Chicago and New York Office there is a redundant 100Mbps MPLS connection. There is another 100Mbps MPLS connection coming from both the Chicago and New York Solsticix locations. There is also a T1 point-to-point connection from Nassau Headquarters. All of the connections terminate at one of two core routers (e.g. TOR-HQ-CR1 or TOR-HQ-CR2). The connections from Nassau and both the Chicago and New York Office have two connections from two different ISPs that will terminate on the opposing core routers for redundancy. Lastly, the 100Mbps internet connection will also have two connections from two different ISPs and terminate on opposing routers (TOR-HQ-INT1 or TOR-HQ-INT1). Internet traffic will hit the Firewalls (TORF-HQ-FW1 or TOR-HQ-FW2) then proceed to be routed through our DMZ network. Within our DMZ there are three servers: public web server, DNS and email server. Traffic that is permitted will be routed to another set of Firewalls (TOR- HQ-FW3 or TOR-HQ-FW4) which will end up at the Core switches (TOR-HQ-CSW1 or TOR- HQ-CSW2). The traffic will then proceed to go through the Distribution switches and Access switches and down to their respective location either the users or the data center. Traffic that is coming directly from the Chicago and New York Office, Chicago and New York Solsticix and the Nassau Headquarters is routed through the core routers first, then passes through the distribution switches and access switches to its respective location either the users or data center. All connections terminate into either a Cisco ASA 5585 Firewall or a Cisco ASR 1004 Router. All traffic that is permitted into the network is forwarded through a Cisco 4510RE switch then goes to the access layer Cisco 2950X switch or Cisco Nexus 5596T. This equipment provides the low latency, high availability and high performance that the Toronto Headquarter needs as the center of the company. Connections between devices will be either Multimode fiber or CAT6 cabling.
  • 20. 19 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Addressing Scheme For the Toronto office we have been given an IP address allocation of 100.1.2.0/24 from JP Telco and an IP address allocation of 88.1.2.0/24 by KQ Telco. As seen in Fig. 2.2, the public IP addresses have been assigned to all routers, firewalls going into the DMZ. NAT will be performed on the servers inside of the DMZ with a 1 to 1 IP translation. NAT/PAT will be performed on all addresses coming out from TOR-HQ-DMZR1 and TOR-HQ-DMZR2. For the private network we have allocated 10.2.1.0 /24 addresses for all of the networking equipment. These were broken into /30 subnets for each link. The devices that will be using DHCP for dynamic addressing have been given 10.2.16.0 /20 subnet. This will give the DHCP to allocate 4094 addresses. The server’s subnet has been given a 10.2.32.0 /20 subnet range. This will give the Toronto office 4094 addresses that are available to be assigned statically. The devices and users inside are able to communicate with all offices through MPLS over Ethernet. Fig. 2.2 Device Interface IP Address Subnet Mask TOR-HQ-INT1 Fa0/0 100.1.2.1 /30 TOR-HQ-INT2 G0/0 88.1.2.1 /30 TOR-HQ-FW1 G0/0 100.1.2.2 /30 TOR-HQ-FW1 G0/1 100.1.2.5 /30 TOR-HQ-FW2 G0/0 88.1.2.2 /30 TOR-HQ-FW2 G0/1 88.1.2.9 /30 TOR-HQ-DMZ1 G0/0 100.1.2.6 /30 TOR-HQ-DMZ1 G0/1 10.2.1.33 /30 TOR-HQ-DMZ2 G0/0 88.1.2.10 /30 TOR-HQ-DMZ2 G0/1 10.2.1.37 /30 TOR-HQ-DMZ3 G0/0 10.2.1.34 /30 TOR-HQ-DMZ3 G0/1 10.2.1.41 /30 TOR-HQ-DMZ4 G0/0 10.2.1.38 /30 TOR-HQ-DMZ4 G0/1 10.2.1.45 /30
  • 21. 20 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 TOR-HQ-FW3 G0/0 10.2.1.42 /30 TOR-HQ-FW3 G0/1 10.2.1.49 /30 TOR-HQ-FW4 G0/0 10.2.1.46 /30 TOR-HQ-FW4 G0/1 10.2.1.53 /30 TOR-HQ-CR1 S0/0 10.1.1.2 /30 TOR-HQ-CR1 S0/1 10.2.1.1 /30 TOR-HQ-CR1 S0/2 10.2.1.5 /30 TOR-HQ-CR1 S0/3 10.2.1.13 /30 TOR-HQ-CR1 G0/4 10.2.1.57 /30 TOR-HQ-CR1 G0/5 10.2.1.61 /30 TOR-HQ-CR2 S0/0 10.1.1.6 /30 TOR-HQ-CR2 S0/1 10.2.1.21 /30 TOR-HQ-CR2 S0/2 10.2.1.25 /30 TOR-HQ-CR2 S0/3 10.2.1.29 /30 TOR-HQ-CR2 G0/4 10.2.1.65 /30 TOR-HQ-CR2 G0/4 10.2.1.69 /30 TOR-HQ-CRSW1 G0/0 10.2.1.50 /30 TOR-HQ-CRSW1 G0/1 10.2.1.58 /30 TOR-HQ-CRSW1 G0/2 10.2.1.66 /30 TOR-HQ-CRSW1 G0/3 10.2.1.73 /30 TOR-HQ-CRSW1 G0/4 10.2.1.85 /30 TOR-HQ-CRSW1 G0/5 10.2.1.93 /30 TOR-HQ-CRSW1 G0/6 10.2.1.97 /30 TOR-HQ-CRSW2 G0/0 10.2.1.54 TOR-HQ-CRSW2 G0/1 10.2.1.62 /30
  • 22. 21 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 TOR-HQ-CRSW2 G0/2 10.2.1.70 /30 TOR-HQ-CRSW2 G0/3 10.2.1.77 /30 TOR-HQ-CRSW2 G0/4 10.2.1.81 /30 TOR-HQ-CRSW2 G0/5 10.2.1.89 /30 TOR-HQ-CRSW2 G0/6 10.2.1.101 /30 TOR-HQ-DSW1 G0/0 10.2.1.74 /30 TOR-HQ-DSW1 G0/1 10.2.1.78 /30 TOR-HQ-DSW1 G0/2 10.2.1.105 /30 TOR-HQ-DSW1 G0/3 10.2.1.109 /30 TOR-HQ-DSW1 G0/4 10.2.1.113 /30 TOR-HQ-DSW1 G0/5 10.2.1.117 /30 TOR-HQ-DSW1 G0/6 10.2.1.121 /30 TOR-HQ-DSW1 G0/7 10.2.1.125 /30 TOR-HQ-DSW1 G0/8 10.2.1.129 /30 TOR-HQ-DSW1 G0/9 10.2.1.133 /30 TOR-HQ-DSW2 G0/0 10.2.1.82 /30 TOR-HQ-DSW2 G0/1 10.2.1.86 /30 TOR-HQ-DSW2 G0/2 10.2.1.137 /30 TOR-HQ-DSW2 G0/3 10.2.1.141 /30 TOR-HQ-DSW2 G0/4 10.2.1.145 /30 TOR-HQ-DSW2 G0/5 10.2.1.149 /30 TOR-HQ-DSW2 G0/6 10.2.1.153 /30 TOR-HQ-DSW2 G0/7 10.2.1.157 /30 TOR-HQ-DSW2 G0/8 10.2.1.161 /30 TOR-HQ-DSW2 G0/9 10.2.1.165 /30
  • 23. 22 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 TOR-HQ-DSW3 G0/0 10.2.1.90 /30 TOR-HQ-DSW3 G0/1 10.2.1.94 /30 TOR-HQ-DSW3 G0/2 10.2.1.169 /30 TOR-HQ-DSW3 G0/3 10.2.1.173 /30 TOR-HQ-DSW4 G0/0 10.2.1.98 /30 TOR-HQ-DSW4 G0/1 10.2.1.102 /30 TOR-HQ-DSW4 G0/2 10.2.1.177 /30 TOR-HQ-DSW4 G0/3 10.2.1.181 /30 TOR-HQ-SSW1 G0/0 10.2.1.170 /30 TOR-HQ-SSW1 G0/1 10.2.1.178 /30 TOR-HQ-SSW2 G0/0 10.2.1.174 /30 TOR-HQ-SSW2 G0/1 10.2.1.182 /30 TOR-HQ-ASW1 G0/0 10.2.1.106 /30 TOR-HQ-ASW1 G0/1 10.2.1.138 /30 TOR-HQ-ASW2 G0/0 10.2.1.110 /30 TOR-HQ-ASW2 G0/1 10.2.1.142 /30 TOR-HQ-ASW3 G0/0 10.2.1.114 /30 TOR-HQ-ASW3 G0/1 10.2.1.146 /30 TOR-HQ-ASW4 G0/0 10.2.1.118 /30 TOR-HQ-ASW4 G0/1 10.2.1.150 /30 TOR-HQ-ASW5 G0/0 10.2.1.122 /30 TOR-HQ-ASW5 G0/1 10.2.1.154 /30 TOR-HQ-ASW6 G0/0 10.2.1.126 /30 TOR-HQ-ASW6 G0/1 10.2.1.158 /30 TOR-HQ-ASW7 G0/0 10.2.1.130 /30
  • 24. 23 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 TOR-HQ-ASW7 G0/1 10.2.1.162 /30 TOR-HQ-ASW8 G0/0 10.2.1.134 /30 TOR-HQ-ASW8 G0/1 10.2.1.166 /30 DHCP Devices 10.2.16.0 /20 Server Assignments 10.2.32.0 /20
  • 25. 24 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical layout The physical layout can be seen on Fig. 2.3. The circled T’s represent where the telecom closets need to be located. User work stations, VoIP phones (Cisco Unified IP Phone 7942G) and wireless Access Point will terminate in these telecom closets. The circled DC represents the Data Center that will contain all the servers. All internet and internal WAN connections will terminate here as well. We also need to consider physical security for this physical layout. The data center houses the critical information, multi-millions of dollars in equipment and all the connections to the internal WAN and internet. On a hardware level, there are measures that can be taken to ensure that the device is secure and encrypted properly. The data center needs to be locked at all times, and access should only be granted to those who need to be there i.e. IT staff. There should be a form of surveillance to watch the room and log who goes in and out. Electronic locks help to keep log of who goes in and out. As an extra precaution racks should be locked inside the data center. The telecom closets also need a form of physical security. On a hardware level, the switches will be configured with passwords, which will be needed for them to be unlocked. Fig. 2.3
  • 26. 25 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical Diagram This rack design encompasses both Telecom closets that are in the Toronto Headquarters. The Cisco 2960X switches will connect the workstation users, Access Points and VoIP phones to the internal WAN and internet. The Cisco 4510 distribution switches will connect back to the data center. All connections from the workstation users, Access Points and VoIP phones will connect using CAT 6 cabling. This design is meant to support all the cubicle and offices that have multiple drops (drops mean physical connections to the network). There will be a connection for each workstation and separate connections for each VoIP phones.
  • 27. 26 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Authentication Authentication for all offices will be single sign on (SSO). This will be hosted from the Toronto Headquarters. Any domain sign on will be authenticated from Toronto through the domain controllers. This will help to centralize all sign on; also this has been designed to be highly available. No downtime is expected from the implementation. . Active Directory The software we will be using to authenticate all domain logins will be Active Directory (AD). AD has many features that will be helpful for this enterprise. Features such as, you will be able to separate server names by location by OU same goes for users in different locations. AD also has a function for SSO, which you may implement in many of the applications, such as any of the portals that require domain logins. All users from Chicago, New York and Nassau will be authenticated through the Toronto office. Our MPLS over Ethernet will allow this fairly easily. Since there are redundant connections, the SLA is 99.999% up time. The way the datacenter has been designed, there will be one Active Directory server that will be in use and two backup in case anything were to happen to the main server. This is mirrored anytime any change is made, so both will have the same information in it. Domain Controller All users will be authenticated through the domain controllers. There will be one primary domain controller. The other two will be the backup in case the primary goes down. All of the data will be the same across all DC’s. DNS There will also be a Domain Name System that will be in the Microsoft Server 2012. This will allow the engineers to only remember the naming convention to login into servers and the networking equipment. This makes it easier and faster to remember names instead of IP Addresses. DHCP The DHCP will also be on a Microsoft Server, this will allow the automatic assignment of IP addresses to all machines. Making it easier for the engineers so they will not need to statically assign an IP address to every machine they build. Internet Connectivity The internet connects to our internet router. Since we are using two different providers (JP and KQ) each service is connected to either router, this helps to ensure that there is redundancy if the service provider goes down or if the router malfunctions. Internet traffic will be routed through our internet routers to (if permitted) to the DMZ network. Within our DMZ there are three
  • 28. 27 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 servers, public web server, DNS and email server. Traffic will be routed to the servers or if allowed to the Core switches. The traffic will then proceed to go through distribution switches and access switches. Wireless There will be a total of 14 Access Points (Cisco C602I) that will be placed around the Toronto Office that provide coverage throughout the office. The coverage will provide users with seamless coverage throughout the Toronto Headquarters. All Access Points are power over Ethernet (PoE) and will terminate in either the telecom closets or datacenter. All access point will be connected with CAT 6 cabling. Voice/Video Conferencing The voice and video conferencing tool that we will be implementing is Cisco’s WebEx. This is a VoIP solution that any of the employees may use on their personal laptops, or from any computer with a video camera. This will be implemented at each office, making it easier to have conversations without having to fly over to the offices. This solution allows you to have conference calls with anyone in the world, up to 25 people per conversation. With this anyone can share his or her desktop, documents, applications and also be able to give remote control access to anyone in the conversation. It is a very easy and powerful tool. Monitoring When it comes to moving parts, there should always be tools to monitor what is happening. Knowing what is going to happen to the equipment could help prevent many extensive issues
  • 29. 28 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 and downtime. Monitoring has been added to this proposal for this reason. Below you will see solutions for Network equipment monitoring along with Server monitoring solutions. Network Monitoring The network monitoring solution that we will be implementing is the Network Performance Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature, fan speed, and power supply. The Network Performance Monitor also tracks response time, availability and uptime of routers and switches. This will allow the enterprise to detect and diagnose network issues before any outages occur. The GUI is very intuitive. Few examples may be seen below:
  • 31. 30 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Server Monitoring We will be implementing PRTG Network Monitoring for the servers. This solution is also web based, installed on Windows Server 2012. This will allow the enterprise to monitor all servers at every location and not just at Toronto. This will monitor bandwidth usage, CPU usage, Ping rate, disk space, and uptime/downtime. There will be an email that will be sent out with a report of the top 100 instance of what was stated above. These will show if there are any devices that need action to be taken on or if there is a recurring culprit. Below an example of the GUI may be seen:
  • 33. 32 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Toronto Data Center Logical diagram The data center has sensitive information stored including the daily backups from all of the virtual machines and physical servers. So there must be redundancy and a fault tolerant design. In Fig.3.1, you are able to see the design that has been proposed for the data center. There are two core routers that have redundant connections from all ISPs. These routers then have connections to the core switches. Keep in mind that there are multiple links that go to the core switches and core switches to distribution switches that are aggregated together. So it will only fail over to the other switch if all links go down or if the core router goes down. The server switches (TOR-HQ-SSW1 and TOR-HQ-SSW2) will then be connected to the 6 c7000 chassis and also the EMC VNX8000 backup units. They all have multiple redundant fiber connections to the switches. Fig.3.1
  • 34. 33 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Addressing Scheme The IP addressing has been kept simple in the Toronto data center. Simplicity allows it to be easier to solve any issues that might arise. The networking devices were given a 10.2.1.0/24 allocation that has been split into /30 for every link. For the servers the IP address range of 10.2.16.0/20 has been allocated. The 6 HP c7000 chassis will have two Onboard Controllers, two on each chassis for redundancy, both having a fiber connection to the switches. There will be multiple IP addresses, and also depending on how many virtual machines are created. So the IP address scheme for this was not shown. Fig. 3.2 Device Interface IP Address Subnet Mask TOR-HQ-CR1 S0/0 10.1.1.2 /30 TOR-HQ-CR1 S0/1 10.2.1.1 /30 TOR-HQ-CR1 S0/2 10.2.1.5 /30 TOR-HQ-CR1 S0/3 10.2.1.13 /30 TOR-HQ-CR1 G0/4 10.2.1.57 /30 TOR-HQ-CR1 G0/5 10.2.1.61 /30 TOR-HQ-CR2 S0/0 10.1.1.6 /30 TOR-HQ-CR2 S0/1 10.2.1.21 /30 TOR-HQ-CR2 S0/2 10.2.1.25 /30 TOR-HQ-CR2 S0/3 10.2.1.29 /30 TOR-HQ-CR2 G0/4 10.2.1.65 /30 TOR-HQ-CR2 G0/4 10.2.1.69 /30 TOR-HQ-CRSW1 G0/0 10.2.1.50 /30 TOR-HQ-CRSW1 G0/1 10.2.1.58 /30 TOR-HQ-CRSW1 G0/2 10.2.1.66 /30 TOR-HQ-CRSW1 G0/3 10.2.1.73 /30 TOR-HQ-CRSW1 G0/4 10.2.1.85 /30 TOR-HQ-CRSW1 G0/5 10.2.1.93 /30
  • 35. 34 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 TOR-HQ-CRSW1 G0/6 10.2.1.97 /30 TOR-HQ-CRSW2 G0/0 10.2.1.54 TOR-HQ-CRSW2 G0/1 10.2.1.62 /30 TOR-HQ-CRSW2 G0/2 10.2.1.70 /30 TOR-HQ-CRSW2 G0/3 10.2.1.77 /30 TOR-HQ-CRSW2 G0/4 10.2.1.81 /30 TOR-HQ-CRSW2 G0/5 10.2.1.89 /30 TOR-HQ-CRSW2 G0/6 10.2.1.101 /30 TOR-HQ-DSW3 G0/0 10.2.1.90 /30 TOR-HQ-DSW3 G0/1 10.2.1.94 /30 TOR-HQ-DSW3 G0/2 10.2.1.169 /30 TOR-HQ-DSW3 G0/3 10.2.1.173 /30 TOR-HQ-DSW4 G0/0 10.2.1.98 /30 TOR-HQ-DSW4 G0/1 10.2.1.102 /30 TOR-HQ-DSW4 G0/2 10.2.1.177 /30 TOR-HQ-DSW4 G0/3 10.2.1.181 /30 TOR-HQ-SSW1 G0/0 10.2.1.170 /30 TOR-HQ-SSW1 G0/1 10.2.1.178 /30 TOR-HQ-SSW2 G0/0 10.2.1.174 /30 TOR-HQ-SSW2 G0/1 10.2.1.182 /30 Server Assignments 10.2.32.0 /20
  • 36. 35 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical Design The Toronto Data Center will consist of six racks that will house our network hardware and servers. These racks have been designed with redundancy in mind. For example TOR-HQ-FW1 will not have TOR-HQ-FW2 in the same rack; they will be in opposite racks on different power circuits. Just in case one rack loses power the chances of the other rack going down are slim. The racks that have been selected are 45Us in size and are designed for maximum flexibility for mounting equipment, thermal, and cable and power management. Each rack will have two PDUs mounted to the side of it that each provides 24 outlets. All connections terminate in to Cisco ASR 1004 routers, these high performance routers have the ability to handle high traffic quickly and efficiently. All traffic that is routed will be sent to Cisco Nexus 5596T or Cisco 4510E switches. These switches are low latency and provide the lowest delay in packets. There is also one EMC VNX8000 storage system that will be in the data center. These are not shown below, but will be used for storage. There will be three UPS Eaton 9390IT to support the power consumption of the data center.
  • 39. 38 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power specifications Out of all the locations, Toronto will have the most power consumption. For this reason we will be using the Eaton 9390IT Uninterruptible Power Supplies. There will be three UPS devices to support the amount of wattage that we will have. This UPS is designed to support up to 36,000 watts for 30 minutes. The power will need to be divided amongst the UPS to ensure that if there is a power failure each UPS can handle the wattage. This will also provide that extra redundancy for our network in case a UPS fails. This UPS system has been chosen because it uses 99 percent efficiency to reduce energy and heat costs. This system works as a plug-and-play procedure, which makes it easy to set up. The table listed below depicts the power consumption for all of the Toronto Headquarters. Toronto Power Consumption Device Quantity Watts/Device Total Watts Cisco Catalyst 4510R+E Switch w/Line Cards 6 74394.00 74394.00 Cisco Catalyst 2960X 8 740.00 5920.00 Cisco Nexus 5596T 2 120.00 240.00 Cisco ASR 1004 6 1020.00 6120.00 Cisco ASA 5585-X 4 120.00 480.00 Cisco 2504 Wireless Controller 1 120.00 120.00 Cisco Aironet 3602I 14 12.95 181.30 Cisco Unified IP Phone 7942G 150 6.30 945.00 HP BLc7000 6 2460.00 14760.00 VNX 8000 1 500.00 500.00 Total 198 79493.25 103660.3
  • 40. 39 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Cooling specification There are many things to consider when having to cool a data center with the amount of equipment that Toronto Data Center has. When setting up the data center we need to consider having Hot and Cold Aisle. Hot and Cold aisle are design to prevent the mixing of hot and cold air. You have to design these aisles so that only cold air is being absorbed through the intake on devices and the hot air is being push out into an area where it can't be absorbed by other devices. Fig. 3.3 Fig 3.3 shows one of the many options of setting up a hot and cold zone. There are many varying opinions on what the temperature should be in a data center. For the amount of wattage that is being used, the support staff that will be there daily, UPS, and lighting, we recommend that the temperature be between 55 to 60F. The cabinets that we have chosen help us to control the airflow that is coming out of devices; we can choose the direction that we want it to go. Servers In the Toronto Data Center we decided to go with two types of servers. The first one would be the HP ProLiant BL460c Gen8 and the second type is the HP ProLiant BL620c Gen7. Alongside the servers we will be running Red Hat Enterprise Linux 6 and Windows Server 2012. Most of the nodes will be virtualized and only the most critical services will be running straight off of the hardware. Development We have included a development environment in the plans since there was a concern to test new services and changes in production, which is not recommended since testing services and changes in production could lead to unplanned downtime and interrupting trading. All of the development environment will be virtualized. This will allow developers to test out any changes without having to worry about bringing anything down that shouldn’t be down. All of the
  • 41. 40 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 production environment will also be replicated into this environment, all of the trades for the day and any strategies that are used during the trading day alongside with any programs that are used. This will insure the changes or new services the developers are implementing will not break anything else. These development boxes will be on the HP ProLiant BL460c Gen8. These boxes will have two Intel Xeon 2.6GHz and 128GB of RAM per box. So this can be allocated as required for the new Development VMs. Also, this is upgradable to 512GB of RAM per box, in case more RAM is needed. There will be a total of 48 of the HP BL460c Gen8 at the Toronto office. Inside of these boxes there are two 500GB Drives, equaling up to 24TB of hard drive space. Production The production servers will have all of the critical services and applications running. This includes the external customer and trader portal system. Likewise, the trading strategy input and emergency overwrite portal, alongside with the DNS server, DHCP server, AD and the domain controllers. The servers that will be handling all of the production data will be the HP ProLiant BL620c Gen7. The specs for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. Most of the applications will be run on
  • 42. 41 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 VMs, which will have redundant VMs in case one would fail or anything were to happen to it. Virtualization VMWare vSphere Enterprise edition will be the virtualization environment that we will be using. VMWare has many advanced features that will come in handy in the data replication and backup processes. Using vSphere allows us to have many data clusters where multiple virtual machines can run. The data clusters are backed up in case something goes corrupt. The Enterprise edition includes:
  • 43. 42 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Backup and Disaster Recovery Backup and Disaster recovery is very important issues that need to be looked at when having an ample amount of important information. The last thing one needs to worry about is something failing and not having a backup to restore the data. Since this issue is highly important, we decided to host all of the backup servers at the Toronto office. This will allow us to have all of the backups at one consolidated place. Also, the backups that are in house are daily uploaded to the Amazon Glacier, to house this information off site. In case something was to happen to the information in the backup servers on site. Amazon Glacier is a cloud solution for archiving data. The onsite solution that we decided to go with was the EMC VNX8000. This has a 3 PB hard drive capability and can be maxed out at 6 PB. Also, it is connected to the network via fiber. The data will be backed up in this solution, and backed up to the Amazon cloud daily. The data that is backed up onsite will be stored for one month. Then it will be deleted. However, this data will always be available on the cloud in case it is ever needed. The offsite solution, as discussed before is the Amazon Glacier. This is a cloud solution that allows the archival of unlimited data. This is a highly available solution with 99.99999% uptime. Only seconds of downtime is expected per year. The data will go through the Internet connection and if ever needed, it can be retrieved at any time.
  • 44. 43 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing This also contains Toronto’s infrastructure equipment list and pricing. Cross-Connect pricing is not included in this table. Please see Financials section. Toronto Equipment and Price List Network Hardware Type Description Size (U) Quantit y Cost Total Cost Core Switch Cisco Catalyst 4510R+E Switch 14 6 $6,751.99 $40,511.94 Access Switch Cisco Catalyst 2960X- 48FPD-L 2 8 $4,935.99 $9,871.98 Data Center Switch Cisco Nexus 5596T 48 ports 2 2 $28,615.99 $57,231.98 Router Cisco ASR 1004 Router 40Gbps / Route Processor 2 / SPA Interface Processor 40G / 4 x 1- Port 10 Gigabit Ethernet Shared Port Adapter 2 6 $70,927.99 $425,567.94 Firewall Cisco ASA 5585-X Security Plus Firewall Edition SSP-20 bundle 2 4 $47,279.99 $189,119.96 Wireless Controller Cisco 2504 Wireless Controller with 15 Access Point License 1 1 $2,404.99 $2,404.99 SFP, Line Cards, Modules Line Card Cisco Supervisor Engine 7-E - control processor N/A 12 $13,506.99 $162,083.88 Line Card 48 port 10/100/1000 Line CardsWS-X4748- RJ45V+E 48 ports N/A 12 $6,075.99 $72,911.88 Line Card 12 port E-Series Gigabit Ethernet SFP WS-X4612- SFP-E N/A 18 $4,049.99 $72,899.82
  • 45. 44 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Line Card 48 port 10/100/1000 Line Cards WS-X4648-RJ45- E N/A 6 $3,711.99 $72,911.88 Line Card 24 port E-Series Gigabit Ethernet SFP WS-X4624- SFP-E N/A 6 $13,508.99 $22,271.94 Line Card 12 port E-Series Gigabit Ethernet SFP WS-X4712- SFP-E N/A 6 $18,764.99 $112,589.94 Power Supply Hot Plug 6000W power supply WS-CAC-6000W N/A 12 $3,475.99 $41,711.88 Module Cisco 8 Port Gigabit Ethernet Shared Port Adapter Mfr P/N SPA- 8X1GE-V2 N/A 2 $4,505.43 $9,010.86 Module Cisco 10G SR SFP Module N/A 20 $435.99 $8,719.80 Access Points, Phones Access Points Cisco Aironet 3602I N/A 14 $1,069.99 $14,979.86 Desk Phones Cisco Unified IP Phone 7942G N/A 150 $343.99 $51,598.50 Cabinets, PDU, ect. Cabinet N-Series TeraFrame Gen 3 Network Cabinet 45 6 $4,275.95 $25,655.70 Cabinet HP 11642 1200mm Pallet Universal Rack 42 2 $1,599.00 $ 3,198.00 UPS Eaton 9390IT N/A 3 $23,392.00 $70,176.00 PDU ServerTech CW-24V PDU N/A 12 $1,160.95 $13,931.40 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $393.53 $787.06
  • 46. 45 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $437.95 $ 437.95 Servers Server Enclosure HP BLc7000 Platinum Enclosure w/ 1 Phase 2 Power Supplies 4 Fans ROHS 10 6 $7,381.00 $44,286.00 Storage VNX 8000 N/A 1 $108,000.0 0 $108,000.00 Blades BL620c Blade N/A 24 $15,096.00 $362,304.00 Blades BL460c Blade N/A 48 $6,439.99 $309,119.52 $2,796,718.66 Licenses and Warranties Type Description Quantity Cost Total Cost/Month Total Cost/Year Total Cost for 3 Years extended service agreement Cisco ASA 5585 4 $13,753.99 $4,584.66 $55,015.96 $ 165,047.88 extended service agreement Cisco ASR 1004 6 $8,038.99 $4,019.50 $48,233.94 $144,701.82 extended service agreement Cisco Catalyst 2960X-48FPD- L 8 $471.99 $314.66 $55,015.96 $165,047.88 extended service agreement Nexus 5596T 2 $2,512.99 $418.83 $48,233.94 $144,701.82 extended service agreement Cisco Aironet 3602I 14 $94.99 $110.82 $3,775.92 $11,327.76
  • 47. 46 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 extended service agreement Cisco 2504 Wireless Controller 1 $479.99 $ 40.00 $5,025.98 $15,077.94 extended service agreement Cisco Unified IP Phone 7942G 150 $9.99 $124.88 $1,329.86 $3,989.58 License Websense Triton 1 $ 9,450.00 $787.50 $479.99 $1,439.97 License Cisco WebEx 1 $ 240.00 $20.00 $1,498.50 $4,495.50 License Linux Red Hat 30 $3,528.00 $8,820.00 $9,450.00 $28,350.00 License Microsoft Server 2012 8 $6,153.00 $4,102.00 $49,224.00 $147,672.00 Support Care Package BL460c Blade 48 $879.00 $3,516.00 $42,192.00 $126,576.00 Support vmware vsphere enterprise 24X7 24 $4,773.16 $9,546.32 $114,555.8 4 $343,667.52 $36,405.17 $436,861.9 9 $1,310,585.97
  • 48. 47 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Nassau Headquarter Network Infrastructure Logical diagram The logical connections for Nassau will not be as complicated as the rest of the locations. At Nassau we have two T1 connections from separate providers for the Internet; this will provide redundancy in case one of the links was to go down. These connections enter two separate firewalls and into separate routers. We have two separate T1 connections from different providers going to the National Bank of the Bahamas and United Funds of the Bahamas. Having two links from different providers gives us redundancy so we do not lose any connection to the banks. This logical diagram can be seen at Fig. 4.1. Fig. 4.1
  • 49. 48 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Address Scheme For each Internet link we have been provided with a 100.1.1.0 /24 allocation for JP Telco and for KQ Telco we have been provided with an 88.1.1.0 /24 allocation. As we can see from Fig. 4.2, we have allocated the IP addresses that were given to the addresses on the routers and firewall interfaces. The firewalls will perform NAT overload (PAT) the internal private addresses to one single public IP address. We decided to not use the full /24 allocation inside since we have a point-to-point connection with the Toronto office, this will allow us to use private addressing to communicate directly with that office through that point-to-point. The 10.1.1.0 /24 block will be dedicated to any networking equipment and the 10.1.2.0 /24 block will be reserved for DHCP to assign to all other devices that do not need a static IP. Since there are only a few employees and only limited visitors that will be coming to this location, a private /24 allocation will suffice. Fig. 4.2 Device Interface IP Address Subnet Mask NASS-HQ-INT1 G0/0 100.1.1.1 /30 NASS-HQ-INT2 G0/0 88.1.1.1 /30 NASS-HQ-FW1 G0/0 100.1.1.2 /30 NASS-HQ-FW1 G0/1 10.1.1.9 /30 NASS-HQ-FW2 G0/0 88.1.1.2 /30 NASS-HQ-FW2 G0/1 10.1.1.13 /30 NASS-HQ-CR1 G0/0 10.1.1.10 /30 NASS-HQ-CR1 G0/1 10.1.1.17 /30 NASS-HQ-CR1 G0/2 10.1.1.18 /30 NASS-HQ-CR1 S0/0 10.1.1.1 /30 NASS-HQ-CR2 G0/0 10.1.1.14 /30 NASS-HQ-CR2 G0/1 10.1.1.21 /30 NASS-HQ-CR2 G0/2 10.1.1.22 /30 NASS-HQ-CR2 S0/0 10.1.1.5 /30 DHCP Devices 10.1.2.0 /24
  • 50. 49 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical layout Nassau’s office layout can be seen in Fig. 4.3. The telecom closet can be seen at the upper left corner and indicated with the red-circled T. This diagram also shows the locations of the Access Points and also the rooms in the office. Fig. 4.3
  • 51. 50 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical diagram The data center will house the equipment for Nassau Headquarters to the Internet and the internal WAN. The equipment will provide Nassau Headquarters with the capabilities to access the Internet; connect to the internal WAN network and both banks. All T1 connections terminate into a Cisco 3945E router, Internet traffic is routed through Cisco ASA 5585-X and internal traffic is immediately terminated on the core routers. All traffic (that is permitted) is sent to the Cisco 2960X Switches. The assumption can be made that all user workstations, VoIP phones and access point will terminate in the Data Center. Access Points will terminate into the wireless LAN controller to provide for easy configuration and deployment.
  • 52. 51 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power Consumption Nassau is our smallest office, but it still needs redundancy in power for its equipment. We will be using an Eaton FERRUPS rack mount UPS system to support the power consumption. This UPS is able to handle full power for 12 minutes if the power does fail at Nassau headquarters. This UPS provides customizable receptacles, input plugs and voltage matching transformers. There will only be a need for one UPS at this location. Nassau Power Consumption Device Quantity Watts/Device Total Watts Cisco ASA 5585-X 2 120.00 240.00 Cisco 3945E 4 520.00 2080.00 Cisco Catalyst 2960X 2 740.00 1480.00 Cisco 2504 Wireless Controller 1 120.00 120.00 Cisco Aironet 3602 3 12.95 38.85 Cisco Unified IP Phone 15 6.30 94.50 Total 27 1519.25 4053.35 Internet and Connections For the Internet connection we are using T1 connections from JP Telco and KQ Telco. The reason for two is redundancy. If one line were to go down, we still have the second ISP to keep the Internet connection going. JP Telco has provided us with a /24 allocation for 100.1.1.0 and KQ Telco has provided us a /24 allocation of 88.1.1.0. The connection to Toronto HQ is also provided by JP Telco and KQ Telco, these are redundant point to point connections. Since most of the Finances will be going here and being transferred to the banks, having redundancy is very keen
  • 53. 52 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Wireless Internet Nassau will have 3 Access Points in the office. This can be seen in Fig: 6.4.1. Having 3 AP’s in the office allows for maximum coverage. There will be one Wireless Controller in the Telecom closet and these AP’s will be connected to this WLC.
  • 54. 53 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing Nassau Equipment and Price List Network Hardware Hardware Description Size (U) Quantit y Cost Total Cost Firewall Cisco ASA 5585-X Security Plus Firewall Edition SSP-20 bundle 2 2 $ 47,279.99 $ 94,559.98 Router Cisco 3945E 3 4 $ 12,158.99 $ 48,635.96 Switch Cisco Catalyst 2960X- 48FPD-L 2 2 $ 4,935.99 $ 9,871.98 Wireless Controller Cisco 2504 Wireless Controller with 5 Access Point License 1 1 $799.99 $799.99 SFP, Line Cards, Modules Expansion module 4-Port T1/E1 Multiflex Trunk Voice/WAN Interface Card VWIC3- 4MFT-T1/E1 N/A 8 $ 2,972.99 $ 23,783.92 Access Points, Phones Access Points Cisco Aironet 3602I N/A 3 $ 1,069.99 $ 3,209.97 Desk Phones Cisco Unified IP Phone 7942G N/A 15 $ 343.99 $ 5,159.85 Cabinets, PDU, ect. Cabinet HP 11642 1200mm Pallet Universal Rack 42 1 $ 1,599.00 $ 1,599.00
  • 55. 54 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 PDU ServerTech CW-24V PDU N/ A 2 $ 1,160.95 $ 2,321.90 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $ 393.53 $ 787.06 Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $ 437.95 $437.95 Mounting Kit Cisco 2504 Wireless Controller Rack Mount Bracket - rack mounting kit N/ A 1 $67.99 $67.99 UPS Eaton FERRUPS RM 60Hz 10 1 $ 15,292.00 $ 15,292.00 Total Of Network Hardware $ 191,167.56 Licenses and Warranties Type Description Quantit y Cost Total Cost/Month Total Cost/ Year Total Cost For 3 Years extended service agreement Cisco ASA 5585 2 $13,753.9 9 $2,292.33 $27,507.98 $82,523.94 extended service agreement Cisco Router 3945E 4 $3,705.99 $1,235.33 $14,823.96 $44,471.88 extended service agreement Cisco Catalyst 2960X- 48FPD-L 2 $471.99 $78.67 $943.98 $2,831.94 extended service agreement Cisco Aironet 3602I 3 $94.99 $23.75 $284.97 $854.91 extended service agreement Cisco 2504 Wireless Controller 1 $479.99 $40.00 $479.99 $1,439.97 extended service Cisco Unified IP 15 $9.99 $12.49 $149.85 $449.55
  • 57. 56 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Chicago Office Logical diagram The Chicago Office is supporting 20 traders and trade strategist. This office has a dual point-to- point 100Mbps connection from both JP and KQ Telco and terminates in either CHI-OFF-INT1 or CHI-OFF-INT2. This will give traders or trade strategist to do any research that might be required of them quickly. Our internal WAN has two connections that either terminate in CHI- OFF-CR1 or CHI-OFF-CR2. There is a dual direct point-to-point 1Gbps connection between the Chicago Office and the Chicago Solsticix. Lastly, there is a dual 100Mbps MPLS connection between the Chicago Office and the Toronto Headquarters. The routers that terminate all of the connections to the Chicago Office are Cisco ASR 1004 and Internet traffic is firewalled by Cisco ASA 5585. The Cisco Nexus 3548 switches are used to forward traffic to the users.
  • 58. 57 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Address Scheme For each Internet link we have been provided with a 100.1.3.0 /24 allocations from JP Telco and from KQ Telco we have been provided with an 88.1.3.0 /24 allocations. As we can see from Fig.5.1, we have allocated the IP addresses that were given to us on the routers and firewall interfaces. The firewalls will NAT/PAT the internal private addresses out to the Internet. We decided to not use the full /24 allocation inside since we have an MPLS connection with the Toronto office, this will allow us to use private addressing to communicate directly with that office through that MPLS over Ethernet. The IP Address will be in the range of 10.3.1.0 /24 for the networking equipment. This has been broken down into /30 for each link. We have reserved the 10.3.16.0/20 for DHCP. This will be dynamically assigned to devices that will connect to this private network, which does not require static IPs. The 10.3.32.0/20 block has been reserved for all servers. The static IP for servers will be pulled from this allocation. Fig. 5.1 Device Interface IP Address Subnet Mask CHI-OFF-INT1 G0/0 100.1.3.1 /30 CHI-OFF-INT2 G0/0 88.1.3.1 /30 CHI-OFF-FW1 G0/0 100.1.3.2 /30 CHI-OFF-FW1 G0/1 10.3.1.9 /30 CHI-OFF-FW2 G0/0 88.1.3.2 /30 CHI-OFF-FW2 G0/1 10.3.1.13 /30 CHI-OFF-CR1 S0/0 10.3.1.1 /30 CHI-OFF-CR1 S0/1 10.2.1.2 /30 CHI-OFF-CR1 G0/0 10.3.1.10 /30 CHI-OFF-CR1 G0/1 10.3.1.17 /30 CHI-OFF-CR1 G0/2 10.3.1.25 /30 CHI-OFF-CR2 S0/0 10.3.1.5 /30 CHI-OFF-CR2 S0/1 10.2.1.6 /30 CHI-OFF-CR2 G0/0 10.3.1.14 /30
  • 59. 58 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 CHI-OFF-CR2 G0/1 10.3.1.21 /30 CHI-OFF-CR2 G0/2 10.3.1.29 /30 CHI-OFF-SW1 G0/0 10.3.1.18 /30 CHI-OFF-SW1 G0/1 10.3.1.22 /30 CHI-OFF-SW2 G0/0 10.3.1.26 /30 CHI-OFF-SW2 G0/1 10.3.1.30 /30 Devices 10.3.16.0 /20 Servers 10.3.32.0 /20
  • 60. 59 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical layout The circled red T is the location of the Telecom room for the Chicago Office. This is a shared space between all tenants on the floor. I will make the assumption that all network drops and connections will terminate in the Telecom room. Since we are using a shared space it is important to remember physical security. Physical security of our hardware is very prevalent in this situation, subsequently we can’t control who enters into our telecom room (shared space). We need to lock all our equipment up and make sure all configurations that are done on the equipment are encrypted correctly. Not knowing what the space looks like or how much is allocated to us, it might be wise to consider fencing in our equipment for that added layer of security.
  • 61. 60 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical diagram At the Chicago Office there is a telecom room that is shared with the other tenants on the floor. This room will house the hardware that we will be using to connect Chicago Office to the Internet and the internal WAN. All Internet and internal WAN connections will terminate into one of four Cisco ASR 1004 Routers. All Internet traffic will be routed through one of two Cisco ASA 5585 Firewalls. All traffic will be sent to one of two Cisco Nexus 3548 Switches. An assumption can be made that all user workstations, VoIP phones and Access Points are terminated in the telecom closet. CAT 6 cabling will terminate in the Nexus 3548 using a GLC-T Compatible 1000Base-T Copper SFP. The PDU is attached vertically to accommodate for the spacing on the rack. The routers that are being used are designed for High Performance routing which ensures QoS (Quality of Service), high availability and high bandwidth speeds. The switches that are being used are low latency switches that will decrease the delay. This will help be beneficial for the traders that are in Chicago to get their information fast.
  • 62. 61 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power Consumption There will be one Eaton 9390IT will be present for the Chicago location. The UPS will be able to cover any power is to go down for 30 minutes. This UPS is designed to support up to 36,000 watts for 30 minutes. It is its own unit that stands on its own. Chicago Office Power Consumption Device Quantity Watts/Device Total Watts Cisco ASR 1004 Router 4 152.00 608.00 Cisco ASA 5585 2 1020.00 2040.00 Cisco Nexus 3548 2 152.00 304.00 Cisco 2504 Wireless Controller 1 120.00 120.00 Cisco Unified IP Phone 30 6.30 189.00 Cisco Aironet 3 12.95 38.85 HP Modular Smart Array 2040 2 500.00 1000.00 HP ProLiant DL560 Gen8 Server 1 2640.00 2640.00 HP BLc7000 Platinum Enclosure 1 2640.00 2640.00 Total 48 7243.25 9605.75 Servers The rest of the servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. Some the services will be on VMs, however any of the important services that retrieve information will be running on the hardware and not through a virtual machine. The development environment will be hosted at the Toronto datacenter. The developers will be able to connect to any of the servers through the MPLS connection and make changes or add services to their VMs from there. This removes the need for development boxes on-site at the Chicago office. Historian Database The Historian Database will be on a completely different server. Since we need to be able to store 50TB of data, that will be update every day. We decided to go with a SAN solution for this.
  • 63. 62 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 This will allow us to store this data plus be able to back this up since we will be using Raid 5, everything from the disks on the main SAN will be backed up on 3 copies of disks. If one of the drives fail no data will be lost, this also allows the engineer to be able to switch out the drive without having to worry about turning off the SAN since the drives are hot swappable. This will be at both the New York office and Chicago Office. The SAN solution we are going with is the HP MSA 2040 SAN Dual Controller SFF Storage with the MSA 2040 LFF disk Enclosure expansion. This will allow up to 288 TB of space. This SAN is connected via Fiber to a HP ProLiant DL560 Gen8 Server. Voice/Video Conferencing The voice and video conferencing tool that we will be implementing is Cisco’s Webex. This is a VoIP solution that any of the employees may use on their personal laptops, or from any computer with a video camera. This will be implemented at each office, making it easier to have conversations without having to fly over to the offices. This solution allows you to have a conference with anyone in the world, up to 25 people per conversation. With this anyone can share their desktop, documents, applications and also be able to give remote control access to anyone in the conversation. It is a very easy and powerful tool. Monitoring When it comes to moving parts, there should always be tools to monitor what is happening. Knowing what is going to happen to the equipment could help prevent many extensive issues and downtime. A monitoring has been added to this proposal for this reason. This will allow the engineers at Chicago office to monitor the health of the networking equipment at the Chicago office and Chicago colocation. Network Monitoring The network monitoring solution that we will be implementing is the Network Performance Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature, fan speed, and power supply. The Network Performance Monitor also tracks response time, availability and uptime of routers and switches. This will allow the enterprise to detect and diagnose network issues before any outages occur. The GUI is very intuitive. Server Monitoring The server monitoring solution we will be implementing is PRTG Network Monitoring. This solution is also web based, installed on Windows Server 20008. This will allow the enterprise to monitor all servers at every location and not just at Toronto. This will monitor bandwidth usage, CPU usage, Ping times, disk space, and uptime/downtime. There will be an email that will be sent out with a report of the top 100 instance of what was stated above. This will allow Chicago engineers to monitor the health of the Servers at the Chicago Office and Chicago Colocation:
  • 64. 63 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing Chicago Office Equipment and Price Network Hardware Type Description Size (U) Quantit y Cost Total Cost Router Cisco ASR 1004 Router 40Gbps / Route Processor 2 / SPA Interface Processor 40G / 4 x 1-Port 10 Gigabit Ethernet Shared Port Adapter 4 4 $70,927.99 $283,711.96 Firewall Cisco ASA 5585 2 2 $37,580.00 $75,160.00 Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98 Wireless Controller Cisco 2504 Wireless Controller with 15 Access Point License 1 1 $2,404.99 $2,404.99 SFP, Line Cards, Modules Router Module Cisco 8 Port Gigabit Ethernet Shared Port Adapter Mfr P/N SPA-8X1GE-V2 N/A 8 $4,505.43 $36,043.44 Switch SFP Proline Cisco GLC-T Compatible 1000Base-T Copper SFP N/A 48 $97.99 $4,703.52 Access Points, Phones Desk Phones Cisco Unified IP Phone 7942G N/A 30 $343.99 $10,319.70 Access Points Cisco Aironet 3602I N/A 3 $1,069.99 $5,349.95 Cabinets, PDU, ect. UPS Eaton 9390IT N/A 1 $23,392.00 $23,392.00
  • 65. 64 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Cabinet N-Series TeraFrame Gen 3 Network Cabinet 45 1 $4,275.95 $4,275.95 PDU ServerTech CW-24V PDU N/A 3 $1,160.95 $3,482.85 Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $437.95 $437.95 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $393.53 $787.06 Rack Mounting Cisco 2504 Wireless Controller Rack Mount Bracket - rack mounting kit N/A 1 $67.99 $67.99 Servers and OS Storage HP Modular Smart Array 2040 SAN Dual Controller 2 2 $80,000.00 $160,000.00 50TB historian HP ProLiant DL560 Gen8 Server 2 1 $10,000.00 $10,000.00 Server Enclosure HP BLc7000 Platinum Enclosure w/ 1 Phase 2 Power Supplies 4 Fans ROHS 10 1 $7,381.00 $7,381.00 Blades BL620c Blade N/A 8 $15,096.00 $120,768.00 Total Hardware $808,690.34 License and Warranties Type Description Quantity Cost Total Cost/Mont h Total Cost/Year Total Cost For 3 Years extended service agreement Cisco ASA 5585 2 $13,753.99 $2,292.33 $27,507.98 $82,523.94 extended service agreement Cisco Nexus 3548 2 $2,648.99 $441.50 $5,297.98 $ 5,893.94 extended service Cisco ASR 1004 2 $8,038.99 $1,339.83 $16,077.98 $48,233.94
  • 66. 65 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 agreement extended service agreement Cisco Aironet 3602I 3 $94.99 $23.75 $284.97 $854.91 extended service agreement Cisco 2504 Wireless Controller 1 $497.99 $41.50 $497.99 $1,493.97 extended service agreement Cisco Unified IP Phone 7942G 30 $9.99 $ 24.98 $299.70 $899.10 License Linux Red Hat 8 $ 3,528.00 $2,352.00 $28,224.00 $84,672.00 Support vmware vsphere enterprise 24X7 8 $ 4,773.16 $ 3,182.11 $38,185.28 $114,555.8 4 Total Cost $ 9,697.99 $116,375.8 8 $349,127.6 4
  • 67. 66 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 New York Office Logical diagram The New York Office is supporting 20 traders and trade strategist. The office has a dual point-to- point 100Mbps connection from both JP and KQ Telco and terminates in either NY-OFF-INT1 or NY-OFF-INT2. This will give traders or trade strategist to do any research that might be required of them quickly. Our internal WAN has two connections that either terminates in NY- OFF-CR1 or NY-OFF-CR2. There is a dual direct point-to-point 1Gbps connection between the New York Office and the New York Solsticix. Lastly, there is a dual 100Mbps MPLS connection between the New York Office and the Toronto Headquarters. The routers that terminate all of the connections to the New York Office are Cisco ASR 1004 and Internet traffic is firewalled by Cisco ASA 5585. The Cisco Nexus 3548 switches are used to forward traffic to the users.
  • 68. 67 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Address Scheme For each Internet link we have been provided with a 100.1.4.0 /24 allocation from JP Telco and from KQ Telco we have been provided with an 88.1.4.0 /24 allocation. As we can see from figure IP.8.2, we have allocated the IP addresses that were given to us on the routers and firewall interfaces. The firewalls will NAT/PAT the internal private addresses out to the Internet. We decided to not use the full /24 allocation inside since we have an MPLS connection with the Toronto office, this will allow us to use private addressing to communicate directly with that office through that MPLS over Ethernet. The IP Address will be in the range of 10.4.1.0 /24 for the networking equipment. This has been broken down into /30 for each link. We have reserved the 10.4.20.0/20 for DHCP. This will be dynamically assigned to devices that will connect to this private network, which does not require static IPs. The 10.4.32.0/20 block has been reserved for all servers. The static IP for servers will be pulled from this allocation. Device Interface IP Address Subnet Mask NY-OFF-INT1 G0/0 100.1.4.1 /30 NY-OFF-INT2 G0/0 88.1.4.1 /30 NY-OFF-FW1 G0/0 100.1.4.2 /30 NY-OFF-FW1 G0/1 10.4.1.9 /30 NY-OFF-FW2 G0/0 88.1.4.2 /30 NY-OFF-FW2 G0/1 10.4.1.13 /30 NY-OFF-CR1 S0/0 10.4.1.1 /30 NY-OFF-CR1 S0/1 10.2.1.26 /30 NY-OFF-CR1 G0/0 10.4.1.10 /30 NY-OFF-CR1 G0/1 10.4.1.17 /30 NY-OFF-CR1 G0/2 10.4.1.25 /30 NY-OFF-CR2 S0/0 10.4.1.5 /30 NY-OFF-CR2 S0/1 10.4.1.30 /30 NY-OFF-CR2 G0/0 10.4.1.14 /30 NY-OFF-CR2 G0/1 10.4.1.21 /30
  • 69. 68 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 NY-OFF-CR2 G0/2 10.4.1.29 /30 NY-OFF-SW1 G0/0 10.4.1.18 /30 NY-OFF-SW1 G0/1 10.4.1.22 /30 NY-OFF-SW2 G0/0 10.4.1.26 /30 NY-OFF-SW2 G0/1 10.4.1.30 /30 Devices 10.4.16.0 /20 Servers 10.4.20.0 /20
  • 70. 69 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical layout The circled red T is the location of the Telecom room for the New York Office. This is a shared space between all tenants on the floor. I will make the assumption that all network drops and connections will terminate in the Telecom room. Since we are using a shared it is important to remember physical security. Physical security of our hardware is very prevalent in this situation, subsequently we can’t control who enters into our telecom room (shared space). We need to lock all our equipment up and make sure all configurations that are done on the equipment are encrypted correctly. Not knowing what the space looks like or how much is allocated to us, it might be wise to consider fencing in our equipment in our equipment for that added layer of security.
  • 71. 70 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical diagram At the New York Office there is a telecom room that is shared with the other tenants on the floor. This room will house the hardware that we will be using to connect Chicago Office to the Internet and the internal WAN. All Internet and internal WAN connections will terminate into one of four Cisco ASR 1004 Routers. All internet traffic will be routed through one of two Cisco ASA 5585 Firewalls. All traffic will be sent to one of two Cisco Nexus 3548 Switches. An assumption can be made that all user workstations, VoIP phones and Access Points are terminated in the telecom closet. CAT 6 cabling will terminate in the Nexus 3548 using a GLC-T Compatible 1000Base-T Copper SFP. The PDU is attached vertically to accommodate for the spacing on the rack. The routers that are being used are designed for High Performance routing which ensures QoS (Quality of Service), high availability and high bandwidth speeds. The switches that are being used are low latency switches that will decrease the delay.
  • 72. 71 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power Consumption There will be one Eaton 9390IT will be present for the New York location. The UPS will be able to cover any power is to go down for 30 minutes. This UPS is designed to support up to 36,000 watts for 30 minutes. It is its own unit that stands on its own. New York Office Power Consumption Device Quantity Watts/Device Total Watts Cisco ASR 1004 Router 4 152.00 608.00 Cisco ASA 5585 2 1020.00 2040.00 Cisco Nexus 3548 2 152.00 304.00 Cisco 2504 Wireless Controller 1 120.00 120.00 Cisco Unified IP Phone 30 6.30 189.00 Cisco Aironet 3 12.95 38.85 HP Modular Smart Array 2040 2 500.00 1000.00 HP ProLiant DL560 Gen8 Server 1 2640.00 2640.00 HP BLc7000 Platinum Enclosure 1 2640.00 2640.00 Total 48 7243.25 9605.75 Servers The rest of the servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. Some the services will be on VMs, however any of the important services that retrieve information will be running on the hardware and not through a virtual machine. The development environment will be hosted at the Toronto datacenter. The developers will be able to connect to any of the servers through the MPLS connection and make changes or add services to their VMs from there. This removes the need for development boxes on-site at the New York office. Historian Database The Historian Database will be on a completely different server. Since we need to be able to store 50TB of data, which will be updated every day. We decided to go with a SAN solution for
  • 73. 72 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 this. This will allow us to store this data plus be able to back this up since we will be using Raid 5, everything from the disks on the main SAN will be backed up on 3 copies of disks. If one of the drives fail no data will be lost, this also allows the engineer to be able to switch out the drive without having to worry about turning off the SAN since the drives are hot swappable. This will be at both the New York office and Chicago Office. The SAN solution we are going with is the HP MSA 2040 SAN Dual Controller SFF Storage with the MSA 2040 LFF disk Enclosure expansion. This will allow up to 288 TB of space. This SAN is connected via Fiber to a HP ProLiant DL560 Gen8 Server. Monitoring When it comes to moving parts, there should always be tools to monitor what is happening. Knowing what is going to happen to the equipment could help prevent many extensive issues and downtime. A monitoring has been added to this proposal for this reason. This will allow the engineers at New York office to monitor the health of the networking equipment at the New York office and New York colocation. Network Monitoring The network monitoring solution that we will be implementing is the Network Performance Monitor by SolarWinds. This is a very reliable solution that uses MIBs to monitor temperature, fan speed, and power supply. The Network Performance Monitor also tracks response time, availability and uptime of routers and switches. This will allow the enterprise to detect and diagnose network issues before any outages occur. The GUI is very intuitive. Server Monitoring The server monitoring solution we will be implementing is PRTG Network Monitoring. This solution is also web based, installed on Windows Server 20008. This will monitor bandwidth usage, CPU usage, Ping times, disk space, and uptime/downtime. There will be an email that will be sent out with a report of the top 100 instance of what was stated above. This will allow New York engineers to monitor the health of the Servers at the New York Office and New York Colocation:
  • 74. 73 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing New York Office Equipment and Price Network Hardware Type Description Size (U) Quantit y Cost Total Cost Router Cisco ASR 1004 Router 40Gbps / Route Processor 2 / SPA Interface Processor 40G / 4 x 1-Port 10 Gigabit Ethernet Shared Port Adapter 4 4 $70,927.99 $283,711.96 Firewall Cisco ASA 5585 2 2 $37,580.00 $75,160.00 Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98 Wireless Controller Cisco 2504 Wireless Controller with 15 Access Point License 1 1 $2,404.99 $2,404.99 SFP, Line Cards, Modules Router Module Cisco 8 Port Gigabit Ethernet Shared Port Adapter Mfr P/N SPA-8X1GE-V2 N/A 8 $4,505.43 $36,043.44 Switch SFP Proline Cisco GLC-T Compatible 1000Base-T Copper SFP N/A 48 $97.99 $4,703.52 Access Points, Phones Desk Phones Cisco Unified IP Phone 7942G N/A 30 $343.99 $10,319.70 Access Points Cisco Aironet 3602I N/A 3 $1,069.99 $5,349.95 Cabinets, PDU, ect. UPS Eaton 9390IT N/A 1 $23,392.00 $23,392.00
  • 75. 74 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Cabinet N-Series TeraFrame Gen 3 Network Cabinet 45 1 $4,275.95 $4,275.95 PDU ServerTech CW-24V PDU N/A 3 $1,160.95 $3,482.85 Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $437.95 $437.95 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $393.53 $787.06 Rack Mounting Cisco 2504 Wireless Controller Rack Mount Bracket - rack mounting kit N/A 1 $67.99 $67.99 Servers and OS Storage HP Modular Smart Array 2040 SAN Dual Controller 2 2 $80,000.00 $160,000.00 50TB historian HP ProLiant DL560 Gen8 Server 2 1 $10,000.00 $10,000.00 Server Enclosure HP BLc7000 Platinum Enclosure w/ 1 Phase 2 Power Supplies 4 Fans ROHS 10 1 $7,381.00 $7,381.00 Blades BL620c Blade N/A 8 $15,096.00 $120,768.00 Total Hardware $808,690.34 License and Warranties Type Description Quantity Cost Total Cost/Mont h Total Cost/Year Total Cost For 3 Years extended service agreement Cisco ASA 5585 2 $13,753.99 $2,292.33 $27,507.98 $82,523.94 extended service agreement Cisco Nexus 3548 2 $2,648.99 $441.50 $5,297.98 $ 5,893.94 extended service Cisco ASR 1004 2 $8,038.99 $1,339.83 $16,077.98 $48,233.94
  • 76. 75 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 agreement extended service agreement Cisco Aironet 3602I 3 $94.99 $23.75 $284.97 $854.91 extended service agreement Cisco 2504 Wireless Controller 1 $497.99 $41.50 $497.99 $1,493.97 extended service agreement Cisco Unified IP Phone 7942G 30 $9.99 $ 24.98 $299.70 $899.10 License Linux Red Hat 8 $ 3,528.00 $2,352.00 $28,224.00 $84,672.00 Support vmware vsphere enterprise 24X7 8 $ 4,773.16 $ 3,182.11 $38,185.28 $114,555.8 4 Total Cost $ 9,697.99 $116,375.8 8 $349,127.6 4
  • 77. 76 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Chicago Solstictix Logical diagram For the Chicago Solsticix location low latency is vital. The Cisco ASR 1004 routers and Cisco Nexus 3548 will provide us with the lowest latency possible. All connections will be terminated in either CHI-SOL-CR1 or CHI-SOL-CR2. We will be using JP and KQ Telco for our connections from Chicago Office, MYSE, MASDAQ, and Toronto Headquarters. We will also be using Lyric A and Lyric B for our Market Data connection. Chicago Office has a dual direct point-to-point 1Gbps connection to Chicago Solsticix, each connection will be provided by either JP or KQ Telco and will be terminated in opposite routers for redundancy. MYSE and MASDAQ will connect to Chicago Solsticix via a dual 1Gbps connection provided by both JP and KQ Telco. Each pair of connections will terminate into opposite routers for redundancy. Lastly, there is one 100Mbps MPLS connection to Toronto for precautionary measure if something should happen to our 1Gbps connections from Chicago office.
  • 78. 77 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Address Scheme The IP address allocation of 10.5.1.0 /24 was assigned to all networking devices at the Chicago Colocation. The servers will be assigned a static IP depending on which service/application will be running on it. Those IPs will be allocated from the MYSE, MASDAQ or from the two Lyric feeds. Device Interface IP Address Subnet Mask CHI-SOL-CR1 S0/0 10.3.1.2 /30 CHI-SOL-CR1 G0/2 10.5.1.0 /30 CHI-SOL-CR1 G0/3 10.5.1.26 /30 CHI-SOL-CR2 S0/0 10.3.1.6 /30 CHI-SOL-CR2 S0/1 10.2.1.14 /30 CHI-SOL-CR2 G0/1 10.5.1.21 /30 CHI-SOL-CR2 G0/2 10.5.1.29 /30 CHI-SOL-SW1 G0/0 10.5.1.18 /30 CHI-SOL-SW1 G0/1 10.5.1.22 /30 CHI-SOL-SW2 G0/0 10.5.1.26 /30 CHI-SOL-SW2 G0/1 10.5.1.30 /30 Servers to MYSE 172.17.1.0 /24 Servers to MASDAQ 68.63.1.0 /24 Lyric A Feed 10.251.1.0 /24 Lyric B Feed 10.251.129.0 /24
  • 79. 78 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical Diagram The Chicago Solsticix is unique in the sense that we will be renting a rack to house all our network equipment. We will be using high performance routers to support all the connections that will be terminating at our rack. There will be two Cisco ASR 1004 that will route the traffic to our switches and two Cisco Nexus 3548 switches that will forward the traffic to our servers. There is no firewall at this location due to the fact that firewalls will increase delay and can be high in latency. The PDUs are mounted vertically on the rack. There are two UPS back up power supply units to provide redundancy in case if there is any power failure.
  • 80. 79 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power specifications There will be two APC Smart-UPS 5000VA 230V UPS. Both of these UPS will be installed on the rack for the Chicago Solsticix location. This UPS is able to support 4000 watts. The reason that we have two UPS is that this way there is redundancy in power supply. If power fails in one UPS this way there is a backup. The devices in the rack will need to be divided among both UPS. Chicago Solsticix Power Consumption Device Quantity Watts/Device Total Watts Cisco Nexus 3548 2 152.00 304.00 Cisco ASR 1004 2 1020.00 2040.00 HP BLc7000 1 2460.00 2460.00 Total 5 3632 4804 Servers The servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. All of the services that are needed for trading will be running on the hardware directly off of Red Hat Linux for Enterprise. There will be no development environment at this location since it is only needed for trading. All of the servers will be in production, also there will be redundant servers at this location in case one of them happens to fail, and the backup server will take on the Trading responsibilities.
  • 81. 80 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing Cross-Connect and Rack Rental pricing is not included in this table. Please see Financials section. Chicago Solsticix Equipment List and Pricing Network Hardware Type Description Size Quantit y Cost Total Cost Router Cisco ASR 1004 Router 40Gbps / Route Processor 2 / SPA Interface Processor 40G / 4 x 1-Port 10 Gigabit Ethernet Shared Port Adapter 2 2 $70,927.99 $141,855.9 8 Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98 SFP, Line Cards, Modules Module Cisco 8 Port Gigabit Ethernet Shared Port Adapter Mfr P/N SPA- 8X1GE-V2 N/A 2 $4,505.43 $9,010.86 Module Cisco 10G SR SFP Module N/A 20 $435.99 $8,719.80 Cabinets, PDU, ect. Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $437.95 $437.95 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $393.53 $787.06 PDU ServerTech CW-24V PDU N/ A 2 $1,160.95 $2,321.90 UPS APC Smart-UPS 5000VA 230V UPS 5 2 $3,300.00 $6,600.00 Servers and Software
  • 82. 81 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Server Enclosure HP BLc7000 Platinum Enclosure w/ 1 Phase 2 Power Supplies 4 Fans ROHS 10 1 $15,981.0 0 $15,981.00 Blades BL620c Blade N/ A 8 $7,381.00 $59,048.00 $ 276,942.53 Licenses and Warranties Type Description Quantit y Cost Total Cost/Month Total Cost/ Year Total Cost For 3 Years extended service agreemen t Cisco Nexus 3548 2 $2,648.99 $441.50 $5,297.98 $15,893.94 extended service agreemen t Cisco ASR 1004 2 $8,038.99 $1,339.83 $16,077.9 8 $48,233.94 License Linux Red Hat 8 $3,528.00 $2,352.00 $28,224.0 0 $84,672.00 Support vmware vsphere enterprise 24X7 8 $4,773.16 $3,182.11 $38,185.2 8 $114,555.8 4 $7,315.44 $87,785.2 4 $263,355.7 2
  • 83. 82 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 New York Solstictix Logical diagram For the New York Solsticix location low latency is vital. To provide the lowest latency we will be using two Cisco ASR 1004 routers and Cisco Nexus 3548. These two pieces of equipment will provide us with the lowest possible latency. All connections will be terminated in either NY- SOL-CR1 or NY-SOL-CR2. We will be using JP and KQ Telco for our connections from New York Office, MYSE, MASDAQ, and Toronto Headquarters. We will also be using Lyric A and Lyric B for our Market Data connection. New York Office has a dual direct point-to-point 1Gbps connection to New York Solsticix, each connection will be provided by either JP or KQ Telco and will be terminated in opposite routers for redundancy. MYSE and MASDAQ will connect to New York Solsticix via a dual 1Gbps connection provided by both JP and KQ Telco. Each pair of connections will terminate into opposite routers for redundancy. Lastly, there is one 100Mbps MPLS connection to Toronto for precautionary measure if something should happen to our 1Gbps connections from New York office.
  • 84. 83 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 IP Address Scheme The IP address allocation of 10.6.1.0 /24 was assigned to all networking devices at the New York Colocation. The servers will be assigned a static IP depending on which service/application will be running on it. Those IPs will be allocated from the MYSE, MASDAQ or from the two Lyric feeds. Device Interface IP Address Subnet Mask NY-SOL-CR1 S0/0 10.4.1.2 /30 NY-SOL-CR1 G0/2 10.6.1.0 /30 NY-SOL-CR1 G0/3 10.6.1.26 /30 NY-SOL-CR2 S0/0 10.4.1.6 /30 NY-SOL-CR2 S0/1 10.2.1.30 /30 NY-SOL-CR2 G0/1 10.6.1.21 /30 NY-SOL-CR2 G0/2 10.6.1.29 /30 NY-SOL-SW1 G0/0 10.6.1.18 /30 NY-SOL-SW1 G0/1 10.6.1.22 /30 NY-SOL-SW2 G0/0 10.6.1.26 /30 NY-SOL-SW2 G0/1 10.6.1.30 /30 Servers to MYSE 172.17.2.0 /24 Servers to MASDAQ 68.63.2.0 /24 Lyric A Feed 10.250.2.0 /24 Lyric B Feed 10.250.129.0 /24
  • 85. 84 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Physical Diagram The New York Solsticix is unique in the sense that we will be renting a rack to house all our network equipment. We will be using high performance routers to support all the connections that will be terminating at our rack. There will be two Cisco ASR 1004 that will route the traffic. The Cisco Nexus 3548 switches will then push the traffic to our servers. There is no firewall at this location due to the fact that firewalls will increase delay and can be high in latency. The PDUs are mounted vertically on the rack. There are two UPS back up power supply units to provide redundancy in case if there is any power failure.
  • 86. 85 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Power specifications There will be two APC Smart-UPS 5000VA 230V UPS. Both of these UPS will be installed on the rack for the New York Solsticix location. This UPS is able to support 4000 watts. The reason that we have two UPS is that this way there is redundancy in power supply. If power fails in one UPS this way there is a backup. The devices in the rack will need to be divided among both UPS. Chicago Solsticix Power Consumption Device Quantity Watts/Device Total Watts Cisco Nexus 3548 2 152.00 304.00 Cisco ASR 1004 2 1020.00 2040.00 HP BLc7000 1 2460.00 2460.00 Total 5 3632 4804 Servers The servers that will be at this location will be the HP ProLiant 620c. There will be 8 of these blades at this location. The specifications for the server are as follows: 64GB RAM, 2 X 10-core Intel Xeon processor 2.00GHz. The RAM is upgradeable to 1TB. All of the services that are needed for trading will be running on the hardware directly off of Red Hat Linux for Enterprise. There will be no development environment at this location since it is only needed for trading. All of the servers will be in production, also there will be redundant servers at this location in case one of them happens to fail, and the backup server will take on the Trading responsibilities.
  • 87. 86 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment list and pricing Cross-Connect and Rack Rental pricing is not included in this table. Please see Financials section. New York Solsticix Equipment List and Pricing Network Hardware Type Description Size Quantit y Cost Total Cost Router Cisco ASR 1004 Router 40Gbps / Route Processor 2 / SPA Interface Processor 40G / 4 x 1-Port 10 Gigabit Ethernet Shared Port Adapter 2 2 $70,927.99 $141,855.9 8 Switch Cisco Nexus 3548 1 2 $16,089.99 $32,179.98 SFP, Line Cards, Modules Module Cisco 8 Port Gigabit Ethernet Shared Port Adapter Mfr P/N SPA- 8X1GE-V2 N/A 2 $4,505.43 $9,010.86 Module Cisco 10G SR SFP Module N/A 20 $435.99 $8,719.80 Cabinets, PDU, ect. Copper Patch SpaceGain CAT6 High Density , Unshielded 48 Port 1 1 $437.95 $437.95 Fiber Patch RackMount Fiber Patch Panel JPM370-A-PR, 24 Port 1 2 $393.53 $787.06 PDU ServerTech CW-24V PDU N/ A 2 $1,160.95 $2,321.90 UPS APC Smart-UPS 5000VA 230V UPS 5 2 $3,300.00 $6,600.00 Servers and Software
  • 88. 87 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Server Enclosure HP BLc7000 Platinum Enclosure w/ 1 Phase 2 Power Supplies 4 Fans ROHS 10 1 $15,981.0 0 $15,981.00 Blades BL620c Blade N/ A 8 $7,381.00 $59,048.00 $ 276,942.53 Licenses and Warranties Type Description Quantit y Cost Total Cost/Month Total Cost/ Year Total Cost For 3 Years extended service agreemen t Cisco Nexus 3548 2 $2,648.99 $441.50 $5,297.98 $15,893.94 extended service agreemen t Cisco ASR 1004 2 $8,038.99 $1,339.83 $16,077.9 8 $48,233.94 License Linux Red Hat 8 $3,528.00 $2,352.00 $28,224.0 0 $84,672.00 Support vmware vsphere enterprise 24X7 8 $4,773.16 $3,182.11 $38,185.2 8 $114,555.8 4 $7,315.44 $87,785.2 4 $263,355.7 2
  • 89. 88 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Security Policy We have selected two different methods of making sure that our network is secure. These methods are going to work in conjunction with our DMZ. All inbound traffic from the Internet is sent through one of four Cisco ASA 5585 Firewalls. For Intrusion Detection Systems, Intrusion Prevention systems and email filtering we will be using Websense Security Gateway. All of these put together will work to stop any potential attacker that is trying to get into our network. This product also provides reporting capabilities that help to see what is the most common traffic being used and who is using what. Features for both shown below. The Cisco ASA 5585-X Features: ●40 Gbps maximum firewall throughput ●350,000 connections per second ●10 million concurrent connections ●250 security contexts ●1,024 VLANs Websense Security Gateway features: ●uses real-time, inline security analysis ●protects entire network, including headquarters, branch offices and remote and mobile users. ●conserves your network bandwidth by removing spam and threats from inbound email ● provides point-of-click threat analysis by isolating suspicious links embedded in emails and analyzing their destination when users click on them. ● provides 99.999% service availability and 99% or higher spam detection These two products working together will provide us with the security we need. These products are the top leaders in their field and provide a good solution to security.
  • 90. 89 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Financials These financials show the Total Cost of Ownership for Three Years. These financials do not account for all the costs that are associated with this design. The following are the cost exclusions: ● User Workstations, OS and Office Products ● User laptops, tablets and smartphones ● Printers ● Software Costs OS and office suite. You must however specify ● Wiring costs. ● Cost of electrical circuits ● Cost of external generator for Toronto Data Center. ● Cost of HVAC at the datacenters ● Fire suppression. ● Office lease and construction costs. ● Support staff salaries and benefits. ● Trading application software development. ● Accounting software licensing The tables below show the Total cost of Ownership for Hardware, Implementation Plan and Licenses and Warranties per Location, Total Cost of Circuit and services per type of services (T1, 1Gbps) and Total Cost of Ownership for three years. Total Cost of Ownership Hardware Location Cost Chicago Solsticix $276,942.53 New York Solsticix $276,942.53 Chicago Office $808,690.34 New York Office $808,690.34 Nassau Headquarters $191,167.56 Toronto Headquarters $2,796,718.66 Total Cost $5,159,151.96 Total Cost of Circuit Connects and Services Service Cost per Month Cost per Year Cost for 3 Years T1 Connections $ 43,400.00 $520,800.00 $1,562,400.00
  • 91. 90 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 1 Gbps P2P $9,000.00 $108,000.00 $324,000.00 100 Mbps Internet $9,600.00 $115,200.00 $345,600.00 100 Mbps MPLS $8,600.00 $103,200.00 $309,600.00 MYSE $12,000.00 $ 144,000.00 $432,000.00 MASDAQ $ 12,000.00 $144,000.00 $432,000.00 Lyric A and B $28,000.00 $336,000.00 $1,008,000.00 Solsticix Rack Leasing $ 8,000.00 $96,000.00 $288,000.00 Solsticix Cross-Connects (8) $2,400.00 $28,800.00 $86,400.00 Total $133,000.00 $1,596,000.00 $4,788,000.00 Total Cost of Licenses and Warranties Location Cost per Month Cost per Year Cost for 3 Years Chicago Solsticix $7,315.44 $87,785.24 $263,355.72 New York Solsticix $7,315.44 $87,785.24 $263,355.72 Chicago Office $9,697.99 $116,375.88 $ 349,127.64 New York Office $ 9,697.99 $ 116,375.88 $349,127.64 Nassau Headquarters $3,760.48 $45,125.73 $ 135,377.19 Toronto Headquarters $36,405.17 $ 436,861.99 $ 1,310,585.97 Total $74,192.50 $890,309.96 $2,670,929.88 Implementation of Plan Location Cost/Hour/Person Hours Total Chicago Solsticix $200.00 35 $14,000.00 New York Solsticix $200.00 35 $14,000.00 Chicago Office $200.00 45 $18,000.00 New York Office $200.00 45 $18,000.00 Nassau Headquarters $200.00 30 $12,000.00 Toronto Headquarters $200.00 60 $26,000.00 255 $102,000.00
  • 92. 91 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Total Cost For 3 Years Cost Hardware $ 5,159,151.96 Circuit Connects and Services $4,788,000.00 Services and Warranties $ 2,670,929.88 Implementation Plan $ 102,000.00 Total $ 12,618,081.84
  • 93. 92 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Equipment Maintenance/Replacement Strategy Throughout this network that has been designed, the equipment that has been chosen is made readily available. Since DaFun is a company that’s needs a high available network all equipment needs to be replaced within hours rather than days. Cisco provides an extended warranty called Cisco SMARTNet Premium. The features of this warranty are as follows:  software updates and upgrades  advance hardware replacement  technical support  support 24 hours a day/7days a week  Response time in 4 hours HP provides an extended warranty that is included in the price of the server. HP offers the 3/3/3 warranty, which features three years of parts, 3 years of labor and three years of on-site support. HP also has additional features such as 24 hours a day/ 7 days a week support and four hour replacement of part. Lastly Eaton UPS has the following features for their warranties:  Parts and Labor for Electronics  7x24 On-Site Corrective Maintenance  2-Hour Response  7x24 UPS Preventive Maintenance Visit (2 per year)  Battery Preventive Maintenance Visit (2 per year)  eNotify Remote Monitoring Service
  • 94. 93 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Implementation Plan To implement this plan, we would do the following.  Secure all building space and necessary connections that will be needed.  We must deploy multiple specialized teams at each location. Engineers specialized in Servers, SANS, and Routing & Switching would be part of these specialized teams. It will require about 40 to 70 hours to implement and install the equipment, however some locations might require more time.  The equipment and software will be installed to proposal and industry standards.  Everything will be documented, this includes all equipment, and cables will be labeled properly. This would help future troubleshooting.  Configure and Test equipment.
  • 95. 94 DaemonsFrequentandUrgentNet-TradersLLPImplementationPlan3/19/2014 Work Cited "Cisco 3900 Series Integrated Services Routers." Cisco. N.p., n.d. Web. 15 Mar. 2014. "Cisco ASA 5585-X Adaptive Security Appliance." Cisco. N.p., n.d. Web. 15 Mar. 2014. "Cisco Nexus 5596T Switch." Cisco. N.p., n.d. Web. 15 Mar. 2014. "Eaton FERRUPS Rackmount UPS." FERRUPS Rackmount UPS Backup Power by Eaton. 500 VA-18 KVA. N.p., n.d. Web. 15 Mar. 2014. "Hot Aisle/Cold Aisle Layout." : ENERGY STAR. N.p., n.d. Web. 15 Mar. 2014. "Web Security, Email Security, Data Security, Mobile Security - Websense.com." Web Security, Email Security, Data Security, Mobile Security - Websense.com. N.p., n.d. Web. 15 Mar. 2014. "EMC VNX Series Software FAST Suite." (FSTS-VNX7600). Web. 16 Mar. 2014. <http://www.costcentral.com/proddetail/EMC_VNX_Series_Software_FAST_Suite/FSTSVNX7 600/12103557/>. "HP DL560 Gen8 E5-4610V2 32GB US Svr. 732341-001." HP's Small & Medium Business Online Store. Web. 16 Mar. 2014. <http://h71016.www7.hp.com/dstore/MiddleFrame.asp?page=config&ProductLineId=431&Fam ilyId=3604&BaseId=43759&oi=E9CED&BEID=19701&SBLID=>. "HP Modular Smart Array 2040 SAN Dual Controller SFF Storage - Hard Drive Ar." CDW.com. Web. 16 Mar. 2014. <http://www.cdw.com/shop/products/HP-MSA-2040-SAN-DC- SFF- SToRAGE/3059407.aspx?RecommendedForEDC=00000001&RecoType=RS&cm_sp=Search- _-Session&ProgramIdentifier=3>. "HP ProLiant BL620c G7 Server Blade." HP. Web. 16 Mar. 2014. <http://www8.hp.com/us/en/products/proliant-servers/product- detail.html?oid=4268686#!tab=models>. "Network Performance Monitor." Network Monitoring Software. Web. 16 Mar. 2014. <http://www.solarwinds.com/network-performance-monitor.aspx>. "VMware VSphere Enterprise." VMware Official Online Store Online Store -. Web. 16 Mar. 2014. <http://store.vmware.com/store/vmware/en_US/pd/productID.288070900&src=WWW_eBIZ_pr oductpage_vSphere_Enterprise_Buy_US>.