Appropriate Network Device Connection
The University of North Carolina at Greensboro
Policy Reference: Security of Networks and Networked Data
Approved: November 30, 2006
Document Maintainer: Information Technology Manager, ITS - Data and Voice Operations
Purpose
This procedure addresses the following sections of the related policy:
Section III.A.i
"Physical Connections. The following restrictions apply:
- Only a single network communications device should be attached per Ethernet jack. If additional jacks are required, a cabling request must be submitted to ITS.
- Physical access to infrastructure network switching equipment is not permitted without specific authorization of ITS.
- Attached cables must be certified by ITS and shall not exceed 20 feet in length.
- Ethernet hubs/repeaters must not be attached.
- Ethernet switches/bridges must not be attached.
- Hardware firewall/network address translation devices must not be attached.
- Wireless enabled devices must not be attached.
- Network layer three (logical layer) routing devices must not be attached.
- All attached devices must have an identified owner and user."
Risks mitigated through the application of this procedure include potentially damaging network traffic and poor network device performance.
Scope
This procedure covers all physical network access connections on the campus. All faculty, staff, and students or any other duly authorized individuals (i.e., vendors) are also implicitly covered.
Responsible Parties
- Faculty, Staff, Students
- ITS Employees
- Cabling contractors
- University affiliates
- Non-affiliates
Procedure
According to North Carolina General Administration baseline networking standards, a desktop workstation on the campus is afforded a 100 megabit per second RJ-45 Ethernet connection. Campus buildings are cabled with Category 5e (350Mhz), twisted pair cables. The IEEE states that data in a single network segment will be properly transmitted for a distance of 100 meters at 100 megabits per second. UNCG buildings are cabled with a maximum of 90 meters of cable from the wall plate connection to the patching equipment. On average, four more meters are used for patching purposes. This leaves a maximum of six meters for office workstation and other network device connections.
Restrictions are as follows as per section III.A.i. of the Security of Networks and Networked Data Policy:
- Bridging / connecting two network wall-plate ports together is prohibited.
- Ethernet hubs/repeaters must not be attached.
- Ethernet switches/bridges must not be attached.
- Hardware firewall/network address translation devices must not be attached.
- Wireless enabled devices, such as access points, must not be attached.
- Network layer three (logical layer) routing devices must not be attached.
Device Connections
All new network device connections are to be connected with an ITS approved Cat5e (350Mhz) twisted pair cable with a 6-meter (20 foot) maximum length. Please contact the Technology Service Center via 6-TECH to purchase cables for connection.
Only a single approved device is to be connected to a single ethernet jack. The network will be configured to enforce this rule.
Additional Wall-Plate Connections
All workstation locations at UNCG are supplied with two RJ-45 data networking jacks. Additional jacks can be purchased by contacting 6-TECH and requesting the number of additional jacks to be installed. The request will be appropriately routed to a cabling technician or contractor to perform the installation work.
Terms for Exceptions
Exceptions may be granted in cases where network access has not been constructed to University standards. Requests for exceptions should be submitted via the Service Desk via 6-TECH.