35
LAUSD IT Architecture Summary Revised - March 1, 2007 Los Angeles Unified School District Information Technology Division 333 South Beaudry Ave. 10 th Floor, Suite 167 Los Angeles, CA 90017

LAUSD TECHNOLOGY PLAN

Embed Size (px)

Citation preview

Page 1: LAUSD TECHNOLOGY PLAN

LAUSD IT Architecture

Summary

Revised - March 1, 2007

Los Angeles Unified School District Information Technology Division

333 South Beaudry Ave. 10th Floor, Suite 167

Los Angeles, CA 90017

Page 2: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

TABLE OF CONTENTS 1. REVISION HISTORY ......................................................................................................................................3 2. INTRODUCTION..............................................................................................................................................4

2.1 DISTRICT IT AT A GLANCE ..........................................................................................................................4 2.1.1 Central Tier ...........................................................................................................................................5 2.1.2 Distribution Tier ....................................................................................................................................5 2.1.3 Edge Locations ......................................................................................................................................6

2.2 ORGANIZATION OF THE DOCUMENT ............................................................................................................7 3. LAUSD BACKGROUND..................................................................................................................................8

3.1 FOCUS ON INFORMATION TECHNOLOGY......................................................................................................8 4. ORGANIZATIONAL STRUCTURE OF THE INFORMATION TECHNOLOGY DIVISION.............10

4.1 CHARTER...................................................................................................................................................10 4.2 ITD ORGANIZATION STRUCTURE ..............................................................................................................12 4.3 RELATIONSHIP WITH PROCUREMENT.........................................................................................................13

5. IT ARCHITECTURE AND SUMMARY ......................................................................................................14 5.1 IT MANAGEMENT AND PLANNING DOMAIN ..............................................................................................14 5.2 IT SUPPORT DOMAIN.................................................................................................................................14 5.3 IT SECURITY DOMAIN ...............................................................................................................................15 5.4 INFORMATION DOMAIN – DATA REPOSITORIES AND RETRIEVAL ..............................................................15 5.5 APPLICATIONS DOMAIN ............................................................................................................................16 5.6 NETWORK INFRASTRUCTURE DOMAIN ......................................................................................................16 5.7 USER SYSTEMS DOMAIN ...........................................................................................................................17

6. CURRENT STATE OVERVIEW ..................................................................................................................18 6.1 NETWORK INFRASTRUCTURE DOMAIN ......................................................................................................18

6.1.1 Central Core -- WAN ...........................................................................................................................18 6.1.2 Edge Locations -- WAN .......................................................................................................................19 6.1.3 Edge Locations -- LAN ........................................................................................................................21 6.1.4 Telecommunications ............................................................................................................................22 6.1.5 Core IP Network Services – Centrally Maintained..............................................................................24 6.1.6 Convergence ........................................................................................................................................26

6.2 APPLICATIONS AND DATA DOMAIN ..........................................................................................................26 6.2.1 Central -- Business Functions and Data..............................................................................................27 6.2.2 Central -- Student and School Management Systems and Data...........................................................28 6.2.3 Application and Database Technologies .............................................................................................28

6.3 USER SYSTEMS DOMAIN ...........................................................................................................................30 6.4 INFORMATION SECURITY DOMAIN ............................................................................................................31 6.5 INTRUSION DETECTION SYSTEMS..............................................................................................................32

7. STANDARDS AND SPECIFICATIONS.......................................................................................................34 7.1 IT RELATED CONSTRUCTION SPECIFICATIONS ..........................................................................................34

Revised - March 1, 2007 2 of 35

Page 3: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

1. REVISION HISTORY

Original Document Issue June 30, 2006

Revision – Change Plan Name from March 1, 2007 “IT Architecture Contract Summary” to “IT Architecture Summary”

Revision – Updated Organization Charts March 1, 2007

Revision – Updated Network Diagrams March 1, 2007

Revised - March 1, 2007 3 of 35

Page 4: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

2. INTRODUCTION The Los Angeles Unified School District (LAUSD/the District) is an educational institution serving the second largest student population in the country. It is committed to providing the highest quality instructional services to a constituency whose needs range broadly in both scope and complexity. As with other educational institutions, the District’s resources and budget are limited. To meet the IT needs of its constituency within these constraints; LAUSD pursues long-term solutions from a foundation of defined standards and proven interoperability.

The District’s Information Technology Division (ITD) has developed this document as a resource for parties seeking to provide products and/or services to the District. The following sections provide an overview of District IT infrastructure to assist prospective vendors in providing more comprehensive proposals and solutions that maximize use of existing District technology assets and investment.

The information contained within this document represents a snapshot in time. The District’s environment is dynamic, and it is important to note that while the District has made a substantial effort to ensure the accuracy and completeness of this information, ongoing change and the increasing scope of LAUSD technology infrastructure may result in infrastructure modifications not reflected by this document. The District makes no warranties as to the accuracy, completeness, or timeliness of the information contained in this document. Prospective vendors should directly validate any information in this document prior to using the information as the basis for decisions with a material impact.

The following sub-section provides a high-level overview of District IT infrastructure. It contains a brief description of the underlying structure and scope of IT used within LAUSD to act as a foundation for the detail provided in subsequent sections.

2.1 District IT at a Glance At the highest level, District IT architecture is comprised of three tiers: a central core, distribution layer, and edge locations consisting of over 1200 schools, adult education facilities, child development centers, administrative offices, and other functions spread across roughly 700 square miles. In each of these tiers, the District has deployed and maintains IT infrastructure to provide voice, data, and video services to its constituency. This document examines the services provided at each tier separately.

Revised - March 1, 2007 4 of 35

Page 5: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

2.1.1 Central Tier Within the District’s central facilities is a core Wide Area Network (WAN) providing a high-speed, switched network fabric for TCP/IP-based communications. Data services across this fabric include 3270 access to central mainframes, Internet access via multiple connections and ISPs, and typical file and printer sharing services.

User systems include Apple laptops and desktops, Intel-based desktops, servers, and laptops. Applications include typical office automation applications for PCs and a wide variety of custom and COTS applications running on mainframe, UNIX-based midrange, and Windows-based microcomputer systems. Infrastructure IP address delivery and name resolution services (DHCP and DNS) are centrally managed with the former implemented on the router infrastructure and the latter served by AIX and Windows servers.

Central Core

Distribution

EdgeLocation

EdgeLocation

EdgeLocation

Distribution

EdgeLocation

EdgeLocation

EdgeLocation

Distribution

EdgeLocation

EdgeLocation

EdgeLocation

Traditional PBX systems and Voice over IP (VoIP) technology provide voice services within central locations. Additionally, the District makes extensive use of various radio frequency (RF) systems for specific voice applications including mobile communications for administrative staff and for the Los Angeles Schools Police Department (LASPD).

The District’s broadcast television station KLCS provides a broad range of instructional programming via analog broadcast and has increased its capacity with the addition of multiple digital broadcast channels. The District is also exploring TCP/IP-based video delivery systems for deployment across its core network.

2.1.2 Distribution Tier The District IT infrastructure distribution tier connects edge locations to the core tier. For data communications, the majority of edge locations have one or more T1 circuits. These circuits run from the edge location into the carrier’s facility where they are aggregated into T3 circuits. The resulting T3 circuits are run to District distribution routers that provide connectivity to the core.

Other forms of connectivity between the edge and core include DSL and wireless. DSL is used primarily to connect smaller locations in a cost-effective manner. In a few cases, 802.11 wireless connectivity is used to extend the edge connection at one edge location to other edge locations with close physical proximity.

Revised - March 1, 2007 5 of 35

Page 6: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

2.1.3 Edge Locations District edge locations run the gamut from small offices in facilities shared with other organizations to large, multi-building school campuses. An equally broad range of technology is used to service these locations; however standards have been and continue to be applied to foster manageability.

The majority of edge locations are District schools connected to the distribution tier (see above) via one or more T1 circuits terminating at the school in an edge router. The edge router is located in an access-controlled MDF and connected to an Ethernet switch for distribution throughout the building(s) directly or through intermediate switches and hubs.

Building wiring includes both copper (predominately CAT-5) and fiber. Building backbone segments typically operate at gigabit or 100 megabit speeds. Installed LAN segments typically operate at 10 or 100 megabit and include a mix of switches and hubs. IP address delivery is provided via DHCP from the edge router, and name services (DNS) are provided centrally. Both DHCP and DNS are managed centrally. Edge locations access the Internet via connectivity to the core.

User systems include a broad range of desktops and laptops of both Apple and Intel architecture. While current standards dictate newer operating systems and hardware, components in use range from System 7.0 to OS 10.2 for Apple computers and from Windows 3.1 on Intel systems to Windows XP on newer machines.

File and print services are provided by either direct IP printing or, by Intel architecture servers running Windows NT or 2000. Standard office automation software is Microsoft Office; however AppleWorks and Microsoft Works are also in use.

PBX or Key Systems provide telephony services for the majority of schools. Over 100 schools and offices locations have adopted the VoIP technology used within the core. Some smaller locations have analog voice lines provided directly via Local Exchange Carrier (LEC). In addition to telephony, edge locations also utilize radio (variety of frequencies), public address (PA), and intercom systems for voice communications.

CAT 5e

CAT 5e

CAT 5e

CAT 5e

SiSi

SiSi

SiSi

SiSi

SiSi

SiSi

Business Office LANIDF Switch

IDF Switch

IDF Switch

IDF Switch

MDFCore Switch(es)

Router

Servers

Users & Network Devices

Schools may receive video from KLCS over the air via antenna or via commercial cable connectivity. Further, some remote locations have implemented closed-circuit television (CCTV) systems for surveillance and security purposes.

Revised - March 1, 2007 6 of 35

Page 7: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

2.2 Organization of the Document As with any complex technology environment, a detailed description of every technology area would require a document of excessive length. Instead, an overview and summary of the various IT architecture areas is provided and organized with the following structure:

LAUSD Background: Provides a brief summary of the District’s mission and the scope of its infrastructure and constituency.

ITD Organization Structure: Describes the organizational structure participating in or responsible for the technology functional areas listed above.

IT Architecture and Summary: Lists the technology functional areas addressed by this version of the contract summary document.

Overview of Current IT Architecture: Provides descriptions of the functional areas currently implemented.

ITD Standards and Specifications: Describes applicable standards and specifications adopted by the District for technologies in the covered functional areas.

ITD Major Initiatives: Describes major initiatives (if any) currently underway that may affect substantial change in the technology function areas covered by this document.

Revised - March 1, 2007 7 of 35

Page 8: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

3. LAUSD BACKGROUND The District provides educational services within the greater Los Angeles area including Los Angeles proper and several other cities in Los Angeles County. It is the second largest student population in the country with K-12 student enrollment over 727,000. The realities for the District include:

Maintaining 431 elementary schools, 73 middle schools, 53 senior high schools, 30 opportunity and alternative schools and centers, 45 continuation high schools, 19 special education schools, 160 magnet schools and centers, 26 community adult schools, 111 children’s centers, 26 primary centers, 1 newcomer school, and 11 employment preparation centers.

Multiple administration sites from small locations, to large, multi-floor office spaces. Providing educational services over an area of 710 square miles including several

other cities in Los Angeles County. Providing technology services and support to approximately 45,000 certificated

employees including teachers, counselors, library media teachers, nurses, school psychologists, and school and central administrators.

Employing almost 33,000 classified, non-teaching employees. Ongoing evaluation of alternative educational approaches, including the use and

integration of technology into the curriculum and instructional delivery within the District.

The District’s mission is as follows:

The teachers, administrators, and staff of the Los Angeles Unified School District believe in the equal worth and dignity of all students and are committed to educate all students to their maximum potential.

To meet this mission the District, like other educational businesses, must leverage technology to respond to an evolving educational setting, raising demands of access to information and interconnection to the larger global community.

3.1 Focus on Information Technology The District realizes the importance of leveraging technology to respond to evolving demands of an educational environment the size of LAUSD. As a result, the LAUSD Information Technology Division (ITD) has established IT strategic initiatives to support the District goal of providing quality education to Los Angeles students.

As one of the largest education providers in the country, the District is faced with unique challenges in terms of size and complexity. The successful implementation of the IT strategic initiatives will largely depend upon ITD’s ability to overcome the following challenges:

Rapidly growing and changing instructional needs and technologies

Revised - March 1, 2007 8 of 35

Page 9: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Securing adequate funding, expertise, and staffing Minimizing school and office disruptions, during transition periods Facility limitations and obstructions (e.g., electrical capacity, hazardous materials)

The District must continually balance the expanding IT needs of its constituency with the realities of budgetary constraints. To be successful, it must leverage its current infrastructure as it implements additional IT services. Wholesale replacement of technology is both undesirable and unnecessary. The District cannot afford to abandon previous investments in technology; therefore, the following LAUSD Network Architecture Design Guidelines stress that the design of a n

e” to reduce maintenance costs

blic address, and intrusion alarm systems to share the cabling

st

In addi ects, the following criteria are considered:

on

e and complex as e District’s. The District’s information technology infrastructure encompasses a variety of

wired and wireless systems to carry and route voice and data communications.

ll i formation technology projects must adhere to:

Standardize equipm ent (where possible) and cable installations to reduce maintenance and support costs

Upgrade and replace equipment that is at its “end-of-lifdue to high failure rates

Maximize the use of space by centralizing data, voice, and video systems Design for convergence, allowing, wherever possible, data networks,

Design for the long term and consider life cycle costs

intercommunication, pubackbone, thus reducing installation and long term maintenance co

Design for flexibility Specify affordable, durable, sustainable materials and equipment

tion, when determining IT proj

Obsolescence and/or age of system impacting the ability to access instructional and central business applications Rate of failure due to extensive usage or incompatibility with emerging technologies Bandwidth needs-enrollment and classroom growth that have a direct impactbandwidth needs; increased demand for video and graphics requires more bandwidth (data transfer capacity or speed of transmission of digital communications)

Successful acquisition strategies, deployment projects, and long-term operation of IT require a comprehensive strategy that is carefully considered and effectively implemented. This is especially relevant when addressing the management of IT infrastructure as largth

Revised - March 1, 2007 9 of 35

Page 10: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

4. ORGANIZATIONAL STRUCTURE OF THE INFORMATION TECHNOLOGY DIVISION The organizational entity responsible for the delivery of technology within the District is the Information Technology Division (ITD). The ITD is organized to support all technology components of the District including:

Strategic and IT Planning Business Systems and Applications Instructional Systems and Applications Data and Telecommunication Infrastructure – Wireless, LAN, WAN, Internet Access,

and Voice Services IT Security User Systems including laptops, printers and other devices necessary for IT to input

and extract data from the various District systems

4.1 Charter ITD’s primary role is to:

Align and direct IT resources to meet District instructional and business goals.

Within LAUSD, the program management staff categorizes IT infrastructure projects into the following nine domain areas:

Data Center Information Security Systems

ement and Services

ta Convergence

Wh d

t on bandwidth needs; increased demand for video and graphics requires more bandwidth (data transfer capacity or speed of transmission of digital communications)

IT Enterprise Resource Local Area Networks Network Manag Radio Systems Telecommunications Voice, Video, and Da Wide Area Network

en etermining IT projects, the following criteria are considered:

Obsolescence and/or age of system impacting the ability to access instructional and central business applications

Rate of failure due to extensive usage or incompatibility with emerging technologies Bandwidth needs-Enrollment and classroom growth that have a direct impac

Revised - March 1, 2007 10 of 35

Page 11: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

The LAUSD Network Architecture Design Guidelines articulate the basic tenets included in the design of all information technology projects. These are:

Standardize equipment (where possible) and cable installations to reduce maintenance and support costs

Upgrade and replace equipment that is at its “end-of-life” to reduce maintenance costs due to high failure rates

Design for the long term and consider life cycle costs Maximize the use of space by centralizing data, voice, and video systems Design for convergence, allowing, wherever possible, data networks,

intercommunication, public address, and intrusion alarm systems to share the cabling backbone, thus reducing installation and long term maintenance cost

Design for flexibility Specify affordable, durable, sustainable materials and equipment

Revised - March 1, 2007 11 of 35

Page 12: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

4.2 ITD Organization Structure

The head of the Information Technology Division is the Chief Information/Chief Financial Officer (CFO/CIO) Mr. Charles Burbridge, who manages the following departments:

Education Technology Group coordinates IT educational technology in support of the Superintendent’s instructional goals to provide students and teachers with access to quality instructional resources and programs.

Customer Service Group manages the Customer Support Help Desk, Computer Support Services, and on-site technician dispatch, which provide primary support services to schools and offices. In addition, the group manages training and on-going support services to all District staff in the use of core administrative and business applications.

Enterprise Applications develops and supports enterprise software applications in support of student and information management systems, and the tools to manage business, human resources, payroll, school and student level data.

IT Risk Management develops and oversees security strategies for the District’s use of information technology, and establishes and audits systems and procedures that prevent unauthorized access to or use of District technology resources.

IT Infrastructure develops and designs the District’s overall information technology infrastructure. Establishes and maintains technology related standards and specifications, and architecture design. Manages programs related to IT infrastructure installations.

ITD Shared Services manages the ongoing operation of central data processing and data center resources in support of educational and ITD missions.

For detailed information about the staff and structure of the Information Technology Division, please refer to the appropriate sections of the District’s Web site: http://www.lausd.net/.

Revised - March 1, 2007 12 of 35

Page 13: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

4.3 Relationship with Procurement As with all areas of acquisition, the procurement process for IT products is controlled from a process perspective by the District procurement office. However, ITD plays an important role in determining the requirements, standards and specifications for technology that will be procured.

It must be stressed that all materials offered in this document are intended to support overall District procurement processes. The goal is not to replace processes and instructions provided by Procurement, but to clarify some vendor questions pertaining to the overall IT environment in the District, to provide support information such as IT specifications and requirements, and to support specific procurement activities involving IT buying decisions.

Revised - March 1, 2007 13 of 35

Page 14: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

5. IT ARCHITECTURE AND SUMMARY Given the complexity of both the educational and IT environments within the District, ITD has spent this last year developing an overall IT architecture framework from which to plan and operate technology within the District. It describes, from an enterprise level, the types of technology used to support the District’s educational and business goals.

The architecture is described as an overall framework that organizes technology elements into segments, domains, and components areas. In all, there are seven primary domains within this framework. As shown in the graphic, there is a management domain, a support services domain, and five technical domains. Each of the domains is described below.

SAIC Architecture Framework – Navigational View

IT Security DomainIT Security Domain

StudentsStudents InstructionInstruction AdministrationAdministration

Business Environment and Governance

IT Support Domain

IT Support Domain

NetworkManagement

NetworkManagement

IT Management and Planning

Domain

IT Management and Planning

Domain

IT Admin & BudgetingIT Admin & Budgeting

PlanningPlanning

IT Policies & ProceduresIT Policies & Procedures

LAUSD IT Architecture Framework

Customer Support Service

Customer Support Service

IT ProjectsIT Projects

ProfessionalDevelopmentProfessionalDevelopment

ArchitectureArchitecture

Data CenterData Center

GovernanceGovernance

User Systems Domain

Network Infrastructure Domain

Applications Domain

Information DomainData Repositories & Retrieval

StakeholdersStakeholders

5.1 IT Management and Planning Domain The IT Management and Planning Domain comprises various processes, systems and resources that manage, operate and maintain the IT investment of the District. This domain starts with the defining charter and governance statements that provide ITD authority to plan, manage, and maintain the IT assets for the District. It includes information on the IT policies and procedures that describe the various acquisition, installation, operation and support activities for the various technology elements. It also includes the newly developed IT security policies that are driving the efforts for additional safeguarding of IT systems and electronic data. Further, effective planning processes and requirements analysis are critical to management of the District’s complex IT environment. Given the high and increasing need for technology and the limits of resources, additional emphasis is placed on the management communication and planning processes to ensure stakeholder involvement in IT directions.

5.2 IT Support Domain The IT Support Domain of the framework consists of the various components to successfully operate the IT systems and to provide ongoing user support for the employment of technology. Among the leading support areas are Customer Support Services and Data Center. Customer Support Services has the charter for providing help services to all District users. The Data Center area is responsible for the operation and maintenance of the large systems that house the LAUSD

Revised - March 1, 2007 14 of 35

Page 15: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

systems and databases. The Data Center is operated on a 7 by 24 schedule and ensures access to systems and data is optimized.

A growing area of support during the last year and going forward is in the formalized use of network management systems and processes. Given the diversity of its locations and user’s communications needs, management insight into and control over the District’s networks is critical. Current focus is on the deployment of remote management tools to increase the diagnostic analyses capabilities and monitoring functions of ITD.

Also included in this domain is the overall project management office that houses information, resources, and processes to successfully manage IT projects within the District. While specific technology areas build specialized project and technical management processes and systems, this area has enterprise responsibility to ensure the projects are managed and operated to District ITD standards. Lastly, from an enterprise level there is a need to ensure a strategy is developed and a commitment made for having appropriately trained and qualified technology staff. With the technology evolving in 6-month increments, optimizing training is critical to the overall success of ITD strategic goals.

5.3 IT Security Domain The IT Security Domain encompasses all technology areas. In each technology domain, there are interrelated security considerations. Major components of District IT security include access control and management for user systems and data and the provision and management of remote access.

The Security Domain also includes multiple systems for controlling both inbound and outbound Internet communications via firewall and Intrusion Detection Systems (IDS), virus control, e-mail spam avoidance, VPN deployment, management, and more. As security is irrevocably intertwined with all IT technology areas, there are direct security implications in all framework domains.

5.4 Information Domain – Data Repositories and Retrieval The Information Domain includes all the electronic methods for saving, storing, accessing, and archiving District data. The District currently maintains the following types of data repositories:

Student Information Data warehouse that is built on Oracle brand products. Business Enterprise databases that are proprietary to the business applications. Many of

these are housed on large IBM mainframes. Middleware databases that house information from other District systems and serve as

intermediate repositories for data to ensure the security of the enterprise system and/or serve as a query data repository.

Client/Server databases housed on UNIX systems.

Revised - March 1, 2007 15 of 35

Page 16: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

5.5 Applications Domain The Applications Domain includes the following three primary components necessary for the District to perform its core operations:

Student Information and Records. This includes a full range of applications and databases pertaining to student oriented information from health data, to school academic records, to attendance information and so forth.

Business Systems. This includes finance, human resources, library, and cafeteria services. Educational and Instruction Support Systems. This includes a full range of educational

and instructional support systems. A full plan, LAUSD Educational Technology Plan, is revised yearly and focuses on the current and future directions for technology and the improvement and support of educational delivery and instruction. This plan can be obtained upon request and is available on line.

Each of these areas consists of a large array of individual applications—from complex financial systems to simple, single task applications to support reading instruction. As with other enterprises of a similar size, the District currently supports an extremely broad range of applications and data services. The District has deployed commercial software from a variety of vendors and custom applications have been developed both externally and internally. These are deployed across mainframe, mid-range, and microcomputers throughout the District’s infrastructure. LAUSD is in the process of establishing standards and specifications for the applications and data services it supports.

District use of web-based technology continues to evolve. Current initiatives include a wide mixture of Web portals for access to existing District systems, Web-based front-end systems for legacy applications and general use of Internet and intranet sites for data distribution.

5.6 Network Infrastructure Domain The Network Infrastructure Domain consists of the technology components that allow users and systems to interconnect with each other. It also includes other infrastructure technologies necessary for enterprise system to work. The primary components are:

Wide Area Network (WAN): The District’s WAN consists of a high-speed, meshed core and multi-point distribution layer connecting its educational and administrative facilities across roughly 700 square miles of the Los Angeles metropolitan area.

Local Area Networks (LAN): The District currently supports over 1,200 facilities each with one or more LANs. The District mandates specific standards for all LAN cable plants, equipment, and connectivity deployments.

Telecommunications: The District maintains diverse telecommunication services ranging from traditional voice (e.g., telephone) services to public address systems, intercom systems, mobile radios, cell phones, and others. For example, LAUSD infrastructure currently includes over 20,000 mobile radios and 34,000 telephone lines.

Revised - March 1, 2007 16 of 35

Page 17: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Core IP Services: The District supports multiple Domain Name System (DNS) domains

for both internal and external use. Dynamic Host Control Protocol (DHCP) provides IP address allocation and delivery.

ry of both voice (telephony) and video conferencing are

ovides collaborative services such as aring that are centrally managed and accessible across the this area are enterprise print service functions that support the

PDAs as well as pre-packaged productivity software for such functions as word processing, spreadsheet analysis, and individual database development. The domain also includes some level of file storage (file ser e /storage peripheral devices including:

CD Library Systems File Servers Tape Drive Systems (local back up solutions)

Convergence: The District currently maintains deployments of multiple converged services to meet increasing instructional requirements while best leveraging limited budget resources. TCP/IP delivein use today. District adoption of converged technologies is pragmatic driven by the potential to decrease costs through consolidated infrastructure and simplified management and maintenance. Network Services: Network infrastructure prelectronic mail and calendenterprise. Also included indeployment of the new ISIS and ERP systems.

5.7 User Systems Domain The User Systems Domain includes all the systems and tools that an individual District employee, educator, or manager can use to accomplish their respective responsibilities. Some examples of personal electronic systems are desktops, laptops, and

vic s), servers, and input/output

Printers Scanners Networked copier/scanner

Revised - March 1, 2007 17 of 35

Page 18: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

6. CURRENT STATE OVERVIEW This section provides an overview of the current IT environment that exists in the District. A number of major initiatives, discussed in Section 5.2.1, are currently underway and will transform major sub sections of the current environment. Again, while efforts are made to keep this document current, some inconsistencies may be found.

The discussion begins with the network infrastructure and continues with the security, application, database, customer support, and other major components of the technology infrastructure.

6.1 Network Infrastructure Domain The following subsections describe technology functional areas within the Network Infrastructure Domain.

6.1.1 Central Core -- WAN The existing District WAN has a core backbone network consisting of four major nodes connected by broadband circuits. The four nodes are connected via point-to-point gigabit Ethernet terminated on Cisco model 6500 series switches with routing enabled. The OC-192 SONET ring and Cisco model 15454 optical switches provide the transport for the gigabit Ethernet backbone.

Open Shortest Path First (OSPF) is used as the Internet Protocol (IP) routing protocol. Core nodes and associated connections use OSPF Area 0. The distribution layer consists of T1 connections from Cisco 7204 routers to edge sites. There are four primary OSPF Areas currently in use at the distribution layer.

For growth, additional areas are being added using a new numbering scheme. All OSPF Areas connect to Area 0 at one of the four WAN Core Node facilities.

Revised - March 1, 2007 18 of 35

Page 19: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

The existing LAUSD WAN is illustrated in the following graphic:

OSPF AREA(s)

OSPF AREA(s)

LAUSDCORE

T3

SCHOOL

Up to 4 T1s per site

T1

T1

SCHOOL

SCHOOL

DCP Internet -2

WAN Core Nodes

Edge Routers

LA Node(Beaudry)

West LA Node

Gardena Node

Van Nuys Node

DSL Router

DSL User

SBC Internet Connections

GSR

Ethernet

OSPF AREA(s)

T3

SCHOOL

Up to 4 T1s

T1

T1

SCHOOL

SCHOOL

7204

Ethernet

T3

SCHOOL

Up to 4 T1s

T1

T1

SCHOOL

SCHOOL

7204

Telco Central Office

Distribution Routers

Fiber attached School – colocated

with Node

SCHOOL

Ethernet

Ethernet

T3

SCHOOL

Up to 4 T1s

T1

T1

SCHOOL

SCHOOL

7204

Van Nuys

OSPF AREA(s)

LAUSD Existing WAN

6.1.2 Edge Locations -- WAN LAUSD edge router connectivity is based on a star topology. Each school, District office, Campus, or other site is directly connected to a distribution router located at one of the four core sites. Edge connectivity is primarily via T1 (or multiple T1) circuits. Schools with multiple T1s are configured to load balance across up to 4 T1s.

To reduce equipment and circuit costs, T1 circuits are bundled into channelized DS-3 circuits at the nearest Node site. These DS-3s terminate on Cisco model 7204-VXR distribution routers. These routers are connected to backbone switches via 100bTX, Ethernet. Normal configurations should not (and currently do not) exceed three DS-3s per distribution router.

Other connectivity to edge sites includes DSL and wireless. Sites that do not require full T-1 access, mainly the Early Education Centers, currently use DSL circuits to communicate with the District WAN. The local exchange carrier terminates private DSL lines through their broadband concentrating equipment directly on LAUSD equipment at Node sites. Approximately 110 of these sites are in use today. In the case of the EECs, these sites also use the DSL to transport VoIP services.

Revised - March 1, 2007 19 of 35

Page 20: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

The District has extensively deployed Wireless Access Points (WAP) into LAN enviroments at several schools to extend WAN connectivity short distances to neighboring schools. This is advantageous for emergency, short-term projects, or where trenching new entrance cables would be impossible, costly, and/or time consuming.

The LAUSD WAN has grown through many project procurements and implementations. Due to the nature of procurement cycles, constantly changing technology and solutions provided by RFP vendors, the WAN has grown to include a variety of equipment. The following table provides a summary of WAN equipment used at the edge.

Router Equipment (Cisco) Comments

372x, 382x, 800 DSL sites, Early Childhood Learning sites 17xx District offices

262x Some stand-alone Adult Ed sites and some District offices

37xx, 38xx Mostly schools, some District offices

The District is currently working on a new strategic plan for the replacement of the existing WAN environment. A procurement(s) pertaining to this replacement is planned to occur over the next year.

Revised - March 1, 2007 20 of 35

Page 21: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

6.1.3 Edge Locations -- LAN The LAUSD LAN architecture and hierarchical model for new projects is based on established industry technology standards and design specifications for LAN configuration. In simple terms, this is a Hierarchical Star, Ethernet topology using a hybrid multimode/single mode vertical fiber backbone and a hybrid horizontal cabling system using either CAT 5e and fiber (in some schools), fiber only, or CAT 5e only. Non-instructional business offices use CAT 5e horizontal cabling.

The District has adopted an equipment standard including switched gigabit Ethernet on the backbone and switched 100Mb Ethernet to end users. The above illustration provides a graphic representation of this architecture.

The District currently supports 1,200 locations of which over half are K-12 school campuses. Other facilities supported include business offices, early education centers, adult education centers, and other instructional and administration facilities.

The following is a high level list of many LAN systems currently installed on District LANs:

Revised - March 1, 2007 21 of 35

Page 22: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Alcatel/Xylan 10xx, 4000, 5000, and 6000 series switches Alcatel/Xylan Omni 50xx wx, 77xx, and 78xx Allied Telesyn model AT-FS724I-10 switches Cisco model 412 repeater (hub) Cisco model 1900 switches itches Cisco 29xx, 35xx, and 3750 series sw Cisco 50xx and 55xx series switches Cisco 60xx and 65xx series switches

es

stem FDT switches

s

3CO Access Points

the critical telecommunication services maintained by LAUSD. Within the LAUSD structural context, these include Voice,

ices.

s have been issued on an as-needed basis to the staff.

is moving toward replacing them with PRI trunks, thereby eliminating all use of Centrex connections. The predominant PBX and/or Key Systems are Definity/Prologix, Legend, and Meridian.

Cisco 45xx series switch DiGi media converters MiLAN S3130SC switches MiLAN model 801 switches MiLAN model 9100 media conversion sy SMC model SMC-EZ108 Dell Power Edge servers Cisco 36xx, 37xx, and 38xx series router Cisco Wireless (WLAN) Access Points M Wireless (WLAN)

6.1.4 Telecommunications The following subsections provide architectural summaries of

Voicemail, Mobile Radio, and Public Address/Intercom serv

6.1.4.1 Voice (Telephony) Services – Central and Edge

PacBell and Verizon provide standard voice services to approximately 1,200 locations. Additionally, several thousand cell phoneThe District also uses standard text pagers and RIM Blackberry devices issued to various individuals within the ITD organization.

LAUSD predominantly uses legacy PBX systems to provide standard voice services. However, there are approximately 110 locations using VoIP solutions. The District has upgraded or replaced existing PBXs so they will support future/new features such as integrated PA/Intercom capability, VoIP, and wireless phones. Where feasible, the District is also consolidating existing Key System units into a single (1) PBX switch. At locations with a significant number of individual business lines or trunks, the District

Revised - March 1, 2007 22 of 35

Page 23: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

6.1.4.2 Voicemail Services

In general, schools are typically responsible for obtaining and supporting their own voicemail solutions. However, the Telecommunications group provides voicemail services to the District’s headquarters building using Cisco’s Unity system. Unity is Cisco’s proprietary voicemail and unified messaging system. This system is located in the Data Center and provides classic voicemail services to all LAUSD personnel located in the Beaudry building.

6.1.4.3 Mobile Radio – Central to Edge

The District’s responsibility for providing reliable and effective radio communications for its teachers, staff, and employees is significant. The Radio Support Section has three major customers:

Los Angeles School Police Department (LASPD) Transportation Branch (primarily buses) Administrative staff (primarily on-campus) and KLCS

The following categories of radio operations exist today in LAUSD’s radio services:

UHF (450MHz) band conventional (analog voice technology- no trunking) UHF (800MHz) band conventional (analog voice technology- no trunking)

7MHz) VHF (150MHz) business band (simplex only) analog voice technology Low-power Industrial (LPI) band (45 Microwave (2.1GHz) band (analog)

Commercial Carrier wir eless Cellular Digital Packet Data CDPD, on the analog mobile

d to support data transmission between

Channel distributions and support infrastructure is described in the table below:

phone system (AMPS)

District radio staff also supports several microwave networks. One network is used to interconnect the voice radio sites to the radio system master control at Soto Street and provides analog voice communications between the sites and within the District. The system operates under licensed 2GHz spectrum and has twenty-six multiplexed analog channels. Another network is a separate 2GHz spread-spectrum system useWilson High School, Lincoln, and Bravo High Schools.

Frequencies Tower Sites Channels

2 GHz Oat Mountain 2 Mount Lukens 7 Mount Lee 7 San Pedro Hill 7 Wilson High School 2 Master Control (Soto St.) 26

Revised - March 1, 2007 23 of 35

Page 24: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

The following table s the D d radio si summarize istrict’s major fixe tes:

Frequencies Tower/Receiver Sites Customer

Mount Lukens Transportation Mount Lee Transportation

800 MHz

San Pedro Hill Transportation Mount Lukens LASPD/Schools Mount Lee LASPD/Schools Oat Mountain LASPD/Schools San Pedro Hill LASPD/Schools Wilson High School LASPD/Schools

Loop Canyon LASPD/Schools

El Camino High School LASPD/Schools

450 MHz

Windsor Hills Magnet LASPD/Schools

460 MHz Mount Lee Maint. & Ops.

6.1.4.4 Public Address/Int

tems with PBX systems to provide 911 call out from o

provide quantitative detail on LAUSD systems for DNS and DHCP nagement.

The District currently provides DNS services in support of the following two domains:

ca.us

ary and secondary authori

ercom – Edge Locations

Under the BB Bond program LAUSD has deployed Public Address/Intercommunication (PA/IC) systems from several different manufactures. The majority of PA/IC systems are from Dukane (StarCall), Bogen (Multicom 2000) or Rauland Borg (Telecenter). The LAUSD Facilities Division is actively interfacing the PA/IC sysclassr oms.

6.1.5 Core IP Network Services – Centrally Maintained The following subsections delivery and ma

6.1.5.1 DNS

lausd.k12. lausd.net

The lausd.k12.ca.us domain is the District’s primary public domain. The lausdnet domain is primarily an internal-use domain, but publicly registered and contains host entries that are publicly resolvable. Externally, both domains share the following prim

tative servers:

dnsx.lausd.k12.ca.us – Operated by LAUSD

Revised - March 1, 2007 24 of 35

Page 25: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

ns1.pbi.net – Operated by ISP (SBC Internet Services, Inc.)

The LAUSD operated external server provides DNS services via BIND version 9.x operating under AIX version 4.3.3. The District operates the following DNS servers visible from the internal network as:

Role Name DNS Server (OS)

Primary lausd.k12.ca.us dnsx.lausd.k12.ca.us BIND 9.x (AIX 4.3.3) Secondary lausd.k12.ca.us lausd.k12.ca.us BIND 9.x (AIX 4.3.3) Primary lausd.net win2kdc.lausd.net Microsoft DNS (Windows 2000) Secondary lausd.net win2kdc2.lausd.net Microsoft DNS (Windows 2000)

The followin l summary is d iles provide

Record Type lausd.k12.ca.us (quantity) lausd.net (quantity)

g statistica rawn from zone data f d by LAUSD:

NS 1 2 A 653 1123 CNAME 84 1 MX 54 2

The primary and secondary servers for each domain also function as secondary servers for the

to accommodate recent growth at remote locations; a

ally, addresses are assigned from the

chools that required additional address space have been provided additional class C addresses.

other domain.

6.1.5.2 DHCP

The District has developed and deployed two IP address allocation plans: one for schools and other remote locations and another for District headquarters. The District is currently in the process of deploying an IP address plancopy of this plan is available separately.

In summary, District internal IP addressing utilizes standard private address space as defined by the Internet Assigned Numbers Authority (IANA). Specific10.x.x.x (CIDR 10/8 or “Class A”) network address space.

Historically, the District utilizes four (4) class C CIDR addresses (10/21) for instructional and administrative network assignments at each school. The first octet of all assigned address is 10. The second and third octets are used to signify the admin network, instructional network and location (Node, OSPF area, school, and floor). S

Revised - March 1, 2007 25 of 35

Page 26: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

6.1.6 Convergence The District continues tleverage advin voice, video, and dataconvergence. Voservices are primarilydelivered via traditionaparadigms; however, Cisco Voice over IP (VoIP) technologies aalso being used where cost effective. Likewisethe District has also deployed various multimedia technoin support of special instructional programand administrative requirements.

As illustrated in

o ancements

ice

l

re

,

logies

s

the diagram, the District has successfully deployed a VoIP infrastructure that is

trict’s current VoIP infrastructure:

− VoIP services delivered to approximately 110 locations

− Approximately 17 Cisco Call Managers

− Over 125 VoIP Gateways

− Over 3,500 VoIP Phones

6.2 Applications and Data Domain fo ogy components and functional areas for both the

District Systems and Data Operational Area

BeaudryBuilding

RemoteSites

Site LANs

Phone/FaxMachines

CM Secondary ServerCM PublisherCM TFTP ServerCM IP Phones DHCP

Call ManagerPrimary Server

IP Telephones

T1/P

RI V

oice

Local TrunksLocal Trunks

Local Analog Lines

Centalized Call Manager Cluster & VM

Voice Mail/Unified Messaging

RemotePBX

PSTNNETW ORK

LAUSDIP WAN

Beaudry LANs

100Mb Ethernet

IP Telephones

BackupTelephonesAnalog/Digital

CalistaVoiceMail GW

T1/P

RI V

oice

Local Analog Lines

Router/VoiceGateway

SRST

WirelessIP Phones

100Mb Ethernet

Router/VoiceGateway

SRST

BeaudryPBX

Phone/FaxMachines

BackupTelephonesAnalog/Digital

being used for voice trunking and end-to-end VoIP at designated sites. It has the ability to scale well, interoperate effectively with the legacy telephony environment, and leverage the District’s existing IP network infrastructure.

Following is an overview of the Dis

The llowing subsections describe technolApplication and Data domains.

Business Systems and Data These functions are performed to support general business requirements of the District. Applications in this category include Payroll, Human Resources, Budget and Planning, Financial Accounting, etc.

Revised - March 1, 2007 26 of 35

Page 27: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

District Systems and Data Operational Area

Student and School Management Sys ems and tDa a t

These functions support the myriad activities required to manage school sites and support federal, state, and local reporting requirements. Student Information and Special Education systems are examples of the applications included in this category.

Hybrid of Business and School Management Systems and Data

These functions are performed to support both the business activities and school management activities of the District. Specific applications in this category include Transportation, Food Service, and Textbook systems.

Instructional Sys ems and tDa a t

These functions are specific to educational instruction used in the classroom. Applications included in this category are currently focused in stand-alone application technologies and include COTS products like Reader Rabbit and Math Blaster.

The goal is to consolidate and migrate business and student systems to current technologies.

6.2.1 Central -- Business Functions and Data The District currently has underway six initiatives for the Business Systems Component area including:

Procure and deploy an ERP system for Finance. Procure and deploy an ERP for Human Resources. Develop a Web application environment to build new systems and/or bridge existing

legacy systems into the new Web accessible environments. Redesign and enhance the existing District Web sites. Complete application enhancements to existing business systems until replaced under the

major ERP efforts. Provide user productivity support for document intensive business processes, (e.g.,

document management and workflow).

Many of the existing business systems reside on an IBM mainframe with some still using terminal emulation mode for application access. Other systems are using Web-based technology to provide access to information such as the Administrative Notebook application. In general, the District has:

capability to support IBM mainframe based applications that are written in

the use of new portal technologies to link users to new

vers running Microsoft Windows server operating systems and Microsoft SQL Server

A strong COBOL Exposure to and capabilities intechnology-based applications A mix of UNIX systems and ser

Revised - March 1, 2007 27 of 35

Page 28: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

6.2.2 Central -- Student and School Management Systems and Data The leading initiative for the District is the development and deployment of the new ISIS system that replaces most of the student and school management systems including health care service

ation

6.2.3The applic lution that can be categor

Technology

inform that exists today.

In combination with the Decision Support Systems (DSS) application and data warehousing, there will be a large portfolio of Oracle product centric applications and databases. The District has experience with and owns the Oracle development tool set.

Application and Database Technologies current ation and database architecture reflects two decades of progressive evo

ized into one of five ways as shown in the table below.

Description and Example

Legacy The term “Legacy” is used to refer to technologies no longer supported by the original pro iders or technologies no lv onger employed in new development efforts within the Ind stry. In most cases there aru e applications that: Operate on the mainframe and rely heavily on data entry activities or Operates on mainframe technologies

Within the District, some examples might be: District Payroll System District financial systems

Enterprise Resource Planning

An ERP-based Integrated Student Information System (ISIS) will replace current discrete applications with an integrated solution. LAUSD is in negotiations with a vendor who is supplying a COTS type ERP solution for managing student information and school management functions. LAUSD is negotiating with vendors to provide functionality as part of the baseline application, and LAUSD plans to implement these with minimal customization. Planning efforts are underway to reengineer business processes throughout the District related specifically to student information and school management.

Client/Server Client/server solutions were ones where portions of the application would be used on the client system, with other parts running on any number of “tiered” servers. Few Client/Server applications exist in the District and most will be replaced with the new E P amples are: Student Information Systems elR project efforts. Current ex ementary, secondary, adult information, and Special Ed systems operate in a client/server en ironment with data sv tored locally and periodically pushed into a consolidated data warehouse

Revised - March 1, 2007 28 of 35

Page 29: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Technology Description and Example

Proprietary, Application Specific

With the large portfolio of instructional and educational systems, the District is dependent on using proprietary applications and databases. Examples are: Library Services Systems Cafeteria Systems Transportation Management System

W enever possible attempts are made to acquire open-architecture solutions, but the hmarket drives what solution can be obtained. Also included in this area are targeted, specialty instructional systems that the District procures. Each of these is considered proprietary and rarely can the District modify either the application or associated database.

Stand alone and Desktop Applications

Cu rent and continuing technology within the District. Desktop applications offer rspec st. ific functionality in specialized areas to end users without incurring significant coTwo examples are: ons Operate in stand-alone mode at the desktop and include instructional applicati

like Reader Rabbit and Math Blaster. Desktop based data reporting tool widely used throughout all areas of the District

in the analysis and reporting of information.

Revised - March 1, 2007 29 of 35

Page 30: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Technology Description and Example

Web-based Applications

This is considered an evolving and expanding technology environment. The District has made significant strides in developing and prototyping Web-based technologies. Two examples are: Focusing on the student information drawn from the various school applications

in the District. DSS is used to consolidate, summarize, or transform student data to support analytical reporting and trend analysis. The data warehouse, used by the DSS, drills down to detailed information. The primary users are school principals, administrators, school office staff, board field representatives and program evaluators.

Administrative Notebook Portal is a Web portal that is used by principals for calendaring, bulletins, memos, etc. This application lays the foundation for portal technologies within the District.

Internet ServiceProvider

Firewall

Public

Internal User

LAUSD.NET

INTERNAL NETWORK

Hosted

SchoolZ

OfficeC

SchoolC

SchoolZ

APPS/DBs

SchoolY

OfficeB

SchoolB

MiscConten

t

OfficeA

SchoolA

ExternalLinks

MiscConten

t

ExternallyHosted

School Sites

DSSPortal

FRDB

InternetSites

School Z

School Y

PICDatabases

Firewall(Blocks

External IPaccess)

DMZ

AdminNotebook

Portal

User/Pass

User/Pass

User/Pass

User/Pass

6.3 User Systems Domain User systems include devices that an individual uses to communicate, access applications, and extract data in the performance of their responsibilities. There is support for over 115,000 desktop-class computers, for both Apple (e.g., Power PC) and Intel (e.g., Pentium I/II/III/IV) architectures. LAUSD has established standards for the procurement, management, and support of these systems.

The District defines the minimum acceptable standards for hardware and software annually. Schools and offices purchase equipment off the District contracts.

Over the last three years, the District has been aggressively working to increase the number of workstations available for staff and student populations. The District has met the goals for having one-computer to a six-student ratio.

Revised - March 1, 2007 30 of 35

Page 31: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

There is a consistent method for providing help desk and on site maintenance support. The District has a central contract for purchasing computers and servers and continues to investigate the leveraging of a District-wide licensing agreement as a cost saving measure for software.

6 ormationIn addition to the net ict has major initiatives these lines, major pla provements have been made. The f phic pro

.4 Inf Security Domain work infrastructure and upgrade of the application environment, the Distrto secure the overall IT environment and to safeguard District data. Alongnning, policy making, and procedural im

ollowing gra vides an architectural view of the current information security domain.

The following table lists specific network devices that provide primary support for the District’s information security policies.

Device Purpose

Packeteer While primarily designed to enforce quality of service requirements for Web applications, Packeteer devices are also used to block applications that pose a security risk or that otherwise violate District policies. These applications include so-called Peer-To-Peer file sharing applications such as Kazaa.

Network IDS Detect and log network intrusion attempts, to provide information to ITD Security on current security threats and to trace serious intrusion efforts to their source.

Revised - March 1, 2007 31 of 35

Page 32: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Device Purpose

Firewall cluster Manage network traffic between the internal District network, the external Internet, and various specific subnets based on security requirements.

VPN Concentrator Support secure remote access to District resources to designated users having authenticated VPN accounts.

VPN DMZ A subnet defined via firewall rules, to provide restricted access to the LAUSD WAN for remote VPN users.

Dial-in DMZ A subnet defined via firewall rules, to provide restricted access to the LAUSD WAN for remote dial-in users.

Web DMZ 1,2,3 A set of separated subnets designed to provide external Internet access to publicly available District services. The three separate DMZ zones are designed to house servers subject to different security practices.

Websense Cluster Filters content and blocks access to Internet sites to enforce District policies and regulations governing appropriate content.

LDAP Cluster (OID) A centralized server for managing District employee information, including network, server, and application access. The LDAP cluster provides a single point of management for non-student user accounts.

Routers (with access lists)

Restrict network traffic between schools and the District network to deter malicious software and other security breaches.

Syslog server A central repository for server and network device event logs. Syslog is a standardized service supported by a variety of devices for formatting and transmitting event log information.

6.5 Intrusion Detection Systems Intrusion Detection Systems, a low-voltage security system, have primarily been installed as part of the BB Bond Safety and Technology program. Approximately 500 school sites have the newer digital intrusion detection systems.

Revised - March 1, 2007 32 of 35

Page 33: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

The Intrusion Detection System network topology and equipment location relationships are shown in the figure below.

d independently--communicate an alarm or trouble incident to ication is performed through auto-dialer and

T --separately an the school law enforcemm aine a sensor activation or system location and annunciates the

hese systemsent agency, LASPD. The notif

odem capabilities cont d in the central security control unit located in each school. Upon irregularity, the control unit dials the central law enforcementlocation and the nature of the alarm or problem.

Revised - March 1, 2007 33 of 35

Page 34: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

7. STANDARDS AND SPECIFICATIONS The District has established staa dards where platforms for the ER where two development envi

7.1 IT Related Construction Specifications W g, c ith the District’s c able b aintained and u

Com nsive listings of cu

Specification Description

ndards and specifications in most of its technology functional are still evolving, especially in the application and database areasP solutions have not been decided or in the Web application arearonments might exist.

reas. Some of the stan

hen installing, upgradinurrent w

and/or maintaining IT systems, contractors and vendors must stay onstruction specifications. These specifications, listed in the t

elow, are actively m

prehe

pdated, and are therefore subject to change.

rrent LAUSD specifications are available in separate documents.

25135 Cable Tray Used to provide specifications for wire mesh cable management systems, tsections, couplers, hangers, bonding and grounding conductors, and other materials required to provide a complete cable management system.

ray

25568 Premise Wiring – Existing Facilities

to r ), low

g, telephony wiring, and signal terminal cabinets.

Specifications to support the installation of premise wiring at existing facilities include LAN/WAN cable (UTP Cat 5e, and 62.5 micron multimode fibevoltage wirin

25569 Premise Wiring – New Facilities

Specifications to support the installation of premise wiring at new facilities toinclude LAN/WAN cable (UTP Cat 6, and 50 micron multimode fiber ), voltage wiring, teleph

low

ony wiring, and signal terminal cabinets.

25570 Quality Assurance, Test and AcceptanRequirements

ce

ptance testing for Los Angeles Unified School District New Construction, Safety & Technology and Modernization Projects

Addresses test and acceptance criteria and describes specific test procedures to be performed during the acce

involving LAN, PABX, VTC, Convergence and WLAN equipment and associated cable plants.

25720 Intrusion Detection Supports the installation of Intrusion Detection systems to include infrared ches

and cables, controllers, graphic annunciator, expansion modules, power modules and batteries, telephone connectors and cables, connections to fire alarm control

System motion detectors and associated power supplies, batteries, cables, door swit

panels, connections to main telephone terminal boards and connections to fire sprinkler report relays.

25723 Telecommunications Systems

Used for installing and connecting Owner furnished telecommunications equipment including PBX, cabinet, attendant consoles, and telephone instruments. Telecommunications system shall include provisions for paging over PA system.

25725 Closed Circuit TV vision System – New Facilities

For procurement of supplying and installing digital closed circuit tele(CCTV) and audio surveillance, including card access control systems for subterranean parking structures.

25725 Closed Circuit TV System – Existing Facilities

conduits, cables, monitors, switchers, digital video controller, software, connectors, and other required materials and equipment.

For procurement of supplying and installing digital closed circuit television (CCTV) , including required cameras, terminal cabinets,

Revised - March 1, 2007 34 of 35

Page 35: LAUSD TECHNOLOGY PLAN

Los Angeles Unified School District Information Technology Architecture 2006

__________________________________________________________ IT Architecture Summary

Revised - March 1, 2007 35 of 35

Specification Description

25760 Video Teleconferencing System

Deals with supplying and installing all equipment necessary for implementing a VTC infrastructure at LAUSD, i.e. provide a VTC solution capable of achieving minimum requirements for real-time business-quality (i.e., 30 fps at 384 Kbps) video distribution, using industry standard CODECs.

25780 Convergence Specifications to support District’s efforts to converge voice, video and data onto its LAN/WAN network.

25805 Local Area Network Systems

Supports installation of LAN equipment (including Wireless LAN) materials and interoperability. Includes the installation, connecting, and testing of the networking system, including all components, required cabinets, terminals.

25810 Wireless LAN (WLAN)

Describes the equipment, installation, integration, configuration, testing, training, documentation, standards, and acceptance criteria, necessary for acquiring and implementing IEEE 802.11a/b/g Wireless Local Area Network (WLAN) systems at LAUSD.

25821 Public Address and Intercommunication Systems

To support the installation and connecting of a central rack, with a public address (PA) system, including all call paging access from the PBX. System shall interface with a master clock system for a class change signaling system and with the Intercommunications systems. This specification also supports the installation of Intercommunication hardware, which shall provide the capacity for internal communication between operator (main office) and selected classrooms.

25822 Autonomous Public Address Systems – Small Gymnasiums

Deals with furnishing a complete autonomous public address (PA) system in multi-purpose rooms and/or small gymnasiums for Primary Centers and elementary schools.

25823 Autonomous Public Address Systems –Auditoriums

Furnish a complete autonomous public address (PA) sound system in auditorium of middle and high schools.

25824 Autonomous Public Address Systems – Gymnasiums

Furnish a complete gymnasium autonomous public address (PA) system for middle and high schools.

25825 Autonomous Public Address Systems – Athletic Fields

Furnish a complete athletic field autonomous public address (PA) system.

25850 Television Systems -Legacy

Used to provide and install a complete and operating RF Distribution System including all required amplifiers, couplers, outlet devices, cables, connectors and all other materials. System transmission medium will use coax/copper cable.

25851 Television Systems - Digital

Used to provide and install a complete and operating RF Distribution System including all required digital/analog headend receivers, digital QAM modulators, amplifiers, couplers, outlet devices, cables, connectors and all other materials. System transmission medium will use coax/copper cable.

25852 Television Systems (Fiber Optic Distribution)

Used to provide and install a complete and operating RF Distribution System including support for all required digital signal transmission, amplifiers, QAM support, couplers, outlet devices, cables, connectors and all other materials. System transmission medium will use fiber optic cable.