2009 It Architecture Summary

LAUSD IT Architecture
Summary
Revised - March 5, 2009
Los Angeles Unified School District

Information Technology Division
333 South Beaudry Ave.
10th Floor, Suite 167
Los Angeles, CA 90017
Information Technology Architecture 2009
__________________________________________________________
IT Architecture Summary
TABLE OF CONTENTS
1. REVISION HISTORY ......................................................................................................................................3
2. INTRODUCTION..............................................................................................................................................4
2.1 DISTRICT IT AT A GLANCE ..........................................................................................................................4
2.1.1 Central Tier ...........................................................................................................................................5
2.1.2 Distribution Tier ....................................................................................................................................5
2.1.3 Edge Locations ......................................................................................................................................6
2.2 ORGANIZATION OF THE DOCUMENT ............................................................................................................7
3. LAUSD BACKGROUND..................................................................................................................................8
3.1 FOCUS ON INFORMATION TECHNOLOGY......................................................................................................8
4. ORGANIZATIONAL STRUCTURE OF THE INFORMATION TECHNOLOGY DIVISION.............10
4.1 CHARTER...................................................................................................................................................10
4.2 ITD ORGANIZATION STRUCTURE ..............................................................................................................11
4.3 RELATIONSHIP WITH PROCUREMENT .........................................................................................................12
5. IT ARCHITECTURE AND SUMMARY ......................................................................................................13
5.1 IT SERVICE STRATEGY DOMAIN ...............................................................................................................13
5.2 IT SERVICE DELIVERY DOMAIN ................................................................................................................14
5.3 IT SERVICE SUPPORT DOMAIN ..................................................................................................................16
6. CURRENT STATE OVERVIEW ..................................................................................................................16
6.1 NETWORK INFRASTRUCTURE ....................................................................................................................17
6.1.1 Central Core & Distribution -- WAN...................................................................................................17
6.1.2 Edge Locations -- WAN .......................................................................................................................18
6.1.3 Edge Locations – LAN .........................................................................................................................20
6.1.4 Telecommunications ............................................................................................................................21
6.1.5 Core IP Network Services – Centrally Maintained..............................................................................24
6.1.6 Convergence ........................................................................................................................................26
6.2 APPLICATIONS AND DATA .........................................................................................................................28
6.3 USER SYSTEMS ..........................................................................................................................................28
6.4 INFORMATION SECURITY ...........................................................................................................................29
6.5 INTRUSION DETECTION SYSTEMS ..............................................................................................................31
7. STANDARDS AND SPECIFICATIONS.......................................................................................................32
7.1 IT RELATED CONSTRUCTION SPECIFICATIONS ..........................................................................................32
Revised – March 5, 2009 2 of 34

__________________________________________________________
1. REVISION HISTORY
Revisions – ITD reorganization and IT infrastructure modifications. JUL-18-2008

Revisions – Updates to content in the following sections. MAR-5-2009
o 2.0 - Introduction
o 3.0 – LAUSD Background
o 4.0 – Organizational Structure of ITD
o 5.0 – IT Architecture and Summary
o 6.0 – Current State Overview
o 7.0 – Standards and Specifications

__________________________________________________________
2. INTRODUCTION
The Los Angeles Unified School District (LAUSD/the District) is an educational institution
serving the second largest student population in the country. It is committed to providing the
highest quality instructional services to a constituency whose needs range broadly in both scope
and complexity. As with other educational institutions, the District’s resources and budget are
limited. To meet the IT needs of its constituency within these constraints; LAUSD pursues long-
term solutions from a foundation of defined standards and proven interoperability.
The District’s Information Technology Division (ITD) has developed this document as a
resource for parties seeking to provide products and/or services to the District. The following
sections provide an overview of District Information Technology (IT) infrastructure to assist
prospective vendors in providing more comprehensive proposals and solutions that maximize use
of existing District technology assets and investment.
The information contained within this document represents a snapshot in time. The District’s
environment is dynamic, and it is important to note that while the District has made a substantial
effort to ensure the accuracy and completeness of this information, ongoing change and the
increasing scope of LAUSD technology infrastructure may result in infrastructure modifications
not reflected by this document. The District makes no warranties as to the accuracy,
completeness, or timeliness of the information contained in this document. Prospective vendors
should directly validate any information in this document prior to using the information as the
basis for decisions with a material impact.
The following sub-section provides a high-level overview of the District IT infrastructure. It
contains a brief description of the underlying structure and scope of IT used within LAUSD to
act as a foundation for the detail provided in subsequent sections.
2.1 District IT at a Glance

At the highest level, the District IT architecture is comprised of three tiers: a central core,
distribution layer, and edge locations consisting of over 1,200 schools, adult education facilities,
child development centers, administrative offices, and other functions spread across roughly 700
square miles. In each of these tiers, the District has deployed and maintains IT infrastructure to
provide voice, data, and video services to its constituency. This document examines the services
provided at each tier separately.

__________________________________________________________
2.1.1 Central Tier

Central Core
Within the District’s central facilities is a core
Wide Area Network (WAN) or Metropolitan
Distribution Distribution
Area Network (MAN) providing a high-
speed, switched network fabric for TCP/IP-
Edge Edge Edge Edge
based communications. Data across this fabric Location Location Location Location
include District enterprise applications access, Edge

Location
Edge
Location
converged voice and video services, Internet Distribution
access via multiple connections, and typical
shared instructional application services. Edge Edge
Location Location
User systems include Apple laptops and Edge
desktops, Intel-based desktops, servers, and Location
laptops. Applications include typical office

automation applications for PCs and a wide variety of custom and commercial off the shelf
(COTS) applications running on mainframe, UNIX-based midrange, and Windows-based
microcomputer systems. Name resolution services (via DNS) are centrally managed and IP
address delivery services (via DHCP) are provided by the local site router.
Traditional PBX systems and Voice over IP (VoIP) technology provide voice services
throughout the District. Additionally, LAUSD makes extensive use of various radio frequency
(RF) systems for specific voice applications including mobile communications for administrative
staff and for the Los Angeles Schools Police Department (LASPD) and Transportation
Department (Bus Operations).
The District’s broadcast television station KLCS provides a broad range of instructional
programming via digital broadcast channels. The District is also exploring the expansion of
TCP/IP-based video delivery systems for deployment across its multi-tiered LAN/MAN/WAN.
2.1.2 Distribution Tier

The District IT infrastructure distribution tier connects
edge locations to the core tier. For data
communications, the majority of edge locations have
one or more T1 circuits. These circuits run from the
edge location into the carrier’s facility where they are
aggregated into DS3 circuits. The resulting DS3 circuits
are run to District distribution routers that provide
connectivity to the core.
Other forms of connectivity between the edge and core
include Metropolitan Area Network (MAN) services
and Digital Subscriber Line (DSL) services. MAN
connectivity is targeted for sites with high bandwidth

__________________________________________________________
demands. DSL connectivity is used primarily to connect smaller locations in a cost-effective

manner.
2.1.3 Edge Locations

District edge locations run the gamut from small offices in facilities shared with other
organizations to large, multi-building school campuses. An equally broad range of technology is
used to service these locations; however standards have been and continue to be applied to foster
manageability.
The majority of edge locations are District schools connected to the distribution tier via one or
more T1 circuits terminating at the school in an edge router. The edge router is located in an
access-controlled MDF and connected to a backbone Ethernet switch for distribution throughout
the building(s) directly or through intermediate switches and hubs.
Building wiring includes both copper (predominately CAT-5e) and fiber. Building and campus
backbone segments typically operate at gigabit or 100 megabit speeds. Installed LAN segments
typically operate at 10 or 100 megabit and include a mix of switches and hubs. Wireless LANs
(IEEE 802.11a/b/g) are also being deployed to accommodate increased user capacity and
accessibility for user mobility. IP address delivery is provided via DHCP from the edge router,
and name services (DNS) are provided centrally. Both DHCP and DNS are managed centrally.
Edge locations access the Internet via connectivity to the core. In a few cases, 802.11 wireless
connectivity is used to bridge the edge connection at one edge location to other edge locations
within close physical proximity.
User systems include a broad range of desktops and laptops of both Apple and Intel architecture.
While current standards dictate newer operating
systems and hardware, components in use range from Business Office LAN
System 7.0 to OS 10.5.x for Apple computers and Users & Network Devices IDF Switch
from Windows 3.1 on Intel systems to Windows XP CAT 5e
Si
(or Vista) on newer machines.

IDF Switch
File and print services are provided by either direct CAT 5e
Si
IP printing or, by Intel architecture servers running
Windows NT or 2000. Standard office automation IDF Switch
CAT 5e
software is Microsoft Office; however AppleWorks Si
and Microsoft Works are also in use.

IDF Switch
CAT 5e
Private Branch Exchange (PBX) Systems provide Si
telephony services for the majority of schools. Over

MDF
100 schools and offices locations have adopted the Core Switch(es)
VoIP technology used within the core. Some smaller Si
locations only have analog voice lines provided Servers
directly via Local Exchange Carrier (LEC) for Router Si
telephony services. In addition to telephony, edge

locations also utilize radio communications (variety

__________________________________________________________
of frequencies), public address (PA), and intercommunication systems for voice

communications.
Many schools receive broadcast television channels via commercial cable connectivity. Some
schools also receive broadcast and/or datacast video from KLCS over-the–air or. Further, some
remote locations have implemented closed-circuit television (CCTV) systems for surveillance
and security purposes. Intrusion alarms, fax systems, and elevator phone lines are also provided
at edge locations where required.
2.2 Organization of the Document

As with any complex technology environment, a detailed description of every technology area
would require a document of excessive length. Instead, an overview and summary of the various
IT architecture areas is provided and organized with the following structure:
LAUSD Background: Provides a brief summary of the District’s mission and the scope of
its infrastructure and constituency.
ITD Organization Structure: Describes the organizational structure participating in or
responsible for the technology functional areas listed above.
IT Architecture and Summary: Lists the technology functional areas addressed by this
version of the IT Architecture Summary document.
Overview of Current IT Architecture: Provides descriptions of the functional areas
currently implemented.
ITD Standards and Specifications: Describes applicable standards and specifications
adopted by the District for technologies in the covered functional areas.

__________________________________________________________
3. LAUSD BACKGROUND
The District provides educational services within the greater Los Angeles area including Los
Angeles proper and several other cities in Los Angeles County. It is the second largest student
population in the country with K-12 student enrollment over 685,000. The realities for the
District include:
Maintaining approximately 1,200 sites, including 885 K-12 schools (excluding
independent charter schools) and 196 other schools and centers.
Multiple administration sites from small locations, to large, multi-floor office spaces.
Providing educational services over an area of 710 square miles including several
other cities in Los Angeles County.
Providing technology services and support to over 75,000 teachers, certificated
support personnel, certificated administrators, and classified personnel..
Ongoing evaluation of alternative educational approaches, including the use and
integration of technology into the curriculum and instructional delivery within the
District.
The District’s mission is as follows:
The teachers, administrators, and staff of the Los Angeles Unified School District
believe in the equal worth and dignity of all students and are committed to educate all
students to their maximum potential.
To meet this mission the District, like other educational businesses, must leverage technology to
respond to an evolving educational setting, raising demands of access to information and
interconnection to the larger global community.
3.1 Focus on Information Technology

The District realizes the importance of leveraging technology to respond to evolving demands of
an educational environment the size of LAUSD. As a result, the LAUSD Information
Technology Division (ITD) has established IT strategic initiatives to support the District goal of
providing quality education to Los Angeles area students.
As one of the largest education providers in the country, the District is faced with unique
challenges in terms of size and complexity. The successful implementation of the IT strategic
initiatives will largely depend upon ITD’s ability to overcome the following challenges:
Providing equitable IT services to vastly distributed geographic locations;
Overcoming facility issues that include, but are not limited to: space constraints, limited
electrical capacity, hazardous materials, inadequate environmental controls, and service
provider access.
Minimizing school site and office disruptions during project implementations;
Securing and retaining adequate expertise and staffing to coordinate implementation
schedules; control costs; maintain quality assurance and manage project risks;

__________________________________________________________
Securing and managing limited funding to align with required implementation schedules;
Maintaining up-to-date design and technology standards to meet the changing and
growing needs of the District.
The LAUSD Information Technology (IT) infrastructure encompasses a vast variety of wired
and wireless communication systems to support the delivery of the District’s instructional and
administrative services. The District continues to balance the expanding IT needs of its
constituency with the realities of budgetary constraints through the execution of comprehensive
IT lifecycle strategies. These strategies are carefully considered and implemented to coordinate
infrastructure modernization projects, technology acquisitions, and the operational management
of IT systems. As a general practice, ITD leverages previous technology investments to the
fullest extent possible when deploying additional IT services.
The following is a set of general technical design guidelines used by ITD when planning IT
infrastructure projects:
Design for the long-term (e.g., scalability, extensibility) to help ensure that IT
communication networks continue to support the increasing deployment of essential
instructional, administrative, and safety applications.
Consider the total lifecycle costs (e.g., capital, operational, maintenance) of all IT
infrastructure solutions to ensure proper resource planning.
Where necessary, replace or upgrade obsolescent and failing technology to reduce
maintenance costs and/or enable new IT services.
Maximize limited IT budgets by leveraging investments in converged voice, video, and
data infrastructures (e.g., common cable plants, shared technology platforms,
consolidated operational processes).
When possible, specify standards-based equipment and materials that are affordable,
durable, and sustainable.
In addition, when determining IT projects, the following criteria are considered:
Obsolescence and/or age of IT systems supporting instructional and central business
applications. The ability to reduce or avoid excessive failure rates is critical to the
operational success of ITD.
Capacity and availability of IT systems and networks to support changing instructional
paradigms (e.g., online instruction/distance learning), administrative services, and
increasing school counts.

__________________________________________________________
4. ORGANIZATIONAL STRUCTURE OF THE INFORMATION TECHNOLOGY DIVISION

The organizational entity responsible for the delivery of technology within the District is the
Information Technology Division (ITD). The ITD is organized to support all technology
components of the District including:
IT Planning (strategic and tactical)
Business Systems and Applications
Instructional Systems and Applications
Data and Telecommunication Infrastructure – Wireless, LAN, WAN, and Voice
IT Security
User Systems including laptops, printers and other devices necessary for IT to input
and extract data from the various District systems
4.1 Charter
ITD’s primary role is to:
Align and direct IT resources to meet District instructional and administrative goals.
Within LAUSD, the program management staff categorizes IT infrastructure projects into the
following nine domain areas:
Enterprise Personal Computing
Information Security Systems
IT Lifecycle Management
Local Area Networks
Network Management and Services
Radio Systems
Telecommunications
Voice, Video, and Data Convergence
Wide Area Network
When planning IT projects, the following key objectives are carefully considered:
Consolidated requirements of the District’s constituents (e.g., instructional,
administrative) to define comprehensive IT solutions.
Infrastructure design and deployment strategies to cost effectively accommodate
incremental and diverse user demands (e.g., access to network resources for new/existing
schools; increasing use of technology for instruction and professional development).
Technology acquisitions that are cost effective, supportable, and provide long-term value.

__________________________________________________________
4.2 ITD Organization Structure

__________________________________________________________
The head of the Information Technology Division is the Chief Information Officer (CIO), Mr.
Anthony D. Tortorice, with Mr. Shahryar Khazei as the Deputy CIO. The CIO manages the
following departments:
Support Services performs Division-wide financial, personnel, business, and contract
services for the IT branches.
Communication Training & Support Services Branch develops and oversees ITD
technical training, public relations, financial reporting, and risk management.
Academic & Operational Computing coordinates IT educational technology in support
of the Superintendent’s instructional goals to provide students and teachers with access to
quality instructional resources and programs. Provides online learning opportunities
through its Los Angeles Virtual Academy (LAVA).
Software Group develops and supports student and information management systems
and the tools to manage business, human resources, payroll, school, and student level
data such as Business Tools for Schools (BTS) and Integrated Student Information Systems
(ISIS).
Shared Technical Services provides services in the following areas: data center
operations, network operations, telecommunications, computer repair, security, helpdesk,
and server and storage management.
Capital Projects develops and designs the District’s overall information technology
infrastructure. Establishes and maintains technology-related standards and specifications.
Manages all IT capital projects and other projects.
For additional information about the staff and structure of the Information Technology Division,
please refer to the appropriate sections of the District’s Web site: http://www.lausd.net/.
4.3 Relationship with Procurement

As with all areas of acquisition, the procurement process for IT products is controlled from a
process perspective by the District procurement office. However, ITD plays an important role in
determining the requirements, standards and specifications for technology that will be procured.
It must be stressed that all materials offered in this document are intended to support overall
District procurement processes. The goal is not to replace processes and instructions provided by
Procurement, but to clarify some vendor questions pertaining to the overall IT environment in
the District, to provide support information such as IT specifications and requirements, and to
support specific procurement activities involving IT buying decisions.

__________________________________________________________
5. IT ARCHITECTURE AND SUMMARY

ITD measures success through stakeholder satisfaction. The primary stakeholders include the
students, instruction, administration, and community constituents of the Los Angeles Unified
School District.
To ensure success, ITD maintains an overall architecture framework from which to deliver IT
services based upon stakeholder requirements. This framework provides for the integrated
definition of resources and processes needed to plan, manage, and operate each of the IT service
domains. The model is based upon the premise that any new technology must be aligned with the
service level objectives of the stakeholder domains.
The architecture is described as an overall framework that organizes IT service domains into
Service Strategy, Service Delivery, and Service Support. Each of the IT service domains is
described below.
5.1 IT Service Strategy Domain

The District recognizes the need to ensure that cohesive IT strategies are maintained and
commitments made for having appropriate levels of technology resources and operational staff.

__________________________________________________________
The IT Service Strategy Domain comprises various processes, systems and resources that
manage, operate, and maintain the IT investment of the District. This domain starts with defining
charter and governance statements that provide ITD authority to plan, manage, and maintain the
IT assets for the District. IT governance functions as an integral part of the overall LAUSD
governance program and consists of the ITD leadership, organizational structures, and processes
to ensure that the IT infrastructure sustains and extends the District’s strategies and objectives.
This domain includes maintaining an evolving set of IT policies, standards and procedures to
achieve consistency, efficiency, and effectiveness in the delivery of IT services that support the
instructional and administrative functions of the District. An IT risk management function is
provided to ensure the ultimate success of IT projects. Risk management is a discipline that
attempts to identify, address, and mitigate risk elements before they become threats to the
District. The Instructional Technology function provides support for the educational constituents
on the use of technologies to enhance instruction and increase student achievement. The Training
and Professional Development function provides District personnel with training on the use of
new application and technology systems. This function also facilitates knowledge transfer to
enhance career development.
5.2 IT Service Delivery Domain

Within the IT Service Delivery Domain, the Enterprise Applications function is responsible for
developing and supporting enterprise software applications in support of student and information
management systems, and the tools to manage business, human resources, payroll, school and
student level data. This function includes all the electronic methods for saving, storing,
accessing, and archiving District data.
The Shared Services Infrastructures function provides the District with the delivery of
centralized IT services. As part of this function, a central Data Center operates mainframes and
shared server systems used for District applications and storage. Each of the primary systems
consists of a large array of individual applications—from complex financial systems to simple,
single task applications to support reading instruction. As with other enterprises of a similar size,
the District currently supports an extremely broad range of applications and data services. The
District has deployed commercial software from a variety of vendors and custom applications
have been developed both externally and internally. These software systems are deployed across
mainframe, mid-range, and microcomputers throughout the District’s infrastructure. District use
of web-based technology continues to evolve. Current initiatives include a wide mixture of Web
portals for access to existing District systems, Web-based front-end systems for legacy
applications and general use of Internet and intranet sites for data distribution.
The Shared Services Infrastructure function also includes all the systems and tools that an
individual District employee, educator, or manager can use to accomplish their respective
responsibilities. Some examples of personal electronic systems are desktops, laptops, and PDAs
as well as pre-packaged productivity software for tasks such as word processing, spreadsheet
analysis, and individual database development. This function also includes some level of file
storage (file services), servers, and input/output/storage peripheral devices.

__________________________________________________________
The Network function consists of the technology components that allow users and systems to
interconnect with each other. It also includes other infrastructure technologies necessary for an
enterprise system to work. The primary components are:
Wide Area Network (WAN): The District’s WAN consists of a high-speed, meshed core
and multi-point distribution layer connecting its educational and administrative facilities
across roughly 700 square miles of the Los Angeles metropolitan area. The WAN
provides access to the Internet and the central data center. The District’s Internet routers
are configured with an assigned Autonomous System Number, public IP addresses, and
the BGP routing protocol for service resiliency.
Local Area Networks (LAN): The District currently supports over 1,200 facilities each
with one or more wired and wireless LANs. The District mandates specific standards for
all LAN cable plants, equipment, and connectivity deployments.
Telecommunications: The District maintains vast and diverse telecommunication services
ranging from basic and emergency telephone services to public address systems,
intercommunication systems, handheld and mobile radios, cell phones, intrusion alarms
and others.
Core Transport Protocol Services: The District has employed TCP/IP as the standard
transport protocol and supports multiple IP services including Domain Name System
(DNS) domains for both internal and external use. Dynamic Host Control Protocol
(DHCP) provides IP address allocation and delivery.
Convergence: The District currently maintains deployments of multiple converged
services to meet increasing instructional and administrative requirements while best
leveraging limited budget resources. IP delivery of voice (telephony), video
conferencing, and streaming video technologies are in use throughout the District.
District adoption of converged IP technologies is pragmatic driven by the potential to
decrease costs through consolidated infrastructure and simplified management and
maintenance.
Network Management & Services: The network infrastructure provides basic network access,
maintenance, monitoring and support of critical network resources. Included is data
communications connectivity (e.g., network devices, circuits, cabling) to allow access to the
Internet and required District resources (e.g., applications, electronic storage).
The Information and Technology Management function consists of dedicated personnel,
processes, tools, and applications for monitoring and managing the District’s Internet Protocol
(IP) networks and services. This function includes a Network Operations Center (NOC), which
provides personnel and automation for component monitoring, management system operations,
and network engineering. NOC fault and performance monitoring services are provided during
extended business hours, with 24x7 emergency notifications. The NOC is currently collecting
and reporting performance metrics for approximately 3,000 network attached components and
systems.

__________________________________________________________
5.3 IT Service Support Domain

The IT Service Support Domain consists of the various components to successfully operate the
IT systems and to provide ongoing user support for the employment of technology services.
Within the IT Support Domain, the Service Desk provides a primary point of contact for District
users regarding IT Customer Support services. The Service Desk also serves as the primary
liaison to technical support personnel to coordinate the delivery of responsive resolutions to IT
infrastructure problems. Operations Management provides basic maintenance and support of IT
resources used in the delivery of critical instructional and administrative services. Lifecycle
Management provides the necessary processes and tools to manage the total cost of technologies
and services towards achieving more sustainable costs and District value.
Information Security Management provides the necessary measures to protect information
regardless of how it is handled, processed, transported or stored. The District views its student
and administrative information as a critical organization-wide asset. Therefore, information
protection is a concern to the highest levels of ITD management. The IT security function
develops and oversees security strategies for the District’s use of information technology, and
establishes and audits systems and procedures that prevent unauthorized access to or use of
District technology resources. This domain provides the necessary measures to protect
information regardless of how it is handled, processed, transported or stored. In each service
delivery domain, there are interrelated security considerations. Major components of District IT
security include access control and management for user systems and data and the provision and
management of remote access. The security function also includes multiple systems for
controlling both inbound and outbound Internet communications via firewall and Intrusion
Detection Systems (IDS), virus control, e-mail spam avoidance, VPN deployment, management,
and more.
Also included in this domain is the IT Project Management Office that houses information,
resources, and processes to successfully manage IT projects within the District. While specific
technology areas build specialized project and technical management processes and systems, this
area has enterprise responsibility to ensure the projects are managed and operated to District ITD
standards.
A growing area of focus during the last year and going forward is in the formalized use of IT
service management processes. The District is standardizing on the Information Technology
Infrastructure Library (ITIL) framework for IT service management. Management insight into
and control over the availability and quality of IT services being delivered is critical to the
District. Additional focus is also given to the deployment of remote management tools to
increase the diagnostic analyses capabilities and monitoring functions of ITD.
6. CURRENT STATE OVERVIEW

This section provides an overview of the current IT environment that exists in the District. A
number of major initiatives are currently underway to achieve greater cost efficiencies and will
transform major sub-sections of the current environment. While efforts are made to keep this
document current, some inconsistencies may be found.

__________________________________________________________
The discussion begins with the network infrastructure and continues with the security,
application, database, customer support, and other major components of the technology
infrastructure.
6.1 Network Infrastructure

The following sub-sections describe technology functional areas within the Network
Infrastructure. The current LAUSD Wide Area Network (WAN) model is based on a three-
tiered design — Core, Distribution, and Edge.
6.1.1 Central Core & Distribution -- WAN

The existing WAN Core backbone network consists of four major node sites connected by a
private OC-192 SONET ring formed by Cisco 15454 optical switches. The optical switches
provide the transport for internal traffic over the backbone network to/from Data Center
applications and services as well as transport for Internet access. The SONET ring connects
core/distribution devices (Cisco model 760x) that routes/switches backbone traffic and
aggregates edge circuit connections. Each of the node site locations provides aggregation of
edge connections to the distribution layer via one or more T-1 circuits or scalable Metropolitan
Area Network services. A few school and administrative office sites are collocated at one of the
nodes and have direct connectivity to the WAN Core via fiber.
The District has established the Open Shortest Path First (OSPF) standard as the internal routing
protocol. Core nodes and associated connections use OSPF Area 0. There are four primary OSPF
Areas currently in use at the distribution layer. For growth, additional areas are being added
using a new numbering scheme. All OSPF Areas connect to Area 0 at one of the four WAN Core
Node facilities.
An overview of the existing LAUSD WAN architecture is illustrated in the following graphic:

__________________________________________________________
The District’s schools and offices are connected to the Internet via the LAN/MAN/WAN
infrastructure. Most schools are connected to the District’s WAN by 1 to 6 T-1 circuits.
However, some sites connect to the WAN core via Digital Subscriber Line (DSL) or scalable
Metropolitan Area Network (MAN) services. MAN services are being deployed to school sites,
based upon demands for instructional use, availability of funds, and project schedules. The
District’s WAN has three connections to the Internet. Two connections are via the AT&T MAN
and the other is via Digital California Project (DCP). The following diagram provides a high
level view of the Internet connectivity architecture.
6.1.2 Edge Locations -- WAN

LAUSD edge router connectivity is based on a star topology. Each school, District office,
Campus, or other site is directly connected to a distribution router located at one of the four core
sites. Edge connectivity is primarily via T1 (or multiple T1) circuits. Schools with multiple T1s
are configured to load balance across up to six T1s. As a tactical measure, T1s are incrementally
added to increase capacity. Scalable bandwidth solutions are being deployed to support strategic
initiatives.
To reduce equipment and circuit costs, T1 circuits are bundled into channelized DS3 circuits at
the nearest Node site. These DS3s terminate on Cisco model 7609 distribution routers. These
routers are connected to backbone Cisco 7600 routers/switches via 10Gbps Ethernet connections.

__________________________________________________________
Other connectivity to edge sites includes DSL and wireless. Sites that do not require full T-1
access, currently use DSL circuits to communicate with the District WAN. The local exchange
carrier terminates private DSL lines through their broadband concentrating equipment directly on
LAUSD DSLAM equipment at Node sites.
The District has also deployed Wireless Access Points (WAP) into LAN environments at several
schools to extend WAN connectivity short distances to neighboring schools. This is
advantageous for emergency, short-term projects, or where trenching new entrance cables would
be impossible, costly, and/or time consuming.
The LAUSD WAN has grown through many project procurements and implementations. Due to
the nature of procurement cycles, constantly changing technology and solutions provided by
vendors, the WAN has grown to include a variety of equipment. The following table provides a
summary of WAN equipment used at the edge.
Router Equipment
Comments
(Cisco)
372x, 38xx, 800 Mostly DSL sites and some schools

17xx Some District offices
18xx, 262x, 28xx Some stand-alone Adult Ed sites and some

District offices
36xx, 37xx, 38xx Mostly schools, some District offices

__________________________________________________________
6.1.3 Edge Locations – LAN

The LAUSD LAN architecture and hierarchical model for new projects is based on established
industry technology standards and design specifications for LAN configuration. In simple terms,
this is a Hierarchical Star, Ethernet topology using a hybrid multimode/single mode vertical fiber
backbone and a hybrid horizontal cabling system using either CAT 5e/6 and fiber (in some
schools), fiber only, or CAT 5e only. Non-instructional business offices use CAT 5e/6
horizontal cabling. The District is also deploying 802.11a/b/g Wireless LAN technologies to
provide increased network access and user mobility.
The District has adopted an equipment standard including switched gigabit Ethernet on the
backbone and switched 10/100 Mb Ethernet to end users. The above illustration provides a
graphic representation of this architecture.
The District currently supports approximately 1,200 locations of which over 70% are K-12
school campuses. Other facilities supported include business offices, early education centers,
adult education centers, and other instructional and administration facilities.

__________________________________________________________
The following is a high level list of many LAN systems currently installed on District LANs:
Alcatel/Xylan 10xx, 4000, 5000, and 6000 series switches
Alcatel/Xylan Omni 50xx, 77xx, and 78xx
Allied Telesyn model AT-FS724I-10 switches
Cisco model 412 repeater (hub)
Cisco model 1900 switches
Cisco 29xx, 35xx, and 3750 series switches
Cisco 50xx and 55xx series switches
Cisco 60xx and 65xx series switches
Cisco 45xx series switches
DiGi media converters
MiLAN S3130SC switches
MiLAN model 801 switches
MiLAN model 9100 media conversion system
SMC model SMC-EZ108FDT switches
Dell Power Edge servers
Cisco 36xx, 37xx, and 38xx series routers
Cisco Wireless (WLAN) Access Points and Bridges
Alcatel/Aruba Wireless (WLAN) Access Points, Bridges, and Controllers
3COM Wireless (WLAN) Access Points
6.1.4 Telecommunications
The Telecommunications infrastructure provides basic and emergency voice services throughout
all District locations (over 1,200). This technology area is responsible for the operations and
management of all voice communication servers and switches (including associated handsets and
cellular phones) and the provisioning of all communication lines and circuits.
Telecommunication services include providing access to the Public Switched Telephone
Network (PSTN) for dial tone, cellular service, long distance access, pagers, and mobile data
communications. Other services include maintenance of public address / intercommunication and
two-way radio systems.

__________________________________________________________
The following diagram provides an overview of a typical telecommunications site infrastructure.
The following subsections provide architectural summaries of the critical telecommunication

services maintained by LAUSD.
6.1.4.1 Voice (Telephony) Services – Central and Edge

AT&T and Verizon provide standard voice services to approximately 1,200 locations.
Additionally, several thousand cell phones and a few hundred mobile broadband air cards have
been issued on an as-needed basis to the staff.
LAUSD predominantly uses legacy PBX systems to provide standard voice services. However,
there are approximately 110 locations using VoIP solutions. The District has upgraded or
replaced existing PBXs so they will interface with public address and intercommunication
systems to provision 911 access from the classrooms. At locations with a significant number of
individual business lines or trunks, the District is moving toward replacing them with PRI trunks,
thereby eliminating all use of Centrex connections. The predominant PBX systems are Avaya
models Definity/ProLogix.

__________________________________________________________
The District also operates several Call Centers capable of supporting various configurations of
agents, user groups/departments, skill groups, and supervisors.
6.1.4.2 Voicemail Services

In general, schools are typically responsible for obtaining and supporting their own voicemail
solutions (some exceptions exist). The predominant voicemail systems at middle and high
schools are Avaya Intuity systems. Intuity is Avaya’s proprietary voicemail system. The ITD
Telecommunications group provides voicemail services to most of the District’s administrative
offices using Cisco’s Unity system. Unity is Cisco’s proprietary voicemail and unified
messaging system. This system is located in the Central Data Center located in the Beaudry
building.
6.1.4.3 Mobile Radio – Central to Edge

The District strives to provide reliable and effective radio communications for its schools, police
force, transportation staff, and administrative employees to reinforce safety measures. Radio
support is primarily provided for the following four groups of District personnel:
Los Angeles School Police Department (LASPD)
Transportation Branch (primarily buses)
Administrative staff (primarily on administrative and school campuses) and KLCS
Local Districts
The following categories of radio operations exist today in LAUSD’s radio services:
UHF (450MHz) band conventional (analog voice technology- no trunking)
UHF (800MHz) band conventional (analog voice technology- no trunking)
VHF (150MHz) business band (simplex only) analog voice technology
Low-power Industrial (LPI) band (457MHz)
Microwave (6/11 GHz) band (digital)
District radio staff also supports several microwave networks. One network is used to
interconnect the voice radio sites to the radio system master control at Soto Street and provides
analog voice communications between the sites and within the District. The system operates
under licensed 6/11 GHz spectrum and has five (5) T-1 circuits to the Master Control at Soto St.
Channel distributions and support infrastructure is described in the table below:
Frequencies Tower Sites Digital
6/11 GHz Oat Mountain T-1 to Soto St

Mount Lukens T-1 to Soto St
Mount Lee T-1 to Soto St
San Pedro Hill T-1 to Soto St
Wilson High School T-1 to Soto St

__________________________________________________________
Frequencies Tower Sites Digital
Master Control (Soto St.) T-1 to Soto St
The following table summarizes the District’s major fixed radio sites:
Frequencies Tower/Receiver Sites Customer
800 MHz Mount Lukens Transportation

Mount Lee Transportation
San Pedro Hill Transportation
450 MHz Mount Lukens LASPD/Schools
Mount Lee LASPD/Schools
Oat Mountain LASPD/Schools
San Pedro Hill LASPD/Schools
Wilson High School LASPD/Schools
Loop Canyon LASPD/Schools
El Camino High School LASPD/Schools
Windsor Hills Magnet LASPD/Schools
460 MHz Mount Lee Maint. & Ops.
A Radio Modernization planning initiative is currently underway to address District

requirements for enhanced radio communication services (e.g., safety) and interoperability with
local first responder organizations.
6.1.4.4 Public Address/Intercom – Edge Locations

LAUSD has deployed Public Address/Intercommunication (PA/IC)
systems from several different manufactures. The majority of PA/IC
systems are from Dukane (StarCall), Bogen (Multicom 2000) or
Rauland Borg (Telecenter). The majority of these systems
interconnect with the PBX systems to provide 911 call out from
classrooms.
6.1.5 Core IP Network Services – Centrally Maintained

The following subsections provides an overview of the LAUSD systems for DNS and DHCP
delivery and management.

__________________________________________________________
6.1.5.1 DNS
The District currently provides DNS services in support of the following two Internet registered
domains:
lausd.k12.ca.us
lausd.net
The lausd.k12.ca.us domain is the District’s primary public domain. The lausd.net domain is
primarily an internal-use domain, but publicly registered and contains host entries that are
publicly resolvable. Externally, both domains share the following primary and secondary
authoritative servers:
ns1.lausd.net – Operated by LAUSD
ns2.lausd.net – Operated by LAUSD
The LAUSD operated external servers provides DNS services via current versions of BIND.
6.1.5.2 DHCP
The District has developed and deployed two IP address allocation plans: one for schools and
other remote locations and another for District headquarters. The District is currently in the
process of deploying an IP address plan to accommodate recent growth at remote locations; a
copy of this plan is available separately.
In summary, District internal IP addressing utilizes standard private address space as defined by
the Internet Assigned Numbers Authority (IANA). Specifically, addresses are assigned from the
10.x.x.x (CIDR 10/8 or “Class A”) network address space.
Historically, the District utilizes four (4) class C CIDR addresses (10/21) for instructional and
administrative network assignments at each school. The first octet of all assigned address is 10.
The second and third octets are used to signify the admin network, instructional network and
location (Node, OSPF area, school, and floor). Schools that required additional address space
have been provided additional class C addresses.

__________________________________________________________
6.1.6 Convergence
Voice services are primarily delivered via traditional paradigms. However, Voice over IP (VoIP)
technologies have been deployed where cost effective. The District has also deployed video
conferencing and various streaming video technologies in support of special instructional
programs and administrative requirements.
LAUSD has implemented an extensive core VoIP infrastructure that interoperates with the
legacy telephony environment and the existing IP network infrastructure. The VoIP
infrastructure serves both instructional and administrative environments. Several administrative
sites, a few elementary schools, and approximately 80 Early Education Centers (EEC) are using
the District’s VoIP infrastructure.
The District’s VoIP infrastructure utilizes both H.323 and MGCP enabled gateways/routers.
These devices provide connectivity to the IP WAN and ensure availability of voice services in
the event of a WAN circuit or remote Call Manager failure. At remote sites, the District typically
provisions either a PRI circuit and/or a few dedicated analog lines connected to a Local
Exchange Carrier’s (LEC) Central Office (CO) to handle local off-net calls, faxes, and lifeline
emergency calls (e.g., 911). Local lines are either connected to the gateway/routers for automatic
off-net routing or installed as separate Direct Inward Dial (DID)/Direct Outward Dial (DOD)
lines. The LAN switches provide IP network connectivity and inline power for the VoIP phones.
At a minimum, these switches support IP multicasting, priority queuing (802.1p), and VLANs
(802.1q).

__________________________________________________________
The following is an overview of the District’s current VoIP system infrastructure:
15 Cisco Call Managers distributed at the 4 node sites

Over 140 VoIP Gateways
Over 6,000 VoIP Phones
LAUSD uses IP-based video conferencing (IPVC) solutions for internal and external two-way
interactive video communications. As illustrated in the diagram below, the District’s IPVC
solution utilizes the WAN infrastructure as the transport facility for IPVC communications.
In addition to providing television content, the District’s television station, KLCS, is also using
its Digital TV spectrum for delivering digital multimedia content to school sites, including
streaming educational video. KLCS maintains a video head-end facility responsible for video
capture, storage, control, and distribution. Over the course of a single day the facility maximizes
its available bandwidth by transmitting various combinations of over-the-air channels, streaming
specialty channels for LAUSD students and teachers and near video-on-demand (NVOD)
content for individual LAUSD campuses.
The District is also utilizing IP video distribution systems to broadcast Board meetings (and
other special meetings) throughout the Beaudry building and to local district offices. The
converged IP LAN/WAN is being used as the transport medium. The current IP/TV system uses
the MPEG-4 format streams to make optimal use of available bandwidth.

__________________________________________________________
6.2 Applications and Data

Application systems are accessible to the District personnel and organizations that use them in
support of instructional and school business functions. A representation of these systems include
the following:
Student Information and Record Systems. This includes a full range of applications and
databases pertaining to student oriented information from health data, to school academic
records, to attendance information and so forth.
Business Systems. This includes finance, human resources, library, and cafeteria services.
Other user support services include a full range of educational and instructional support systems.
A full plan, LAUSD Educational Technology Plan, is revised regularly and focuses on the
current and future directions for technology and the improvement and support of educational
delivery and instruction. This plan can be obtained upon request and is available on line.
The District currently maintains the following types of data repositories:
Student Information Data warehouse that is built on Oracle brand products.
Business Enterprise databases to support administrative applications. Many of these are
housed on mainframe and mid-range systems.
Middleware databases that house information from other District systems and serve as
intermediate repositories for data to ensure the security of the enterprise system and/or
serve as a query data repository.
Client/Server databases housed on UNIX systems.
6.3 User Systems
User systems include personal computing resources that support the needs of District
constituents. These resources include devices that an individual uses to communicate, access
applications, and extract data in the performance of their responsibilities. The District maintains
an IT infrastructure comprised of shared systems, networking components, cabling and circuitry.
Riding this infrastructure are hundreds of thousands of computers (i.e., Apple and Intel
architectures) running more than 150 individually sanctioned, primary instructional and business
applications, an unknown quantity of secondary applications, general access to the Internet, and
other operational communications and services.
LAUSD has established standards for the procurement, management, and support of these
systems. The District defines the minimum acceptable standards for hardware and software
annually. Schools and offices purchase equipment off the District contracts. There is a consistent
method for providing help desk and onsite maintenance support. The District has a central
contract for purchasing computers and servers and continues to investigate the leveraging of a
District-wide licensing agreement as a cost saving measure for software.
The District has been aggressively working to increase the number of workstations available for
staff and student populations. The District’s vision is to provide users with access to the

__________________________________________________________
computing resources they need, when they are needed in a cost effective and financially
sustainable manner.
6.4 Information Security

In addition to the network infrastructure and upgrade of the application environment, the District
has enhanced the security of the overall IT environment to continue safeguarding District data in
compliance with internal and external standards (e.g., CIPA, HIPAA). Along these lines, major
planning, policy making, and procedural improvements have been made. The following graphic
provides an architectural view of the current information security domain.
The following table lists specific network devices that provide primary support for the District’s
information security policies.
Device Purpose
Application Servers Application servers support District security policies by application of
documented server hardening standards and other good security practices.
Cisco AS5400 Dial- A dial-in server allows authorized access to internal District servers, with security
in access restrictions implemented using router access lists.

__________________________________________________________
Cisco MARS Cisco MARS receives security events either via SNMP or syslog. Events are
analyzed to provide real-time warnings of attacks and to illustrate trends in
security events.
Firewall cluster The firewall cluster network traffic between the internal District network, the
external Internet, and various specific subnets (or DMZ zones) based on security
requirements.
LDAP Cluster The LDAP cluster centralized server for managing District employee information,
(OID) including network, server, and application access. The LDAP cluster provides a
single point of management for non-student user accounts.
Network IPS The network IPS detects and logs network intrusion attempts, to provide
information to ITD Security on current security threats and to trace serious
intrusion efforts to their source.
Packeteer While primarily designed to enforce quality of service requirements for Web
applications, Packeteer devices are also used to block applications that pose a
security risk or that otherwise violate District policies. These applications include
so-called Peer-To-Peer file sharing applications such as Kazaa.
Remote Site Restrict network traffic between schools instructional subnet and other subnets
Routers (with to deter malicious software and other security breaches.
access lists)
Server Distribution A recently installed firewall module in the server distribution switch can be used
Switch Firewall to filter traffic between different server subnets.
Module
Syslog servers A central repository for server and network device event logs. Syslog is a
standardized service supported by a variety of devices for formatting and
transmitting event log information.
VLAN-based traffic District traffic is separated into VLANS to support traffic management and quality
separation of service needs. While not specifically designed as a security measure, traffic
separation by VLANs can mitigate the risk of devices or users on one VLAN
improperly accessing devices on another.
Router access lists restrict traffic from the instructional VLAN to the other
VLANS.
VPN Concentrator The VPN concentrator provides secure remote access to District resources to
designated users having authenticated VPN accounts.
VPN DMZ The VPN DMZ is a subnet defined via firewall rules, to provide restricted access
to the LAUSD WAN for remote VPN users.
Web DMZ 1,2,3,4 Web DMZ zones are a set of separated subnets designed to provide external
Internet access to publicly available District services. The four separate DMZ
zones are designed to house servers subject to different security practices.
Websense Cluster The Websense cluster access to Internet sites to enforce District policies and
regulations governing appropriate content (specifically CIPA).
Wireless Access Wireless access is provided at remote sites (including schools) and at Beaudry
Points headquarters. The current specification (Standard 25810) requires support for
IEEE 802.11i security standards.

__________________________________________________________
6.5 Intrusion Detection Systems

Intrusion Detection Systems, a low-voltage security system, have primarily been installed as part
of the BB Bond Safety and Technology program.
The typical Intrusion Detection System network topology and equipment location relationships
are shown in the figure below.
These systems--separately and independently--communicate an alarm or trouble incident to the

school law enforcement agency, LASPD. The notification is performed through auto-dialer and
modem capabilities contained in the central security control unit located in each school. Upon a
sensor activation or system irregularity, the control unit dials the central law enforcement
location and annunciates the location and the nature of the alarm or problem.

__________________________________________________________
7. STANDARDS AND SPECIFICATIONS

The District has established standards and specifications in most of its technology functional
areas. Some of the standards are still evolving, especially in the enterprise personal computing
and voice, video, and data convergence areas.
7.1 IT Related Construction Specifications

When installing, upgrading, and/or maintaining IT systems, contractors and vendors must
comply with the District’s current Construction Specifications. Provided in this section are
references to specifications for all IT-related projects within LAUSD. The District also maintains
numerous other specifications (not referenced here) that relate to these IT specific specifications.
These specifications are for informational use only. The specifications listed in the table below
are actively maintained and updated by LAUSD, and are therefore subject to change.
Comprehensive listings of current LAUSD specifications are available in separate documents.
Specification Description
25135 Cable Tray Specification for wire mesh cable management systems, tray sections, couplers,
hangers, bonding and grounding conductors, and other materials required to
provide a complete cable management system.
25568 Premise Wiring – Specification to support the installation of premise wiring at existing facilities to
Existing Facilities include LAN/WAN cable (UTP Cat 5e, and 62.5 micron multimode fiber ), low
voltage wiring, telephony wiring, MDF, IDF, LDF frame terminal specifications
and signal terminal cabinets.
25569 Premise Wiring – Specification to support the installation of premise wiring at new facilities to
New Facilities include LAN/WAN cable (UTP Cat 6, and 50 micron multimode fiber ), low
voltage wiring, telephony wiring, MDF, IDF, LDF frame terminal specifications
and signal terminal cabinets.
25570 Quality Assurance, Specification that addresses test and acceptance criteria and documentation.
Test and Acceptance Describes specific test procedures to be performed during the acceptance testing
Requirements for Los Angeles Unified School District New Construction, Safety &
Technology and Modernization Projects involving LAN, PBX, IPVC,
Convergence and WLAN equipment and associated cable plants.
25720 Intrusion Detection Specification to support the installation of Intrusion Detection systems to include
Systems infrared motion detectors and associated power supplies, batteries, cables, door
switches and cables, controllers, graphic annunciator, expansion modules, power
modules and batteries, telephone connectors and cables, connections to fire
alarm control panels, connections to main telephone terminal boards and
connections to fire sprinkler report relays.
25723 Telecommunications Specification for installing and connecting Owner furnished telecommunications
Systems equipment including PBX, cabinet, attendant consoles, and telephone
instruments. Telecommunications system shall include provisions for paging
over PA system.
25725 Closed Circuit TV & Specification for procuring, supplying and installing digital closed circuit
Audio Surveillance Systems television (CCTV) and audio surveillance, including card access control systems
– New Facilities for subterranean parking structures, and other required materials and equipment.

__________________________________________________________
25726 Closed Circuit TV – Specification for procuring, supplying and installing digital closed circuit
Existing Facilities television (CCTV) , including required cameras, terminal cabinets, conduits,
cables, monitors, switchers, digital video controller, software, connectors, and
other required materials and equipment.
25760 Video Conferencing Specification for procuring, supplying and installing all equipment necessary for
Systems implementing a IP video conferencing (IPVC) infrastructure at LAUSD, i.e.
provide a IPVC solution capable of achieving requirements for real-time
business-quality (e.g., 30 fps at 384 Kbps) video distribution, using industry
standard CODECs.
25780 Voice, Video, & Data Specification to support the District’s efforts to converge voice, video and data
Convergence onto its LAN/MAN/WAN networks.
25805 Local Area Network Specification to support the installation of LAN equipment (including Wireless
Systems LAN) materials and interoperability. Includes the installation, connecting, and
testing of the networking system, including all components, required cabinets,
terminals.
25810 Wireless LANs Specification that describes the equipment, installation, integration,
(WLAN) configuration, testing, training, documentation, standards, and acceptance
criteria, necessary for acquiring and implementing IEEE 802.11a/b/g Wireless
Local Area Network (WLAN) systems at LAUSD.
25821 Public Address and Specification to support the installation and connecting of a central
Intercommunication intercommunications rack, with a public address (PA) system, including all call
Systems paging access from the PBX. System shall interface with a master clock system
for a class change signaling system and with the Intercommunications systems.
This specification also supports the installation of Intercommunication hardware,
which shall provide the capacity for internal communication between operator
(main office) and selected classrooms.
25822 Autonomous Public Specification that describes requirements for furnishing a complete autonomous
Address Systems – Small public address (PA) system in multi-purpose rooms and/or small gymnasiums for
Gymnasiums Primary Centers and elementary schools.
25823 Autonomous Public Specification that describes requirements for furnishing a complete autonomous
Address Systems – public address (PA) sound system in auditorium of middle and high schools.
Auditoriums
25824 Autonomous Public Specification that describes requirements for furnishing a complete gymnasium
Address Systems – autonomous public address (PA) system for middle and high schools.
Gymnasiums
25825 Autonomous Public Specification that describes requirements for furnishing a complete athletic field
Address Systems – Athletic autonomous public address (PA) system.
Fields
25850 Television System Specification for procuring, supplying and installing a complete and operating
RF distribution television system including all required amplifiers, couplers,
outlet devices, cables, connectors and all other materials. System transmission
medium will use coax/copper cable.

__________________________________________________________
25852 Television Systems Specification for procuring, supplying and installing a complete and operating
(Fiber Optic Distribution) RF distribution television system including support for all required digital signal
transmission, amplifiers, QAM support, couplers, outlet devices, cables,
connectors and all other materials. System transmission medium will use fiber
optic cable.

2009 It Architecture Summary

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

2009 It Architecture Summary

Uploaded by

Copyright:

Available Formats

LAUSD IT Architecture

Revised - March 5, 2009

Los Angeles Unified School District

Revised – March 5, 2009 2 of 34

 Revisions – ITD reorganization and IT infrastructure modifications. JUL-18-2008

Revised – March 5, 2009 3 of 34

2.1 District IT at a Glance

Revised – March 5, 2009 4 of 34

2.1.1 Central Tier

include District enterprise applications access, Edge

desktops, Intel-based desktops, servers, and Location

laptops. Applications include typical office

2.1.2 Distribution Tier

Revised – March 5, 2009 5 of 34

demands. DSL connectivity is used primarily to connect smaller locations in a cost-effective

2.1.3 Edge Locations

(or Vista) on newer machines.

and Microsoft Works are also in use.

telephony services for the majority of schools. Over

locations only have analog voice lines provided Servers

directly via Local Exchange Carrier (LEC) for Router Si

telephony services. In addition to telephony, edge

Revised – March 5, 2009 6 of 34

of frequencies), public address (PA), and intercommunication systems for voice

2.2 Organization of the Document

Revised – March 5, 2009 7 of 34

3.1 Focus on Information Technology

Revised – March 5, 2009 8 of 34

Revised – March 5, 2009 9 of 34

4. ORGANIZATIONAL STRUCTURE OF THE INFORMATION TECHNOLOGY DIVISION

Revised – March 5, 2009 10 of 34

4.2 ITD Organization Structure

Revised – March 5, 2009 11 of 34

4.3 Relationship with Procurement

Revised – March 5, 2009 12 of 34

5. IT ARCHITECTURE AND SUMMARY

5.1 IT Service Strategy Domain

Revised – March 5, 2009 13 of 34

5.2 IT Service Delivery Domain

Revised – March 5, 2009 14 of 34

Revised – March 5, 2009 15 of 34

5.3 IT Service Support Domain

6. CURRENT STATE OVERVIEW

Revised – March 5, 2009 16 of 34

6.1 Network Infrastructure

6.1.1 Central Core & Distribution -- WAN

Revised – March 5, 2009 17 of 34

6.1.2 Edge Locations -- WAN

Revised – March 5, 2009 18 of 34

372x, 38xx, 800 Mostly DSL sites and some schools

18xx, 262x, 28xx Some stand-alone Adult Ed sites and some

Revised – March 5, 2009 19 of 34

6.1.3 Edge Locations – LAN

Revised – March 5, 2009 20 of 34

Revised – March 5, 2009 21 of 34

The following diagram provides an overview of a typical telecommunications site infrastructure.

The following subsections provide architectural summaries of the critical telecommunication

6.1.4.1 Voice (Telephony) Services – Central and Edge

Revised – March 5, 2009 22 of 34

6.1.4.2 Voicemail Services

6.1.4.3 Mobile Radio – Central to Edge

Frequencies Tower Sites Digital

6/11 GHz Oat Mountain T-1 to Soto St

Revisions – ITD reorganization and IT infrastructure modifications. JUL-18-2008

15 Cisco Call Managers distributed at the 4 node sites