he Recommendations for security of area nodes are divided into a number of areas for measures. In the section below, instructions are provided for how the security measures should be designed for the respective area for measures.
Design of premises
General recommendationsChoice of site for node building: The site for a node building should be chosen so
that termination with several network owners is as good as possible, and so that as risk-free an environment4 as possible is achieved.
Design of node building: To avoid a node being disabled due to corrosive gases or
water vapour penetrating the node building, for example in connection with a fire, its structure should be sealed.
Signs for node building: The prescribed signs outside a node building should be
limited so that interest for the node is kept at the lowest level possible. There shall be no signs naming owner, etc., though signs that state the telephone number where the public can call if anything abnormal is observed may be displayed.
Drawbar and lifting eyes: In order to prevent malicious damage to a node building
or adjacent building comprising a container or the like, any drawbar and lifting eyes should be removed. There is otherwise a risk that malicious damage can occur by the node building being lifted or pulled from its site with a crane or the like.
Panic or emergency exit device: Doors that may constitute escape routes should be
equipped with a panic or emergency exit device. This also applies to buildings adjacent to a node building.
Chapter
7
Elevated thresholds: All node spaces should be supplied with elevated thresholds, if
there is a risk of flooding.
Fire protection in node buildings: The node building should satisfy at least fire-
resistance grade EI60.
Space for reserve power plant: In the case of new or rebuilding of node spaces, the
need of premises/space for a reserve power plant should be taken into account.
Design of ducting: In order to maintain good order, all cables should be drawn in
cable trays or under a raised computer floor.
Laying of network and electric cables: To avoid mistakes and disruptions, all
network and electric cabling should lie in separate ducting (trays or baskets) or shared trays with a separation shielding plate.
Cables in node spaces: Cables in node spaces may under no circumstances be
halogen-based.
Potential equalisation: All metal parts in technology should be potential equalised.
Heating, water and drainage installations
Heating, water and drainage pipes: The technology space in a node space should
not contain crossing pipes (heating, water or drainage pipes).
Backwater valve for floor drains: In spaces where there is a floor drain, the floor
drain shall be fitted with backwater valves to prevent flooding by water penetrating up through the floor drain.
Automatic closure of water pipes: In spaces where there are water pipes and/or there
is a system for water-borne cooling, there shall be automatic closure of water pipes to prevent flooding.
Room coolers: Room coolers should be placed and designed so as to eliminate the
risk of leakage or condensation on equipment.
Protective devices for cables and equipment
Protective devices for cable inlets: Node buildings in the form of sheds erected on-
site, containers or buildings which do not have a concrete base and where there is a risk that incoming and outgoing cabling may in various ways be exposed to malicious damage or sabotage, should be supplied with a protective device that
prevents/impedes malicious damage to cabling.
The protection of cables between the ground and the underside floor should be completely cover ‘all around’ the cables and be made of 1.5 mm steel plate and be
buried at least 25 cm or in an equivalent way. See example of design of protective devices for cable inlets in Appendix A.
Arrangement of optical cable in node building: Optical cables that are intended for
outdoor use and that do not satisfy the requirement for limited fire spread may be laid a maximum of 5 metres within a node building. In addition, all optical cable should be equipped with flame-retardant material.
Protection of cables within and outside the fenced perimeter: To be designed in
accordance with the instructions contained in the EBR publication Optical cable
networks.
Protection of cross-connection points and/or equipment racks: The node owner’s
own communications equipment, cross-connection points and equipment for supply of the node (power supply, climate equipment, etc.) should be, as regards premises, separate from other operators who in some form lease space from the node owner. Only the node owner should have access to this kind of space.
Operators who lease space for fitting of their own equipment cabinets or lease space for location of equipment in equipment cabinets that are owned by the node owner, are themselves responsible for the protection of their own cross-connection points and equipment.
Mechanical burglary protection
Design of mechanical burglary protectionMechanical security protection should be designed in accordance with the Swedish Theft-Prevention Association’s (SSF) rules for Mechanical burglary protection – SSF
200:3, protection class 2.
Note: The preconditions for assistance from the police or guards in the event of burglary should be taken into account in connection with the detailed design planning of the mechanical burglary protection.
Deviations permitted
Outer door: An outer door should be supplied with a door closer. A powered lock
should be fitted, which means that the door will no longer satisfy the requirements for protection class 2.
Tip: The mechanical protection contained in walls is significantly
improved by a loose plate being inserted between two insulation layers in the wall. The inner wall can, for instance, comprise plywood. In the event of mechanical malicious damage from the outside, the plate
)
wall.
Burglar alarm installation
Design of burglar alarm installationTo be designed in accordance with the Swedish Theft-Prevention Association’s (SSF) rules for Project planning and installation of burglar alarm installations – SSF 130:6, alarm class 2.
Supplements to SSF 130:6
Transfer of burglar alarm: Transferred to operations centre and/or security
company.
Local alarm in the event of burglary: A buzzer signal shall sound as warning before
the burglar alarm connects (30 seconds).
Passage control
Passage control systemDesign of passage control system: Area nodes should be supplied with passage
control systems with log function.
Access: It is recommended that there is a combination of card and code for access to a
node.
Building for reserve power plant: If the node is supplied with a reserve power plant,
the reserve power plant building should be supplied with passage control.
Fuel-filling hatch for reserve power plant: If the node is supplied with a reserve
power plant, the fuel-filling hatch should be supplied with lock.
Fire alarm installation
Design of fire alarm installationTo be designed in accordance with the Swedish Fire Protection Association’s (SBF) rules: Rules for automatic fire alarm installation – SBF 110:6. The alarm installation should be dimensioned for complete monitoring of the node building.
Supplement to SBF 110:6
Transfer of fire alarm: Transferred to operations centre and fire brigade/alarm
centre. The alarm is transferred to the alarm-receiving organisation without delay.
Fire extinguishing equipment
Hand-held fire extinguishers: A hand-held fire extinguisher of the type CO2
extinguisher should be adjacent to the inside of the external door to the node space. Premises or buildings for reserve power plants should be supplied with dry powder extinguishers.
Operations alarm
Design of operations alarm: Besides technical alarms from communications
equipment, which are not dealt with in this Recommendation, different kinds of operations alarm from the node should be transferred to the operations monitoring centre. It should be possible to divide operations alarms into the categories A-, B- and C-alarms (indications) depending on the priority of the alarm.
Transfer of operations alarm: A-alarm transferred to operations centre without
delay and B- and C-alarms can be transferred with some delay.
Environment and climate control
Design of air treatment system: Climate requirements should be adapted to the
operational requirements for the respective equipment housed within the node.
Design of cooling plant: Area nodes should have a cooling system. The dimensioned
room temperature in technology spaces should be 20 degrees -5/+ 4 degrees.
Emergency cooling plant: Should exist in the form of an independent cooling plant
(based on water cooling).
Electricity supply
General recommendations: The applicable high-voltage regulations ELSÄK FS
Electrical system: 230/400V, which is a five-wire system (TN-S system). Zero and
protective conductors are connected at the supply point.
Earthing and potential equalisation of computer equipment: Arranged according
to SS-EN-50310.
External power outlets for reserve power: The installation should have external
power outlets for reserve power. If this is available, there should be an earthing point connected to the outlet for reserve power. The outlet for connection of reserve power should be dead when the node is unmanned.
Uninterruptible power supply: An area node should be supplied with an
uninterruptible power supply (UPS). UPS should supply priority equipment and be constantly connected between the network/reserve power plant and the load.
UPS has the following tasks:
To constitute a filter and protect priority installations.
To bridge exchange times between network operation and reserve power plant operation.
To maintain functions for priority installations in the event of an interruption of network and reserve power.
UPS installations are dimensioned and designed on the basis of requirements of durability and accessibility.
Guideline values for UPS operation:
UPS operation at an area node with one (1) reserve power plant unit: 15 minutes. At an installation that does not have a reserve power plant, the UPS operation is dimensioned at 1 hour.
External electricity outlets: There should not normally be other kinds of live
electricity outlets on the outside of the node except the connection for reserve power. In those cases where there are, for example, engine heater outlets, these should be controlled by a timer from the inside of the node building, alternatively be relay controlled from an unlocking function for the outer door. An engine heater outlet should be dead when it is not being used by authorised personnel.
Lightening protection
General recommendations: There are currently no general standards that can be
EMC
General recommendations: Installed equipment should satisfy applicable standards