IBM #1 - Laserfiche WebLink

Home Browse Search

• Subscribers will be routed through the Internet Gateway to the splash page and portal, as well as to the Internet. Government workers will be routed to the Internet to secured City applications and data based on their authorization through the City's VPN services. • iii. WLAN Security Network security will be integral in the architecture of the network design. IBM will identify appropriate security measures for the network. The recommendations will identify threats to each of these system components. The network must be made easily accessible to public access users while not exposing the City of Sunny Isles Beach assets to risks. The recommended design will support secure virtual private networks, which will enable users to encrypt data sessions as needed. Provisions will also be included for segmenting users by type -of -use. Unique wireless SSID's (sub- system ID) and VLAN's (virtual local area network) can be used to partition and prioritize available RF bandwidth such that network use by groups of users can be managed for network security and efficiency. Equipment mounting locations and techniques will be chosen to maximize the physical security of the infrastructure. iv. Wireless mesh The user WiFi network will likely be proposed as a mesh environment using the 802.11g protocol. 802.11g provides superior performance while maintaining backward compatibility with 802.11 b, supporting connectivity through a wide variety of client devices. The mesh technology utilizes flexible coverage and connection routing to provide a high degree of performance and availability. The WiFi cells automatically self organize and determine the best RF path to get to the local interconnect locations. These RF paths are continuously evaluated and altered as needed. Depending upon building density and foliage, approximately 32 nodes per square mile will be required for good coverage of the City. The requirements of low power handheld devices such as PDAs increase the required node density count due to the client side power issues; node density would be reduced if PDA access was not required. Coverage will propagate indoors, but this varies greatly depending on building type. Hot Spot Nodes will be dual use servicing Government, emergency services as well as the private sector. VLAN tagging, accomplished with ESSID translation, will maintain traffic separation and security throughout the entire system. In Hot Spot Areas, where interference in the 5.8 GHz band exists or may exist in the future, 5.3 GHz Backhaul Nodes may be added in conjunction with or replacement for, the 5.8 GHz Backhaul Nodes. This provides an extremely resilient and flexible network for future growth and scalability. Use or disclosure of data contained on this page is subject to the restriction in the 26 disclosure statement of this document.