Network Policy Standards: Wired & Wireless (ACIS Policy)

Statement of Policy

At Lehigh University, one of the resources critical to its mission is access to a state-of-the-art and fault-tolerant complement of network services, both wired and wireless. All faculty, staff, and students have come to rely on the campus network for intracampus communication, classroom instructional
delivery, research/administrative support services, and access to the Internet and Internet2 for global communication.

Library and Technology Services (LTS) is charged with and is responsible for developing and maintaining a secure and fault-tolerant campus network to support instruction, research, administrative activities and university outreach. Under this broad responsibility for assuring the campus has access to a stable, secure, and fault-tolerant network, LTS must develop and promulgate campus-wide network standards (wired and wireless) to meet the networking requirements of all campus constituencies and limit access to network connections which do not conform to generally accepted standard network protocols and security measures.

Definitions

Campus Network refers to the campus-wide network and associated network services established, funded and supported by Library and Technology Services for general academic and administrative use. This network is also referred to as the "backbone network."

Department-Managed Networks a network facility and associated services that support specific department-internal activities and which receives financial, technical and operational support from resources supplied by the department.

Implementation of Policy

1. Implementation Philosophy

   The University recognizes that different needs of campus constituents may lead to conflicts in standards, priorities, and operations. LTS will work with representatives from the appropriate constituent groups to seek balanced solutions to problems identified under this policy. Effective implementation of this policy requires the close cooperation of all network stewards across the campus.

2. Mediation of Disputes

   In the event that a dispute arises in the administration of this policy:

   • ACIS will provide clarification of this policy statement or its implementation activities.
   • Further arbitration of disputes arising from this policy will be brought to the Provost for resolution.

3. Library and Technology Services will review requests for:

   • all connections to the campus network
   • expansion of network segments attached to the campus network
   • the installation of network interface equipment, and
   • the connection of departmental networks to the campus backbone.

   The objective of this network policy standard is to ensure that new and
   existing network connections will have no consequential impact on the reliability,
   stability, or maintainability of the campus-wide network (wired and wireless)
   and that they conform to specified technical, operational, and maintenance
   standards prior to their approval to connect.

   It is also the objective of this network policy to ensure that the operation,
   maintenance, or expansion of the campus network will have no consequential
   negative impact on department-managed networks (wired or wireless).

4. To ensure that intra-institutional wireless utilization is centrally coordinated,
   Library and Technology Services will develop and maintain a consolidated repository of the wireless networks implemented on campus. This repository will include the purpose, the contact person, the wireless coverage area, the technology utilized, and relevant configuration information about each wireless network or subnet, centrally supported or department-managed.

5. Library and Technology Services will develop, publish and maintain a set of standards
   which will ensure that network segments and connections can interact appropriately with the campus-wide network, that network security is maintained, and that network hardware and software is maintainable. Standards will include but not be limited to such issues as:

   • Electronic interface
   • Cable plant used within the subnet
   • Internal configuration
   • Security practices
   • Use of appropriate network monitoring procedures
   • Up-to-date network diagrams
   • Contact information

6. Library and Technology Services will initiate semi-annual bandwidth utilization and/or projection reviews to ensure we are able to plan for future needs and as an aid in detecting potentially spurious traffic.

7. Library and Technology Services reserves the right to scan network connected hosts to understand what resources are connected to the network and the vulnerability of each. Library and Technology Services will provide advanced notification to departmental network managers, where applicable, prior to initiating such activities.

8. Library and Technology Services will perform an annual review and certification that each network subnet conforms to the specified standards. Networks failing to meet the review standards may be disconnected. The actual action taken will depend on the severity of the discrepancies and the associated vulnerability of the network. To that end, Library and Technology Services will take all reasonable steps, consistent with the risk posed, to help departments resolve the non-compliance issue.

9. The standards which will be used to assess network requests will be reviewed and updated as necessary or at least twice annually.

Original effective date: February 1, 2001
Revision effective date: February 1, 2001