FutureNet Kantonsspital Graubünden (KSGR)

The Kantonsspital Graubünden (KSGR) is undertaking a comprehensive modernization of its aging network infrastructure through the FutureNet project. This initiative addresses the lifecycle replacement of network components and aims to implement a state-of-the-art, secure, and scalable network architecture. The existing classic three-tier architecture, segmented by Virtual Routing and Forwarding (VRF) and managed via a centralized firewall, is to be replaced by a Software-Defined Network (SDN) using Aruba’s EVPN-VXLAN fabric and NetConductor technology.

The thesis focuses on the design, integration, and validation of this new architecture, particularly at the campus LAN level. Key goals include the deployment of role-based access control, enhanced Network Access Control (NAC) with 802.1X authentication, and the implementation of macro- and micro-segmentation for improved security. A significant component of the work is the integration of the site Kreuzspital into the EVPN fabric via a distribution layer using Aruba’s VSX clustering approach.

After the new site was built and thoroughly tested, productive clients were successfully migrated to the new infrastructure. The entire project was carried out within the context of a live, productive hospital network, requiring minimal disruption to ongoing clinical operations and ensuring the highest standards of reliability and security.