The data communications network of Oklahoma State University exists to facilitate the research, education and outreach missions of the university. It provides electronic capabilities that allow OSU faculty, staff and students to access information, share data, collaborate, and communicate. Information Technology manages the network and is responsible for its secure and effective operation. IT staff responsibilities include maintaining the network, and planning and implementing network growth.

The network consists of the following:

• 1. Access-Layer Network Infrastructure - network wiring and electronics (network switches and/or hubs) in OSU buildings that interconnect OSU's computers and other devices.
• 2. Wireless Network Access "Air Space" - radio spectrum used for wireless network access at OSU.
• 3. Network Backbone and Building Switches - top-level network switches/routers in each building and the core OSU network backbone that connect OSU building networks together and to off-campus networks.
• 4. Wide Area Network Connections - Wide Area Network (WAN) that connects distributed portions of the OSU network.
• 5. Connections to Regional and National Networks (OneNet) - off-campus connections to the Internet. OneNet is Oklahoma's telecommunications and information network for education and government. OneNet is a division of the Oklahoma State Regents for Higher Education and is operated in cooperation with the Oklahoma Office of State Finance.
• 6. Core Network Services - services required for network operations (Domain Name Service, boot P, Wins, etc.)

1. OSU Data Communications Network as a Campus Utility
The network is a critical campus utility available to all faculty, staff and students, at all campus locations. It provides end-to-end "wall plate to wall plate" service from any computer on campus to any other, as well as to off-campus computers and resources.

2. Extension of the Backbone into New Buildings
The extension of the network into new buildings on campus should be included and funded as part of building construction projects. Buildings should not be erected without the capability to communicate with the OSU network or without IT approval or blueprints and IT involvement during construction.

3. TCP/IP ? OSU's Network Protocol
To facilitate interoperability among OSU systems, the network backbone supports only TCP/IP and other IP based protocols (UDP, PCMP, etc.)

4. Involuntary Disconnection
To assure the integrity of the network, it may be necessary for IT to disconnect a host, a group of hosts, or a network that is unsecured or disrupting network service to others. This includes hosts involved in network security problems, such as those used by unauthorized parties to attack other systems on the OSU network or on the Internet. If the situation allows, IT will make an attempt to contact the local network administrator or owner of the host or hosts involved. If those individuals are not available, the disconnection may proceed without notification. With regard to security issues, a disconnection might be a "partial" one that isolates the host from attacking other hosts, or from off-campus access in general. A host that has been compromised by unauthorized parties may need to stay disconnected until the host's operating system can be updated and all changes made by the attacker reversed.

5. Physical Access to Wiring Closets
Only IT is authorized to place equipment or cabling in wiring closets, equipment rooms, etc., unless special arrangements are made with IT and approved by the Assistant Vice President for IT. Departments maintaining their own networks must use other space for their equipment and cable. At no time shall any individual access IT wiring closets or shall any wiring not belonging to IT be located within a IT wiring closet without expressed written approval from IT.

1. Network Maintenance
IT maintains building and campus network wiring and fiber, local switches, building routers/switches, backbone routers/switches, and other network devices that comprise the OSU network. This includes troubleshooting problems, identifying their cause, and replacing or repairing defective equipment and wiring.

2. Network Documentation
IT is responsible for creating and maintaining the detailed documentation of the network required for proper network maintenance, operation, and planning.

3. Administration of OSU Network Connections to Other Networks
IT maintains relationships and agreements with OneNet and other service providers to keep the OSU network well connected to the commercial Internet and academic networks. IT administers all interfaces between networks and connections between the OSU network and other networks.

4. Administration of OSU Network Name and Address Space
IT manages the OSU network name space and the assignment of names and network addresses (IP numbers) for security and identity of users.

5. Administration of OSU Wireless Networking
IT coordinates use of wireless networking at OSU to ensure compatible access to all OSU users.

6. Provision of Central Network Services
IT provides central services required for operation of the network, which include, but are not limited to, Domain Name Service (DNS), directory and user authentication services, and electronic mail transport services.

7. Network Devices
The data communications network is a mission critical strategic university resource. In order to protect the data communications network, devices other than computers, servers, and workstations, must not be plugged into any network port. This includes, but is not limited to hubs, switches, repeaters, routers, network modems and wireless access points. These devices may be incorrectly configured or incompatible with the OSU network causing outages and reliability problems to all or part of the network. Devices not approved for use on OSU's data communication network will be disabled to ensure the stability and availability of the network.

8. Traffic Monitoring
IT monitors traffic flow to optimize network usage, detect network problems, and ensure equitable access.

9. Security Monitoring
To the extent possible, IT monitors incoming network traffic to detect the "signatures" of known network intrusion scenarios, viruses, or the like. IT may periodically scan the OSU network hosts to assess the vulnerability to attack. It should be noted that there is no guarantee that IT will be able to detect all potential system vulnerabilities.

10. Campus-wide Network Security Coordination
IT promotes campus-wide network security and coordinates campus-wide response to unauthorized access. This also includes working with local supporters, computer users, and OneNet to protect the campus from network intrusions, denial of service attacks, and other unauthorized and/or inappropriate activities that impair network access and use.

11. Planning for Network Growth
IT interacts with campus departments to ensure current and future communication needs are addressed.

12. Upgrades to Current Infrastructure
IT performs upgrades to the current infrastructure to ensure current and future needs are addressed.

The dean or director in each college or major unit is the person in charge of coordinating computing and network use in that area. They should identify a network administrator who has the following responsibilities for the college or unit:

1. The Network Administrator:

• Coordinates network trouble reports and ensures that OSU network malfunctions are properly reported to IT for resolution.
• Supports IT staff efforts to troubleshoot and resolve network problems involving the operation of end-user or university equipment.
• Works with IT staff to track down and correct excessive use of network resources, especially off-campus network usage. Encourages members of the unit to utilize network bandwidth and resources efficiently.
• Acts as a liaison between IT and network users for the purpose of scheduling maintenance periods, coordinating system changes, and disseminating information concerning the OSU network.
• Participates in campus discussions of new directions for the OSU network and IT's network services.

The network administrator implements and maintains sound network and computer security practices in the unit. This includes, but is not limited to, host-based security mechanisms such as password-protected logins, file protections, ensuring encryption is not used and security patch maintenance on all machines. System administrators are also to encourage end users to select secure passwords and change them regularly, and to use security-minded access tools.

The network administrator serves as the unit coordination point for the assignment of network name and addresses.

The owners or primary users of computers connected to the OSU network are responsible for the following:

Users should efficiently use network resources and follow OSU's Appropriate Computer Use Policy and OSU's Network Security Policy. Users are personally responsible for all activities on their user ID or computer system and may be subjected to disciplinary action and/or loss of privileges for misuse of computers or computing systems under their control, even if they're not personally engaged in controlling the computer or system.

Users should promptly report network problems to either the local network administrator or to the IT HelpDesk, and cooperate with support staff in correcting malfunctions.

Users should select secure passwords and change them regularly. Security-minded network access techniques should be used whenever practical.

Users should make sure their computer's operating system is kept up-to-date with current security patches. This may be accomplished by the owner, local support staff, or central staff.