Notes from the team
Restricted: rack and switch ports
- U24: Fibre patch, Corning Closet Connector Housing, 1U
- U23: Internet circuit handoff, ADVA FSP 150-GE114Pro
- U22: Out-of-band router, cellular, ZPE Nodegrid Gate SR
- U21: Firewall A, Palo PA-445, In service, no open incidents
- U20: Firewall B, Palo PA-445, In service, no open incidents
- U18: Core switch A, Cisco Catalyst 9500-24Y4C, In service, no open incidents
- U17: Core switch B, Cisco Catalyst 9500-24Y4C, In service, no open incidents
- U14 to U15: Patch panel C, fourth floor, Panduit NetKey Cat6A patch panel, 48 ports
- U13: Access switch 3, Cisco Catalyst 9300-48P
- U10 to U11: Patch panel B, fourth floor, Panduit NetKey Cat6A patch panel, 48 ports
- U9: Access switch 2, Cisco Catalyst 9300-48P
- U6 to U7: Patch panel A, fourth floor, Panduit NetKey Cat6A patch panel, 48 ports
- U5: Access switch 1, Cisco Catalyst 9300-48P, In service, no open incidents
- U1 to U2: UPS, APC Smart-UPS SRT 3000VA, 2U
Rack space
1U free of 24U
23U used.
Needs 42U for what it serves: short by 18u.
Access ports
19 free of 144
- Access switch 341 of 48
- Access switch 242 of 48
- Access switch 142 of 48
- Outlets patched125 of 144
Needs 150 (125 + 20% headroom): short by 6.
PoE 437W to 1440W of PoE+ power depending on power-supply configuration on each of 3, as the vendor states. The draw is not measured.
Power
APC Smart-UPS SRT 3000VA, 2U
- FeedsA and B
- Load and runtime36%, 30 min
2 power strips at the back: Raritan PX3 monitored rack PDU.
Circuits: A from DB-4A, way 12; B from DB-4B, way 14.
Internet and uplinks
- Internet circuit handoffInternet provider, ADVA FSP 150-GE114Pro
- A pair of firewallsPalo PA-445
Out-of-band: out-of-band router, cellular (ZPE Nodegrid Gate SR).
Power and temperature
Against the power and racks standardsUPS runs 30 min at 36% load, inside the standard · the room is at 24.5 °C
UPS runtime · APC Smart-UPS SRT 3000VA, 2U
30 min at least 15
UPS load
36% at most 80%
Temperature Simulated
24.5 °C 18 to 27
Runtime and load as measured at the last timed test, 23 Jun 2026 Demo value. Temperature from the temperature probe on the UPS network card, at the front of the rack, reporting to monitoring; live readings come by connector.
If this were off
SimulatedPick a switch, gateway or circuit here to see which spaces, meetings and services would lose the internet. Worked out from the recorded patching.
Firewall A Palo Alto Networks PA-445 · Rack 1, U21 · 4.17 Comms room (MDF)
Would affect nothing: Firewall B carries every space
Fourth floor
Restricted: rack and switch ports "Up" is an uplink: the way this switch reaches the internet.
Spaces it would cut off 0
- None: Firewall B carries every space.
VLANs at the Copenhagen office
9 VLANs · 0 ports to reviewEvery port on its planned VLAN
Switches here cph-417-cs01Core switch Acph-417-cs02Core switch Bcph-417-as01Access switch 1cph-417-as02Access switch 2cph-417-as03Access switch 3
In-room switches cph-407-sw014.07 Peregrine
| VLAN | Prefix | Gateway | Addresses | Reaches | Ports |
|---|---|---|---|---|---|
| 10 Management | 10.90.10.0/24 | 10.90.10.1 | 9 reservationsreserved 10.90.10.20 to 10.90.10.219 · pool 10.90.10.220 to 10.90.10.254 | Only the network team's tools and the controller | 23 |
| 20 Corporate | 10.90.20.0/22 | 10.90.20.1 | None reservedreserved 10.90.20.20 to 10.90.20.219 · pool 10.90.21.1 to 10.90.23.254 | Internal services and the internet | 30 |
| 30 Room systems | 10.90.30.0/24 | 10.90.30.1 | 20 reservationsreserved 10.90.30.20 to 10.90.30.219 · pool 10.90.30.220 to 10.90.30.254 | Their cloud services, device management and the booking service | 21 |
| 31 Displays and signage | 10.90.31.0/24 | 10.90.31.1 | 17 reservationsreserved 10.90.31.20 to 10.90.31.219 · pool 10.90.31.220 to 10.90.31.254 | The display and signage management platforms, NTP and the room control system | 17 |
| 40 AV | 169.254.0.0/16 | None: not routed | Link-local, in each room | Nothing outside the room (not routed) | 1 |
| 50 Building | 10.90.50.0/24 | 10.90.50.1 | None reservedreserved 10.90.50.20 to 10.90.50.219 · pool 10.90.50.220 to 10.90.50.254 | The building management platform only | 0 |
| 60 Security | 10.90.60.0/24 | 10.90.60.1 | None reservedreserved 10.90.60.20 to 10.90.60.219 · pool 10.90.60.220 to 10.90.60.254 | The security platforms only | 0 |
| 70 Printers | 10.90.70.0/24 | 10.90.70.1 | 1 reservationreserved 10.90.70.20 to 10.90.70.219 · pool 10.90.70.220 to 10.90.70.254 | The print service | 1 |
| 90 Guest | 10.90.90.0/23 | 10.90.90.1 | None reservedpool 10.90.90.20 to 10.90.91.254 | The internet only, clients cannot see each other | 0 |
From the network standard's VLAN plan. Prefixes, gateways and addresses are made up for the demo; the ports are as recorded for the demo, as the switch platforms would report them.
Compared against
Cisco and Palo Alto (older): The earlier build: two Palo Alto firewalls in a pair, two Cisco core switches, the floor's access switches, a wireless controller, an out-of-band console server and cellular router, fibre and copper patching, on a UPS with power strips on two feeds. Rooms built to it move to UniFi when their network kit is refreshed.
- Network standard
- Older kit, due 2028
- Required devices
- All recorded
Older kit: Palo PA-445, Cisco Catalyst 9500-24Y4C, Cisco Catalyst 9300-48P. Moves to UniFi when refreshed.
Lifecycle
- In service
- 5
Upkeep
Room checks from the maintenance planner
Next check: Thu, 29 Oct
- Quarterly comms room checkThu, 29 Oct, Tom
Sized for what it serves
18 spaces, 28 desks, 9 video rooms · How a comms room is sized- Data outlets12518 spaces, 28 desks, 9 video rooms144panel ports19 to spare
- Access ports150125 + 20% headroom144on 3 switchesShort by 6
- Access switches448 ports each3Short by 1
- PoE budget216 W11 devices as the vendors state; 10 PoE devices with no figureNot recordedNot recorded
- Rack space42U25U of parts + 25% growth24UShort by 18U
- UPSNot sizedload and runtime not recordedAPC Smart-UPS SRT 3000VA, 2Uin the rackNot checked
Patching
165 cables in 21 runs, coloured by the house cable standard · All cables at Copenhagen officeRestricted: rack and switch ports
- 2 × Fibre OS21 m, yellowto Internet circuit handoff, ports 5 to 6The internet provider's fibre.Singlemode fibre
- 1 × Cat6A0.5 m, redto Firewall B, port 8Firewall failover link.Critical and security systems
- 1 × Cat6A1 m, yellowto Internet circuit handoff, port 1Uplinks and trunks
- 1 × Cat6A1 m, yellowto Internet circuit handoff, port 2Uplinks and trunks
- 2 × Fibre OM41 m, aquato Core switch B, ports 25 to 26Core interconnect.Multimode fibre
- 1 × Fibre OM43 m, aquato Access switch 1, port 49Multimode fibre
- 1 × Fibre OM43 m, aquato Access switch 2, port 49Multimode fibre
- 1 × Fibre OM43 m, aquato Access switch 3, port 49Multimode fibre
- 1 × Cat6A1 m, yellowto Firewall A, port 1Uplinks and trunks
- 1 × Fibre OM43 m, aquato Access switch 1, port 50Multimode fibre
- 1 × Fibre OM43 m, aquato Access switch 2, port 50Multimode fibre
- 1 × Fibre OM43 m, aquato Access switch 3, port 50Multimode fibre
- 1 × Cat6A1 m, yellowto Firewall B, port 1Uplinks and trunks
- 41 × Cat6A1 m, blueto Patch panel C, fourth floor, ports 1 to 41Panel C outlets 1 to 41 live; 42 to 48 spare.User data
- 42 × Cat6A1 m, blueto Patch panel B, fourth floor, ports 1 to 42Panel B outlets 1 to 42 live; 43 to 48 spare.User data
- 42 × Cat6A1 m, blueto Patch panel A, fourth floor, ports 1 to 42Panel A outlets 1 to 42 live; 43 to 48 spare.User data
- 1 × Power C19 to C202 m, blackto Power strip AUPS to power strip A.Power, feed A
- 1 × Power C19 to C202 m, greyto Power strip BUPS to power strip B.Power, feed B
- 9 × Power C13 to C141 m, blackto Power strip A, ports 1 to 9Power, feed A
- 9 × Power C13 to C141 m, greyto Power strip B, ports 1 to 9Power, feed B
- 5 × Cat61 m, greyto Out-of-band router, cellular, ports 2 to 6Management
Spaces it serves
18 spacesFourth floor 18 spaces · Patched in this space
Notes
- The rack also holds access switches 2 and 3. The main comms room space type gives the floor one access switch position, so they are counted from the rack.