The OPLIN Support Center can assist you with obtaining circuits under state contracts, as well as other connectivity services. You can contact them at 1-888-966-7546 or support@oplin.org. Please review this document carefully before submitting a circuit request.

Services and estimated prices are subject to change at any time. This document is changed periodically; always contact the OPLIN Support Center for updates to this document.

1. General Information Regarding All Circuit Requests 
2. General Information for CLEVNET and CLC Libraries
3. Moving a Circuit
4. Disconnecting a Circuit
5. Demarc Extension 
6. Type A Service (Circuit with full network management)
7. Type B Service (Circuit-only service, no network management)
8. Type C Service (Circuits added to the OPLIN-provided circuit)
9. Type D Service (DS3 connections)
10. Type E Service (Ethernet connections)
11. Router Services
12. DNS Services
13. Domain Name Registration

General Information Regarding All Circuit Requests

OPLIN provides Internet connections to Ohio library systems (one connection per system). Support for those OPLIN-provided connections is done via the OPLIN Support Center.

Our current procedure is to quarterly sample the amount of bandwidth used by each library over the course of a working week. Once the average circuit utilization during afternoon hours exceeds 80% on three of the five sample days, OPLIN will provide additional bandwidth to that library.

OPLIN also facilitates the acquisition of additional circuits under Ohio state contracts. All requests for circuits must be made by a library director or his or her designee. Libraries are given the opportunity to specify who may authorize such a request on the OPLIN Connectivity Survey (conducted annually, usually in the fall). Requests submitted by anyone other than the director or designee may be subject to verification, and delay the processing of the request. Libraries should expect the completion time for each circuit request to take up to 60 days from the date the request is last submitted. Circuit requests must have a completion date.

Please review your circuit requests carefully before submitting them to the Support Center, as subsequent changes to the address of one or both of the points, the request type, or the service type may require the original request to be cancelled and a new request submitted with the correct information.

OPLIN DOES NOT SUPPORT CIRCUITS AND NETWORK EQUIPMENT NOT OBTAINED THROUGH OPLIN.

General Information for CLEVNET and CLC Libraries

Libraries that belong to the CLC or to CLEVNET have authorized those consortia to seek network support or make circuit requests on their behalf. Those libraries should contact their consortia, not the OPLIN Support Center, for assistance with network matters.

Moving a Circuit

A move request is made when a library wishes to change the physical location of one end of an established circuit. The established circuit can be part of the OPLIN-provided service, or the library-paid services that are obtained through one of the offered service Types. If your library wishes to change both ends of an existing service, you must enter a request for a new Type A or Type B circuit, and a request to disconnect the old one once that is finished (see Disconnecting a Circuit, below).

Libraries planning to move a circuit should expect a 45-minute to 2-hour downtime, while the circuit is being moved.

Estimated One-Time Price for a T1 Circuit Move: $571 (NOTE: This fee will be waived if the library makes a 12-month commitment.)

Disconnecting a Circuit

This request is made to remove service at both ends of a circuit obtained through OPLIN. In cases where your library would like to replace an existing connection with a new circuit, disconnection is not automatic upon the installation of the new circuit. A separate OPLIN Circuit Disconnect Form must be submitted for each circuit that your library does not plan to keep.

There is no cost for this service. As with all circuit requests, disconnecting a circuit takes approximately seven working days from the date the request is last submitted.

Demarc Extension

The demarc (short for demarcation point) is the place where the circuit physically enters the building. The Service Interface Unit, or "Smartjack," can be found at the demarcation point. In cases where the demarcation point is located in a closet or equipment room and the user equipment is located in another part of the building, internal wiring work is required to "extend" the demarcation point to the desired location in your building.

Libraries can only initiate demarc extension requests through OPLIN as part of a new circuit or circuit move request. Requests to extend the demarc of an established circuit can be coordinated directly between the library and their local telephone company or contractor. However, if the demarc extension is necessary due to construction, the request should go through OPLIN, because the entire circuit must move.

Type A Service

Type A Service allows libraries and branches to connect directly to the OPLIN core in Columbus. (For circuits connecting branches to main libraries, see Type B Service below.) It provides both a circuit and full network management. It is recommended that main libraries wishing to add additional T1s to their main OPLIN connection in order to increase bandwidth review Type C Service below. Type A Service includes:

• A T1 or other connection from a library branch building directly to the OPLIN hub in Columbus
• All necessary router and CSU/DSU equipment
• CSU/DSU and router configuration
• CSU/DSU and router maintenance
• Network equipment monitoring
• IP address allocation
• Support for data line operability
• Domain name services (DNS)
• Internet access

Estimated Prices, Type A Service (for T1 circuit):

Telco Installation: $0

Telco Monthly: $400

Network Installation: $400

Network Monthly: $280-320

Type B Service

Type B Service offers libraries the opportunity to obtain data lines using the State of Ohio contracted prices for the purpose of building their own networks behind the OPLIN-provided service. Type B Service typically connects branch libraries to main libraries, where they can connect to an OPLIN-provided connection to the Internet. Type B Service includes:

• A T1 or other data line between a library main building and a branch building
• Configuration of the OPLIN-provided router at Main Library
• Additional IP addresses (if needed)

Estimated Prices, Type B Service (for T1 circuit):

Telco Installation: $0

Telco Monthly: $400

Network Installation: $0

Network Monthly: paid by OPLIN

Note: Type B Service does not include network management services and cannot connect the branch directly to the OPLIN hub in Columbus. Libraries contracting for Type B service must obtain network management elsewhere. Other services the library will need include:

• Networking equipment including two routers and two CSU/DSU units
• Internal wiring
• Installation and configuration services
• Ongoing support and maintenance

Type C Service

(Note: Because OPLIN automatically upgrades OPLIN-provided circuits that are saturated, this service should rarely be necessary.)

Type C Service is for public libraries that wish to increase the bandwidth provided by their standard OPLIN-provided connection, as well as to "load balance" the new circuit with the standard OPLIN-provided service connection at the main library. Upon request, OPLIN can provide a report on bandwidth usage with recommendations. Type C Service involves the circuit, network services, and load balancing.

With Type C Service, a library's second circuit must connect to the same locations, at both ends, as the OPLIN-paid service. (The two ends are generally the main library and the OPLIN Columbus hub). The library will be responsible for paying costs associated with the installation and monthly service of the second T1 circuit, as well as installation costs associated with upgrading the network equipment (if any). OPLIN will continue to pay monthly costs associated with the OPLIN provided circuit, and the maintenance and support for the network equipment.

Most libraries can add one additional circuit to the existing router. To add up to an additional two more T1s (for a total of four circuits, including the original OPLIN circuit) the router will be upgraded.

Estimated Prices, Type C Service (for T1 circuit):

Telco Installation: $0

Telco Monthly: $400

Network Installation: ?

Network Monthly: $280-320

Type D Service

(Note: Because OPLIN automatically upgrades OPLIN-provided circuits that are saturated, this service should rarely be necessary.)

Libraries can add circuits as Type C Service for added bandwidth. Once they reach four circuits (the OPLIN standard plus four more) they may want to consider upgrading to a DS3 connection (Type D Service).

In this case the library will pay for the equipment upgrade, installation, and monthly circuit charges. For its part, OPLIN will pay the increased monthly network charges including the added Internet bandwidth.

Estimated Prices, Type D Service:

DS3 Telco Installation: $0

Telco Monthly: $1800-$2300

Network Installation and Equipment Upgrade: $15,500 (approximately)

Network Monthly: paid by OPLIN

Type E Service

In many areas of the state, Ethernet (Type E) Service is now more economical than adding T1 or DS3 circuits. A 10 Mbps Ethernet circuit costs less than two 1.5 Mbps T1 circuits. Whenever OPLIN automatically upgrades OPLIN-provided circuits, Ethernet is our first choice. If you need to upgrade a connection between a branch and the main library, Ethernet may also be your best option. Ethernet may require some special construction at your building, and you should allow 12-14 weeks from the date the order is submitted (or the last date it is changed) for completion.

Type E service requires a router with two (2) Ethernet ports. If your router is not configured with two (2) Ethernet ports, a router upgrade will be required before this service can be installed. The library will pay for the router upgrade and router installation. Type E service requires the use of both Ethernet ports on your router, so if your library is utilizing video on the second router Ethernet port, that service will need to be moved to a switch on your local network.

Estimated Prices, Type E Service (10 Mbps):

This service is NOT available in all areas. For current pricing, installation, and availability information, please contact the OPLIN Support Center.

Telco Installation: ?

Telco Monthly: $700-$710

Network Installation: ?

Network Monthly: paid by OPLIN

Router Services

OPLIN support services end with the OPLIN-provided router (or circuit if there is no OPLIN-provided router). OPLIN-provided routers are managed by engineers with the State of Ohio Office of Information Technology (OIT) Network Operations group. Because libraries are responsible for all internal and branch connections, we try to accommodate library decisions, making changes as requested to router configuration.

OPLIN will configure the router as long as the request is one that will not impact the wide area network, or have, in the opinion of the network engineers, a seriously negative impact on library operations. There is no added charge for routine router configuration requests. Routine configuration includes:

Video QoS:

OPLIN can configure your router to accommodate video services. This is necessary to assure Quality of Service on the line and prioritize video traffic. Video Service will only be configured on circuits that connect a library building to the OPLIN hub and have an OPLIN-provided router on the library end.

NAT/DHCP:

OPLIN can configure your router to provide Dynamic Host Configuration Protocol and/or Network Address Translation to enable you to manage limited numbers of available public IP addresses.

ACL Listing:

An Access Control List limits the IP ranges that can pass through your router. It provides some security but should not be viewed as a total solution.

ICMP Echo Blocking:

OPLIN is able to block your router from being "pinged" by outside sources and destructive programs such as "worms" looking for vulnerabilities.

SMNP:

This configuration would allow read-only access to the OPLIN router from your internal network for purposes of monitoring bandwidth and traffic. Such access is only as far as the serial interface.

DNS Services

DNS servers allow you to reach another host from your host without having to provide the explicit address. Users typically prefer to use friendly names like "library.com" instead of an IP address "172.16.23.44." The DNS is a program consisting of a database of name and address information. The program responds to queries from other programs. DNS servers can communicate amongst themselves to update one another with new information. This mechanism is what allows you to reach a webpage on a new server when a friend sends you a link. You do not have to know the IP address of the server that contains the webpage.

If you would like OPLIN to serve as the primary DNS server for your domains, you must put in the transfer to give us the ability to do so. If you do not know who is providing your service, you can go to www.dotearth.com to find out. When you find the entity you are registered with, you need to fill out a transfer form to make the State of Ohio your primary or secondary DNS. The information for the State DNS is as follows:

ns1.state.oh.us

156.63.130.100

ns2.state.oh.us

156.63.130.68

ns3.state.oh.us

156.63.130.75

ns4.state.oh.us

156.63.130.120

Domain Name Registration

OPLIN provides free domain name registration for <yourlibrary.oplin.org> and <yourlibrary.lib.oh.us>. To register one of these names, use the form in OPLIN Self Service. If you wish to register a domain name other than <yourlibrary.lib.oh.us> or <yourlibrary.oplin.org>, such as <yourlibrary.org>, OPLIN can still help. While OPLIN cannot provide free registration or reimbursement for the registration, we can register the domain on your behalf via the Ohio Office of Information Technology, Infrastructure Services Division.

If it is available, whatever domain name you choose will be registered under the three most common top-level domains: ORG, COM, and NET (i.e. <yourlibrary.org>, <yourlibrary.com>, and <yourlibrary.net>). The domains will be registered on behalf of your library for nine years, unless you specify otherwise.

If you would like OPLIN to serve as the primary DNS server for your domains, you must put in the transfer to give us the ability to do so. If you do not know who is providing your service, you can go to www.dotearth.com to find out. When you find the entity you are registered with, you need to fill out a transfer form to make the State of Ohio your primary or secondary DNS. The registration information is as follows:

Estimated Prices (Domain Name Registration):

yourlibrary.lib.oh.us: $0

yourlibrary.oplin.org: $0

Any other DNS: $45/year

 

Each spring, the State Library of Ohio asks all the public libraries in the state to update basic information about their internet connections and use of internet within their library buildings. This data may also reflect contracted services that are in the process of being installed. You can click on the links below to download a spreadsheet of the latest data or simply view the data.

Public Library Requirements for Complying with CIPA

Disclaimer

This document is presented for information purposes only. Libraries should consult their own legal counsel for an analysis of any specific policy.

Summary

The American Library Association (ALA) provides a lot of background information about the Children's Internet Protection Act (CIPA) and the Neighborhood Internet Protection Act (NCIPA), which taken together are commonly referred to as "CIPA." (NCIPA is a subtitle of CIPA; NCIPA only affects E-rate applicants.) CIPA requires public libraries to install Internet filtering software on all Internet computers (public and staff) if the library receives federal money from Library Services & Technology Act grants (LSTA) to purchase computers that will access the Internet, or receives federal E-rate (Universal Services) discounts for anything other than services classified as telecommunications.

Brief History

Both CIPA and NCIPA were included in a large federal appropriations bill that passed Congress in December 2000. In March 2001, the ALA, the American Civil Liberties Union (ACLU) and several other groups filed suit to prevent the enforcement of CIPA's filtering requirement in public libraries. This litigation eventually made its way to the U.S. Supreme Court, which upheld CIPA in June 2003.

When must a public library comply with CIPA?

If the library:

• receives E-rate discounts for any item or service classified as Internal Connections or Internet Access; or
• receives LSTA funds to purchase any computers that will access the Internet, or Internet access (i.e. pay an Internet Service Provider);

then the library must be CIPA-compliant.

A library does NOT have to be CIPA-compliant to receive E-rate discounts on the Data Transmission services only, or to receive LSTA money for any other purpose than buying Internet access or computers that will access the Internet.

How to comply

There are three requirements that must be met.

Requirement #1: Use a technology protection measure

"Technology protection measure" means a filter on the Internet that blocks visual depictions that are obscene, child pornography, or harmful to minors (defined as any person less than 17 years of age). The filter need not affect text or audio, whatever the content. "Obscene" and "child pornography" have rather vague definitions in U.S. obscenity law. The CIPA legislation defines "harmful to minors" as nudity and sex without literary, artistic, political, or scientific value. See the Ohio Library Council's CIPA FAQ [pdf] for the complete definition.

You must be able to turn off the filter at the request of an adult "without significant delay."

Possible filter configuration:

If you are using the OpenDNS Web Content Filtering available free from OPLIN, the easiest way to meet this requirement is to select content filtering level "Low," which filters websites in the categories Pornography, Tasteless, Sexuality, and Proxy/Anonymizer (to prevent bypassing the filter). The descriptions of these categories can be found at https://community.opendns.com/domaintagging/categories. If you want to select your own filtering categories, rather than using the pre-selected categories in the Low level, the Tasteless category is probably not necessary for CIPA compliance.

Note that OpenDNS also has a Nudity category that is not selected in the Low level. CIPA requires blocking images that "appeal to a prurient interest in nudity," and OpenDNS almost always tags websites in the Pornography category with a Nudity tag, too. Websites that only have a Nudity tag and no Pornography tag likely have artistic or scientific value and are not intended to be prurient.

Proving that you have a filter:

E-rate's Program Integrity Assurance (PIA) process for reviewing applications sometimes requests proof that a library has a filter. A screenshot of a filtering log or a purchase order should be sufficient. If you are using the free OPLIN OpenDNS filtering, then the email from OPLIN confirming the establishment of your account would take the place of a purchase order.

Requirement #2: Adopt an Internet Safety Policy

The library must adopt and enforce an Internet Safety Policy that includes the use of a technology protection measure. If the library is applying for E-rate discounts, the policy must address the following items:

• access by minors to inappropriate matter on the Internet and the Web;
• the safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications;
• unauthorized access and other unlawful activities by minors online;
• unauthorized disclosure, use, and dissemination of personal identification information regarding minors; and
• measures designed to restrict minors' access to materials harmful to minors.

Note that the Ohio Revised Code (3375.64-C) already requires that libraries receiving OPLIN Internet connections "…establish and enforce procedures designed to keep juveniles who use the participant's services from having access to materials or performances that may be obscene or harmful to juveniles and to keep persons who are not juveniles and who use the participant's services from having access to materials or performances that may be obscene." The OPLIN office has copies of such policies on file from every Ohio public library.

Requirement #3: Hold a public hearing

The Internet Safety Policy must be adopted after a public hearing, or as the CIPA language says, libraries "shall provide reasonable public notice and hold at least one public hearing or meeting to address the proposed Internet safety policy." [Title 47, §254(h)(6)] The regularly scheduled library board of trustees meeting may be used as the required public meeting, assuming the agenda is made public before the meeting and the meeting allows for public comments.

Declaring CIPA compliance

Libraries must certify their CIPA compliance, and there are several ways to do this. Libraries with OPLIN Internet connections are required to send OPLIN an E-rate Form 479 each year that declares whether or not the library is CIPA-compliant. No additional certification is necessary, but if a library is applying for E-rate discounts, the filing of a Form 486 also confirms CIPA compliance.

Cisco Umbrella first steps

Note: Cisco Umbrella is the new name and branding of Umbrella by OpenDNS

1. Send an email to support@oplin.ohio.gov stating that you would like to participate, along with the contact information for the person to whom we should email the account login details.
2. The contact's account will be set to an administrator level for your library account. This user will have the ability to send out additional invitations to other staff members, and also elevate them to administrator status.
3. From now on, your library is in complete control of your account. To get started, see Cisco Umbrella's Getting Started Guide.

You will want to use the Umbrella name servers on your network. The IPs for those servers are 208.67.222.222 and 208.67.220.220. If you want to test out the service before making it live on the entire network, you can always change the DNS servers on just your workstation to those two IPs and verify the filtering is working as you want it to. If you're ready to make filtering live, the place to use those two IPs will vary depending on how your network is currently configured.

• If you statically define every workstation with its DNS settings (ex. the state DNS servers at 156.63.130.100) then you would need to change every workstation to use these two new IPs.
• If your workstations point to a local device for DNS (ex. a firewall/router/ActiveDirectory server) then the place you would use the two OpenDNS IPs would be in the forwarders settings of that device. Changing the IPs on a top level device like this will make filtering live for every workstation pointing to said device.

 Questions? Please ask at http://support.oplin.org.