...
The Pawsey network connects all joint-venture partners via dark fibre over which Pawsey has complete control – there are no managed services. This network was first put in place in 2002 when CSIRO entered into a 15 year IRU (Indefeasible Right to Use) with UEComms for fibre connections between the ARRC Facility and UWA, and between UWA and Central TAFE, with CSIRO paying the yearly maintenance on these fibres. The fibres connecting ARRC to Curtin were put in by Curtin University, and the fibre from ARRC to Murdoch is leased from Amcom, as is the fibre connecting ECU. The iVEC Pawsey network connects to the outside world via CSIRO’s connection to AARNet at ARRC, and currently the traffic charges are picked up by CSIRO and not charged back to iVECPawsey.
Purpose and Policies
The purpose of the Pawsey network is to provide high-speed connectivity amongst the various Pawsey Facilities and connectivity to the outside world for research purposes. It is primarily a research network, and should not be used to transit commercial traffic across any associated R&E networks, such as AARNet.
Apart from Pawsey staff at the various Facilities, individual users or groups at the partner organisations may request connection to the Pawsey network as part of a project or ongoing series of projects for which they are using Pawsey facilities, assuming that they can physically be connected. These requests will be considered on a case-by-case basis, and should not be motivated by a desire to avoid their host institution’s internet traffic charges. The connection of any networking equipment, including wireless access points, to the Pawsey network must be approved by the Pawsey Network Manager, and come under the administrative control of Pawsey (this excludes the interconnection of other partner networks to iVECPawsey, or the reticulation of the iVEC Pawsey network through another network provider’s infrastructure, where administrative control of the network equipment lies with the provider). Where the Pawsey network is reticulated through another network provider’s infrastructure, Pawsey will have the final say on the connection of endpoints to the iVEC Pawsey network. No connections to the internet-at-large may be made except through the official Pawsey gateway(s), currently AARNet at ARRC. This includes connecting modems to the network. Except in rare and approved circumstances, hosts should not be simultaneously directly connected to the Pawsey network and any other network.
...
It is the user’s responsibility to ensure that hosts connected to the Pawsey network run up-to-date anti-virus software where possible and appropriate. Incoming traffic is filtered at Pawsey's firewall, and the default posture is that such traffic is blocked unless explicitly allowed. Requests for ports to be opened on the firewall will be considered by Pawsey's Network Management. Some outgoing traffic may also be blocked, for example, email. All incoming email traffic will go via the CSIRO external email gateways, where it is filtered for viruses and spam. Outgoing email will also travel via these gateways. Anyone on the Pawsey network wishing to send outgoing email must send it via the mailserver smtp.ivecPawsey mail server mail-server.pawsey.org.au, which will pass it to the CSIRO gateways. The installation of externally visible servers on the Pawsey network must be approved, and should be part of an a Pawsey-related project.
Security Policy
...