Networking

From UGCS
Jump to: navigation, search

Contents

Physical Equipment

Our main switch (connected to the IMSS 1Gbit uplink) is a Juiper EX2200. This switch is brand-new as of April 2010 and screams. The core servers, shellservers, mortals, and lenin are connected to this switch. It provides a DHCP safe haven for demeter (and our servers through RADIUS on charon) while allowing Winnett DHCP for other machines. We have a Cisco 2970 connected via two LACP links to the Juniper switch for additional gigabit ports (currently filled with hosted machines). We will be setting up a Cisco 2950 with a similar gigabit trunk lines for the hosted racks once we move them to where we want them.

Juniper Switch

  • Juniper EX2200
  • Name: mercury
  • IP: 192.168.2.5, accessible from charon only

Static IPs in UGCS

We don't actually have a netblock, we just have 64 ip's. So you configure your machine like any other in the Winnett netblock, with netmask 255.255.255.0 and gateway 131.215.176.254. A sample Debian interfaces file:

iface eth0 inet static
    address 131.215.176.xxx
    netmask 255.255.255.0
    gateway 131.215.176.254

Firewall

Each machine does its own firewall through iptables. Cfengine installs a series of scripts in /etc/networking/if.[up,down].d that loads/saves the iptables configuration, so you can make changes knowing they will be preserved across a reboot.


IPv4 Allocations

kabta: 131.215.172.59

  • 64: none
  • 65-75: Coreserver
    • 64 netblock.ugcs.caltech.edu.
    • 65 hermes.ugcs.caltech.edu.
    • 66 demeter.ugcs.caltech.edu.
    • 67 apollo.ugcs.caltech.edu.
    • 68 athena.ugcs.caltech.edu.
    • 69 persephone.ugcs.caltech.edu
    • 70 hera.ugcs.caltech.edu.
    • 71 poseidon.ugcs.caltech.edu.
    • 72 zeus.ugcs.caltech.edu.
    • 73 hestia.ugcs.caltech.edu.
    • 74 hephaestus.ugcs.caltech.edu.
    • 75 dionysus.ugcs.caltech.edu.
    • 76 nfs.ugcs.caltech.edu ( currently unused )
    • 77 none
    • 78 fo.ugcs.caltech.edu - Testing IP for failover stuff
    • 79 none
    • 80 doldnut.ugcs.caltech.edu. (owned by devteam/Jon Dama)
    • 81: afs-c.ugcs.caltech.edu: AFS database server (currently hermes)
    • 82: afsmail.ugcs.caltech.edu: AFS file server that houses mail partitions (currently hermes)
  • 86-105: Hosted servers (future hosted machines should go in the Winnett netblock; email hostmaster@caltech.edu)
    • 86 averyfs (owned by Avery IMSS)
    • 87 bsi-la (owned by Bo Adler)
    • 88 lenin (owned by Dabney comptrollers)
    • 89 donut (owned by Devteam)
    • 90 metatron (owned by Matt Maurer)
    • 91 white (owned by Mike White)
    • 92 philemon (owned by Jon Dama)
    • 93 daisy (owned by Elizabeth Fong)
    • 94 ballroom (Ballroom dance club)
    • 95 hiro (owned by Silas Bennet)
    • 98 azkaban (owned by Eugeniu Plamadeala, username eugeniu)
    • 99 fisheye (owned by Keegan McAllister, username keegan)
    • 100 kukulza (owned by Patrick Xia, username patrick)
    • 101 eternity (owned by Alex Roper, username alexr)
    • 102 vitamin-s (owned by David DiCato)
    • 103 (name not known yet) (owned by Pat Cahalan)
    • 104 heartofgold (owned by Alex Rasmussen, username adr)
  • 105-124: Shellserver
    • 105 lara.ugcs.caltech.edu.
    • 106 styx.ugcs.caltech.edu.
    • 107 minthe.ugcs.caltech.edu. (i5 machine)
    • 108 lethe.ugcs.caltech.edu.
    • 109 calliope.ugcs.caltech.edu.
    • 110 clio.ugcs.caltech.edu.
    • 111 achilles.ugcs.caltech.edu (mortal)
    • 112 helen.ugcs.caltech.edu (mortal)
    • 113 melpomene.ugcs.caltech.edu.
    • 114 polyhymnia.ugcs.caltech.edu.
    • 115 terpsichore.ugcs.caltech.edu. (i5 machine)
    • 116 thalia.ugcs.caltech.edu.
    • 117 urania.ugcs.caltech.edu.
    • 118 jason.ugcs.caltech.edu (mortal)
    • 119 midas.ugcs.caltech.edu (mortal)
    • 120 medusa.ugcs.caltech.edu (mortal)
    • 121 dictys.ugcs.caltech.edu (mortal)
  • 125: printer
  • 126: charon

UGCS hosted machines in Winnett netblock

  • 60: beryllium (owned by Chris Kennelly, username ckennelly)
  • 61: titanic (owned by Blacker IMSS)

IPv6 Allocations

  • Caltech may be rolling out IPv6 later in 2010. We've mentioned to them that we'd be interested in trying it.
Personal tools