Plant Operation EMCS Upgrade ATTN: Silas Biggin, Kim King CC: Toby Walker, Tim Kohberger, TNS User Support FROM: Scott Ventuleth Telecom Contact

Transcription

1 ATTN: Silas Biggin, Kim King CC: Toby Walker, Tim Kohberger, TNS User Support FROM: Scott Ventuleth Telecom Contact Friday, March 09, 2012 Attached are the Phase 1 and high priority phase 2 details for moving the existing campus EMCS to utilize the campus area network. The remaining buildings have also been documented via walkthrough but the pathway drawings have not been completed, but will be completed before July 1, This document will be used to not only plan the project but also document the project and is subject to frequent change. Let me know if I can better explain any of this. Cheers, Scott Ventuleth Network Analyst Scott.Ventuleth@humboldt.edu P age

2 Table of Contents:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Project Drivers and Phase Methodology Building Map..Page 05 Departmental Responsibilities Page 06 Network Design IP addressing..page 03 Network Security Page 03 Phase 1 Building Pathway Details: Wildlife and Fisheries (Building 11).Page 07 Phase 2 Building Higher Priority Pathway Details: Library (Building 41) Page 09 Behavioral and Social Sciences (Building 89)..Page 11 Kinesiology and Athletics (Building 24F) Page 14 Founders Hall (Building 06).Page 16 Siemens (Building 01)..Page 18 Harry Griffith Hall (Building 04).Page 22 Student Health center (Building 42).Page 26 Forestry (Building 05)..Page 28 Gist Hall (Building 23).Page 33 Natural Resources (40)..Page 36 Theater Arts (10)...Page 38 Phase 2 Buildings remaining: Nelson Hall (Building 14)...Undefined University Center (Building 45).. Undefined Music B &Art B (Building 2B & 8B).. Undefined Art A (Building 2A)... Undefined Van Matre Hall (Building 26)...Undefined Jenkins Hall (Building 07).Undefined Science Complex (Buildings 3A, 3B, 3C, 3D, 3E) Undefined Forbes Complex (Buildings 24A, 24D).Undefined Plant Operations (Building 46)..Undefined One-Time Estimated Costs: Physical Pathway Infrastructure Page 42 Networking Services.Page 42 Telecommunications Services.. Page 42 Ongoing Estimated Costs: Ethernet Services MRCs...Page 42 Total Project Costs Phase 1.Page 43 Phase 2.Page 43 Overall.Page 43 2 P age

3 Project Drivers & Phase Methodology In order to take advantage of advances in more modern networking technologies since 1992, the EMCS system will be slowly shifting EMS host machines in each building connected to a control pack (and in the future a third party EMS partner).the new system will replace a fiber point to point model utilizing fiber optic hubs operating in a single collision domain over 10Mbps half duplex. The existing campus standard for data service is a 10/100Mbps fully switched Cisco VTP domain utilizing VLANs and routers to isolate collision domains and route traffic among buildings. The new system will fully support future options in enabling campus to vendor via encrypted tunnels through the Internet otherwise known as virtual private networks (VPNs). This project aims to replace the outdated EMS network with a phased approached contingent upon available funding and business needs. This Scope of work document outlines all details required to implement Phase 1 of the upgrade which includes initial setup and then the activation of the Wildlife building, which currently has an active contractor with an EMS vendor, EnerNOC. Phase 2 will comprise the remaining buildings and be carried out over the course of FY 2012/2013. This document also includes pathway details and estimated costs to complete Phase 2. IP addressing: Since the existing EMS equipment and design is being phased out to support modern grid interactive EMS/Utility designs, the new EMS network will require Internet access but also enhanced security. For this reason the network will utilize no RFC1918 IP address yet will be located behind a campus protected secondary (server farm) firewall. This termination point will allow for easy VPN creation to and from future EMS devices and appropriate vendors. This scope of work operates using the best guessed IPv4 needs at 5 devices per building plus existing EMS controllers. 50*5 = 250 IP addresses required. The IP range used initially will be a /24 subnet at which can be expanded into if needed in the future by adding another subnet to the FW zone or by changing the subnet mask from /24 to /23. Once Phase 1 is completed, the EMS network will be protected from the Internet and campus network by using the new design and also a 1:1 NAT router between the old and new network, maintaining a more secure environment while still providing access to the Internet. Network Security: Only specific hosts excepted will be able to initiate a connection to an EMS host, all inbound initiated traffic will be denied by default. This means that other users of the campus network will be unable to forward packets to the EMS network to do anything, unless the IP address they are using has a rule allowing them. The EMS hosts will continue to have full access to the Internet, provided the EMS host itself initiates the connection. Additionally, a VPN can be terminated within this zone allowing one-hop access to an EMS vendor. 3 P age

4 The Phase 1 buildings are as follows: 1. Wildlife and Fisheries (Building 11) (Plus Network Design) The Higher Priority Phase 2 buildings are as follows: 2. Library (Building 41) 3. Behavioral and Social Sciences (Building 89) 4. Kinesiology and Athletics (Building 24F) 5. Founders Hall (Building 06) 6. Theater Arts & Music A (Building 10 & 2A) 7. Siemens (Building 01) 8. Forestry (Building 05) 9. Student Health center (Building 42) 10. Harry Griffith Hall (Building 04) 11. Gist Hall (Building 23) 12. Natural Resources (Building 40) Remaining Phase 2 buildings: 13. Nelson Hall (Building 14) 14. University Center (Building 45) 15. Music B &Art B (Building 2B & 8B) 16. Art A (Building 2A) 17. Van Matre Hall (Building 26) 18. Jenkins Hall (Building 07) 19. Science Complex (Buildings 3A, 3B, 3C, 3D, 3E) 20. Forbes Complex (Buildings 24A, 24D) 21. Plant Operations (Building 46) 22. Student Business Services (Building 100) 4 P age

5 In Scope Building Map: Color shaded buildings are include within total project scope. Buildings with Numbers are higher priority F P age

6 Departmental Responsibilities: Information Technology Services: Project Prioritization for scope of work document and Scoring, TNS resource scheduling. ITC involvement in hardware and host network configurations Telecom & Network Services: Provide plant operations with pathway design scope of work Provide plant operations with quotation for TNS costs associated with this project (in phases). Coordinate and design EMS cut-over plan, communicate status Create new Vlan, trunk, configure switches involved, update database records. Update campus mini-plans Coordinate parties and resources involved Facilities Management: Issuing campus building permit Final Inspection & Documentation Plant Operations: Fund Project cost Provide Electricians for pathway installation, including parts/labor Providing access to facilities Testing EMS operations post cut-over 6 P age

7 Pathway Details: Wildlife and Fisheries (Building 11): The EMS computer is located on the first floor mechanical room 114B. Wildlife will be much easier, considering the infrastructure is mostly in place already. TNS can complete this without plant operations involvement, since an existing pathway exists. EMS workstation Area Telecom Room hsu-wl-flr ap1 (Coiled in ceiling) P age

8 Remove cat 5 and replace with cat6 using old wire as pull string. Change Jack to Cat 6. Inside the Telecom room (106) the old cables terminate here: NOTE: The old conduit will need to be bonded using min 6AWG Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box. A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 8 P age

9 Plant Operation EMCS Upgrade-2012 Library (Building 41): The EMS computer is located in the basement mechanical room 43 (blue shading) and the telecom room is located on the same floor inside room 29 (yellow outline). A new pathway will need to be installed between the mechanical room and the existing cable tray outside room In Ce iling ??? h s u -l b -f l r ap Room 43 View of North Wall New Jack will be installed adjacent (within 2 feet) to the existing EMS computer shown here. Install dual gang box with a single gang metal conversion cover. Use ¾ inch conduit to existing cable tray. Bond conduit to tray using min 6 AWG 9 P age

10 A possible pathway is show below: Existing Cable Tray hsu-lb-flr ap Core drill quick set here Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box. A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the cable. 10 P age

11 Behavioral and Social Sciences (Building 89): The EMS computer is located in the basement mechanical room on the wall as indicated below. The first floor telecom room will service this jack and is almost directly above. EMS Area EMS computer box on wall as seen from desk Install new jack adjacent (within 2 feet) to the existing EMS computer shown above. Install dual gang box with a single gang metal conversion cover. Use ¾ inch conduit to TR above on first floor (room 0T1A). 11 P age

12 A possible conduit pathway is show below: Looking up from basement to TR, (try to use existing drill point EMS Area View from first floor telecom room T-1A TC P age

13 Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box. A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the cable. Sharing the pathway with the EMS sensors (shown in the purple conduit) is not an option due to fill capacity and category 6 EMI considerations. 13 P age

14 Kinesiology and Athletics (Building 24F): The EMS computer is located on the third floor mechanical room 372A. K&A will be much easier, considering the infrastructure is mostly in place already. A jack pull back will be required and a short conduit will need to be installed. BOILER M-3B ELEV 000 W TOILET 376B VEST 376A EMS Computer EL/M-3A ELEV MECH New Jack will be installed adjacent (within 2 feet) to the existing EMS computer shown here. Install dual gang box with a single gang metal conversion plate. Use ¾ inch conduit to existing conduit above. TNS will pull back the cable assigned Jack number 2154 and re-terminate here. (Cable is looped in boiler room) 14 P age

15 Connect new ¾ inch conduit to existing TIS infrastructure shown here. Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box. A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will pull back and re-terminate the cable. 15 P age

16 Founders Hall (Building 06): The EMS computer is located inside the basement mechanical room 01A. Fortunately the telecom room is located almost directly above the computer itself. A new pathway using a conduit must be installed that follows the chimney. A core drill will be required. EMS Area Connect new ¾ inch conduit to TR above Conduit will terminate inside the Telecom room 0018 at the ladder rack hsu-fh-flr ap1 16 P age

17 The conduit will need to bonded to the ladder rack with 6AWG. Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box. A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 17 P age

18 Siemens (Building 01): The EMS computer is located inside the basement floor mechanical room (Room 5F). The Telecom room ins in room 5B Courtesty: EMS AREA Courtesty: Camera 5B ATT Swi tch SH Core Octel HP Rack ATT Fiber Camera 5A There does exist a pathway using raceway, which will not be sufficient given how it is run and where it terminates, and lack of EMI protection. A new conduit will need to be run from the Telecom room 5B to 5F following an existing path that has been used previously. It will be more complicated than other buildings. Path summary shown below P age

19 Courtesty: Here are images of the pathway starting from the TR. Room 5B Outside Room 5A 19 P age

20 Wall opposite Room 5A Inside Mechanical room, north side of fan unit. Pull box here 20 P age

21 Follow existing pathway, then cross fan unit Now in mechanical room, run conduit to EMS area. Pull box here Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box (NOTE This Job will require a few of them). A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 21 P age

22 Harry Griffith Hall (Building 04): The EMS computer is located inside the penthouse on the upper most floor (roof) on the south side (you have to exist to the roof to get to the south room) - one of the more complicated runs. A new pathway will need to be installed to the location from the second floor Telecom room # 215 and will follow the pathway used for EPAS. This pathway begins inside room 215 in a separate conduit (shown below). 22 P age

23 Conduit then runs to the closet door accessible near the staircase leading up to the penthouse. Conduit elbow will be installed, continuing to follow existing path of EPAS until it is outside. 23 P age

24 Once outside, run down the metal wall to the wall near EMS equipment. Really the pathway can best be determined by the conduit installer, this is just a suggestion. <space intentionally left blank> 24 P age

25 Here s the second floor mini plan: EPAS Equipment to be located in data rack hsu-hg-flr am Access to penthouse here: Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box (NOTE This Job will require a few of them). A pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 25 P age

26 Student Health center (Building 42): The EMS computer is located inside the telecom room on the basement level, room 2. A quick conduit can be run from the ladder rack to the EMS machine and we re in business. Alternatively, the existing conduit can be used, provided that the fiber optics are removed. However this determination would have to be made by a building engineer Ladder Rack EMS Area 26 P age

27 Existing fiber pathway: Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box a pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 27 P age

28 Forestry (Building 05): The EMS computer is located inside the telecom room on the first floor room 108. An existing conduit that isn t being used can be modified to work by an electrician rather easily. Telecom Room 109 EMS A EMS Area Existing ½ inch conduit. The ½ inch existing conduit can be cut and redirected to the EMS computer where a new faceplate and jack will be installed. See next page for how this will work. 28 P age

29 Starting in the Telecom room, the ½ conduit will be cut at the ladder rack right here. It can then be bonded to the rack with min. 6AWG The conduit passes through the concrete wall to the mechanical room where it will be cut again right here. 29 P age

30 30 P age

31 To EMS Computer 31 P age

32 Of course for this to work, the cable inside that conduit will have to be removed first. It appears to be an older thermostat that is no longer being used. Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box a pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 32 P age

33 Gist Hall (Building 23) The EMS computer is located inside the fan room on the first floor (room 113). A new conduit will need to be run from telecom room 2 (117A) to room 113 following an existing TII prepared pathway shown below h su- gh- flr ap EMS Area There are numerous elevation changes in the conduit path. Starting with the conduit leaving the TR 33 P age

34 The pathway transverses room 115 and then passes into the mechanical room. Changes directions and then goes over a duct. 34 P age

35 Where a pull box will be installed before turning to head south towards the EMS area. Other Notes: The new conduit must be a minimum of ¾ inches and must not have any more than (2) 90 degree turns without a pull box a pull string shall be left by the electrician for TNS. Really any way the electrician can get to an existing cable tray will work, but the bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 35 P age

36 040-R R Plant Operation EMCS Upgrade-2012 Natural Resources (Building 40): The EMS computer is located inside the basement mechanical room. A new conduit will need to be installed from the Telecom room in Room 1B to its location. EMS Machine New 1.25 conduit through open space in basement Last Update: Updated By: 6 /25/8 BAH 36 P age

37 Place Jack here: Conduit will terminate in Telecom room 1A or 1B. Other Notes: The new conduit must be a minimum of 1.25 inches and must not have any more than (2) 90 degree turns without a pull box a pull string shall be left by the electrician for TNS.A bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 37 P age

38 Theater Arts (Building 10): The main EMS computer in this building is inside the boiler room (7A) and controls old music (Building 8A) as well as the upper fan room mechanical room. Fortunately, there exists a pathway nearby already installed that can be modified to work with minimal labor. Existing pathway to gas meter EMS Computer: Coiled in ceiling New Pathway Last Update: 10/17/11 To modify the pathway we will install a junction box on an existing 1.25 conduit and then run a new conduit from room 7 to 7a. No core drilling will be required since there is already an opening for conduits. 38 P age

39 The conduit is carrying (2) jack right now, so we will need to pull these cables back to the tray, then cut the conduit and install a pull box. TNS will re-pull these through when we add a new line for the EMS machine. We want these jacks to stay put here for the gas meter outside. The pull box to intercept the existing conduit can be installed here on the ceiling. 39 P age

40 The new conduit will then pass through this opening in the wall between rooms 7 and 7A to the boiler room. (Image shows view from boiler room) At this point the conduit just needs to be run next to the EMS machine any way possible. It might be a good idea to have another pull box to additional jacks can be added more easily in the future (i.e. generator control). 40 P age

41 Other Notes: The new conduit must be a minimum of 1.25 inches and must not have any more than (2) 90 degree turns without a pull box a pull string shall be left by the electrician for TNS.A bonded conduit is necessary to shield the low voltage wire from high EMI levels in mechanical rooms. Once the pathway is in place, notify TNS User Support at x5000 and we will install and terminate the jack. 41 P age

42 One-Time Estimated Costs: Physical Pathway Infrastructure: TNS cannot make this determination, if a formal estimate is required, this document can be forwarded to work control for a work request estimate. Networking Services: A onetime consultation fee for our implementation of the network design may be charged. This is to cover our time and any pro-rated licensing required implementing VPNs through the campus firewalls for this project. Typically with similarly sized projects, this fee would range from 2-3K. \ Telecommunications Services: Operating on decades old policy, state and non state agencies pay different rate for labor, installation and configuration of data Ethernet services. Plant Operations is a state entity which would be applied to the following costs: Per Switch-Port One Time Configuration: $100 New Jack Installation: $75 Labor $35 This means that for each EMS computer we connect to the network, $210 will be charged during the month the work is completed. Ongoing Estimated Costs: Telecommunications Services: A 4$ per month fee will be charged for each Ethernet line activated for this project. This will be billed at the beginning of every month. Think of this fee as a maintenance fee to ensure that the connection continues working in good order. If the connection develops faults or requires troubleshooting we will respond promptly. 42 P age

43 Total Project Costs by Phase (Excluding Plant Operation Pathway Installation) Phase 1: Implement Design and Cut-Over Wildlife Building (VPN to EnerNOC) Network Services: Consult Fee of $2000 Telecommunications: Ethernet Add on New Jack $210 Monthly Recurring Charges: Increase by $4/month Total Phase 1: $2210 in OTCs. Additional $4/month MRCs Phase 2: Cut-over remaining EMS computers campus-wide FY 2012/2013 Network Services: No charges. Telecommunications: Ethernet Adds on New Jacks (25 x $210) = $5250 Monthly Recurring Charges: Increase by $100/month Total Phase 2: $5250 in OTCs. Additional $100/month MRCs Grand Total Project Cost over FY 11/12 & 12/13: TNS Scope: $7468 in OTCs, $104 increase to MRCs Electricians: $TBD by work Control ~$7, Electrician Time & Materials 43 P age

44 EMS Machine EMS Machine EMS Machine Engineer EnerNOC, vpn/fw EMS Machine 10Mbps hub Temporary Static 1:1 NAT Router Bridges Old and New Networks until project completion E0: /24 E1: NR EMS Machine EMS Machine EMCS Network L2 Vlan /24 EMS Machine Johnson Controls vpn/fw INTERNET Route/ Switch Core HSU Other Vendor vpn/fw Edge FW Cluster Untrust to Trust, Allow VPN connections from vendors. Inbound rule set TBD SH VM Data Center Cluster Zone EMCS L3 Gateway. IP Address /24 Encrypted VPN Tunnel VPN termination Zone EMCS Deny Inbound Init. Permit Outbound Init. Inbound rule set TBD