Santa Clara County ARES/RACES
Home Operations Data Training and Events Reference Info. FAQ

Network Considerations for Data Stations

Summary    |     Connectivity    |     Configuration

Summary

A high-level summary is presented here in quick, bulleted form.  More details are provided below.

 

Connectivity

Diagrams

Via the Service-Agency's Network

Internet Access

  • Radio station PCs need access to the Internet to download applications software (such as our own packet software), printer and other device drivers, and other tools and documentation.

Limited (if any) Agency Network Access

  • The agency may wish to allow it's own Windows Domain Controllers and other management servers to access the radio station's PCs
  • The agency may wish to allow the radio station's PCs to access shared servers used by emergency management personnel to store forms, messages, emergency plans, and other emergency management content.

Block Everything Else

  • The agency firewall should not allow any other traffic to/from the radio station LAN

Via the SCCo RACES Network

Use a Firewall

Internet Access

  • All subscribers to the SCCo RACES network can use the network to access the Internet through the multiple, redundant Internet connections.
  • The SCCo RACES network does not allow inbound connections from the Internet to any subscriber networks.

Intranet Access

  • All subscribers to the SCCo RACES network can use the network to access servers and services provided by SCCo RACES (packet BBS, e-mail, etc.) or other subscribers.
  • The local RACES firewall can be configured to allow inbound connections from the SCCo RACES network to the local radio station DMZ.

Agency Network Access

  • The agency will control access TO its network via its own firewall rules.
  • The local RACES firewall can also be configured to block or allow certain access FROM the agency network.

De-Militarized Zone (DMZ) [optional]

  • Any servers that the local RACES team wishes to make available to the served agency or other agencies connected to the SCCo RACES network should be on a separate LAN, commonly called a "Demilitarized Zone" or DMZ.
  • The local RACES firewall should be configured with specific rules to allow inbound connections to those servers only from those authorized to use them.

Block Everything Else

  • The agency firewall should not allow any other traffic to/from the radio station LAN.

 

Configuration

Keep it Simple

In an emergency, what works (and what can be most easily repaired) are networks with topologies that have the fewest points of failure and the least complex configurations. So, keep the network architecture as simple as possible, while still delivering the required connectivity and security to meet the served-agency's communications needs.

Goal: The network architecture should be simple enough that anyone with a basic background in Internet routing and security should be able to make repairs and replace components under the pressure of a communications emergency.

 

Documentation

 

Configuration Backups

 

 


Web Site Home Page

This page was last updated on 03-Oct-2019