Difference between revisions of "SubGroups/Network"
(→Plans) |
(→Plans) |
||
| Line 44: | Line 44: | ||
applications | applications | ||
| − | decide on a possible Shell server | + | decide on a possible Shell server <br> |
Monitoring <<- Mattronix <br> | Monitoring <<- Mattronix <br> | ||
Space hosted services (Web? Mail? VMS?) | Space hosted services (Web? Mail? VMS?) | ||
Revision as of 12:19, 1 May 2014
This page is for the network and server infrastructure for the space.
Contents
Members
Features
- Wireless Leiden
- Virtual machines for members
- Spacenet
- Wifi (SSIDs: TechInc, Spacenet) on 2.4 Ghz
- LDAP server for members, RADIUS for spacenet
Plans
Current items / TODO:
- Get rid of redudant (and especially: noisy, power hungry) devices.
- Re-enable public ipv6 for all devices.
- Rebuild the virtual machine server as it is very unstable. > Neuromancer 2.0 > Mattronix/AndreasR
- TODO: move uplink to cleanroom-port which will free up 'uplink1' cable (see below)
Network Cleanup
- Label Cables
- Replace old 10/100 access switches
- Fix or replace wireless infra (random Drops, cannot promise stability)
- Check Switch config and name all interfaces and vlans
- Fix management IP of the switch in the urban resort rack.
- confirm and fix documentation
Server Infra
- Designate a location for the infra
- Decide and discuss an OS for server operation
applications
decide on a possible Shell server
Monitoring <<- Mattronix
Space hosted services (Web? Mail? VMS?)
Ticket System? or mailing list?
Support Roles
Who is maintaining what?
Responsibility
- Oversee network infrastructure
Network Structure
VLANS
| VLAN ID | VLAN Name | Subnet | Gateway | Description | MTU |
|---|---|---|---|---|---|
| 1 | TechInc | 10.0.20.0/24 | 10.0.20.1 | TechInc Public net | 1500 |
| 2 | Spacenet | 10.0.20.0/24 | 10.0.20.1 | Spacenet VLAN, bridged to TechInc | 1500 |
| 4 | Zandbak | 10.0.4.0/24 | 10.0.4.1 | TechInc Zandbak | |
| 5 | UrbanStatic1 | ?? | Urban resort static subnet | ||
| 6 | UrbanStatic2 | ?? | Urban resort static subnet | ||
| 7 | UrbanStatic3 | ?? | Urban resort static subnet | ||
| 8 | WLeiden | 172.17.92.0/24 | 172.17.92.1 | Wireless Leiden network (gateway: 172.17.92.1) | 1200 |
| 9 | ChaosVPN | 172.31.186.0/24 | 172.31.186.1 | ChaosVPN subnet | 1200 |
Switch ports
TODO: Update this to reflect new layout since Nov 22, 2013
| Port | Connected to | Untagged VLAN | Tagged VLANS | |
|---|---|---|---|---|
| 1 | nyancat | TechInc (1) | NAT-Urban,UrbanStatic1,UrbanStatic2,UrbanStatic3,WLeiden | |
| 2 | ? | TechInc (1) | NAT-Urban,UrbanStatic1,UrbanStatic2,UrbanStatic3 | |
| 3 | West-Space | TechInc (1) | ||
| 4 | ? | UrbanStatic1 | TechInc (1) | |
| 5 | ? | TechInc (1) | ||
| .. | .. | .. | .. | |
| 11 | ? | TechInc (1) | ||
| 12 | Mikrotik | WLeiden | ||
| 13 | ? | TechInc (1) | ||
| 14 | ? | |||
| 15 | ? | TechInc (1) | ||
| 23 | nyancat | Cisco Wifi AP | .. | |
| 24 | ? | TechInc (1) |
Cables & Sockets
There are three kinds of ethernet-cabling currently in the space.
The first kind are the ethernet data-bars provided by Urban Resort to facilitate providing each space in the building with an uplink for internet of some sort. In our space these can be found in the solder-area (below the window there), as well as one set of two ports in the 'dirty room' and a similar set in the 'dirty room'. Currently our uplink to UR-infra comes from a port in the cleanroom. The ports in the soldering area are patched into our switch at Urban Resort.
The second kind of cabling is the 'permanent' cabling as provided by ourselves that run from/to the clean-room and provide ethernet connectivity to different ports/devices in the space. The short-term goal is to have these cables all terminate on a patch-bay in the clean-room and dual-RJ45 ports on the walls or other places. All cables are to have the same label on both ends of the cable.
An inventory of currently provided ports is below:
| port | description |
| port 1 | First port of two in the wall behind the presentation desk |
| port 2 | Second port of two in the wall behind the presentation desk |
| door1 | First of two cables that run to the corner of the ceiling at the door |
| door2 | second of two cables that run to the corner of the ceiling at the door |
| middle1 | First of two cables that run to the center of the space; above the ceiling just behind the beamer; runs to solder-space switch for now; planned for power-bar infra later |
| middle2 | second of two cables that run to the center of the space; above the ceiling just behind the beamer; has AP connected |
| table | runs to wall next to the arcade; reserved for connecting the table with ethernet |
| arcade | runs to the wall next to the arcade; reserved for connecting the arcade machine with ethernet |
| uplink1 | Cable running from soldering area to cleanroom, please use with care to prevent broadcast-storms. |
The third kind of ethernet-cabling is the cabling found in the space, drawn from local switches on tables or walls to devices found in the space. Currently there is no overview of these devices or the amount of switches/there. It might be good to make a distinction between 'permanent infra' switches and 'user-purpose' switches later.
layer 2/3
- Nyancat is the main router.
- There is now a TP-Link WDR4300 connected directly to the switch, with three SSIDs:
* TechInc and Spacenet. [Legacy and public, unfiltered IPv6] * TechInc-zandbak Legacy (and soon: firewalled IPv6)
Machines
| Hostname | IPv4 | IPv6 | Function | Location | Contact |
|---|---|---|---|---|---|
| TI-HP-UrbanResort | 10.0.20.2 | Switch | Urban Resort Patchroom | ||
| Indicio | 10.0.20.3 | MPD Server | Below the mixer | ||
| TI-HP-CleanRoom | 10.0.20.4 | Switch | CleanRoom | ||
| Case | 10.0.20.6 | 2001:470:7894::6 | Playground | Neuromancer | Webmind |
| Peter Riviera | 10.0.20.10 | 2001:470:7894::10 | Shardik | Neuromancer | Dreamer |
| Hideo | 10.0.20.11 | 2001:470:7894::11 | Neuromancer | Ultratux | |
| Wintermute | 10.0.20.12 | 2001:470:7894::12 | Lorea testing | Neuromancer | Webmind |
| Dixie Flatline | 10.0.20.13 | 2001:470:7894::13 | asterisk | Neuromancer | Realitygaps |
| Replicator | 10.0.20.17 | 3D printer, powerbar-server | Next to 3D printer | Nathan7 Arda Xi | |
| Lady 3Jane Marie-France Tessier-Ashpool | 10.0.20.18 | 2001:470:7894::18 | playground | Neuromancer | Amx109 |
| MikroTik | 10.0.20.22 | routing | Roof | ||
| Finn | 10.0.20.23 | 2001:470:7894::23 | monitoring/alerting | Neuromancer | |
| RIPE3248 | 10.0.20.24 | Backdoor | NSA | Webmind | |
| Maelcum | 10.0.20.25 | testing | neuromancer | ||
| C64 | 10.0.20.26 | A/V | Below the A/V desk | ||
| SIPphone | 10.0.20.27 | It's a phone | Under mixer | Arda Xi | |
| Deane | 10.0.20.28 | 2001:470:7894::28 | diaspora | Neuromancer | ? |
| Cerberupsvoertuig | 10.0.20.30 | 3D printing | makerlane | Ultratux Control-k Wizzup | |
| TP-Link | 10.0.20.31 | 2001:470:7894::31 | WAP | In space | Wizzup |
| Huelights | 10.0.20.32 | control lights on the table | table | The JinX | |
| Four | 10.0.20.34 | Workstation | Next to the Arcade | Arda Xi | |
| Neuromancer v3 | 10.0.20.35 | Hypervisor | TBA | Arda Xi | |
| HP Laserjet 4050TN | 10.0.20.36 | Printing | Aux room | Justa | |
| Ltsp-laptop0 | 10.0.20.37 | Fat-client laptop | Muse | ||
| Ltsp-laptop1 | 10.0.20.38 | Fat-client laptop | Muse | ||
| Ltsp-laptop2 | 10.0.20.39 | Fat-client laptop | Muse | ||
| Ltsp-laptop3 | 10.0.20.40 | Fat-client laptop | Muse | ||
| Powerbar2 | 10.0.20.41 | 2001:470:7894::41 | Powerbars | Aux | Wizzup |
| Gencore | 10.0.20.42 | 2001:470:7894::42 | LDAP/RADIUS | Wizzup | |
| LaosLaser | 10.0.20.43 | laser cutter | techinc | Daan | |
| Voodoo1 | 10.0.20.44 | 2001:470:7894::44 | Dual SLI workstation | Dual screen desktop under the logo wheel | Elves |
Services
List of services, each with a small guide/article on how to use / tweak it said service:
- Neuromancer, VPS host and IPv6 router, managed by Webmind and Wizzup
- Molly, VPS guest, runs Hypatia, managed by Webmind
-
(Armitage, VPS guest on neuromancer, spacenet, run by DrWax)(Spacenet runs on gencore, and is managed by Wizzup) - Indicio, MPD Server, managed by ?
- physical infra (cables/ports/etc) can be inquired about Justa
TODO:
- Remote audio sink using pulseaudio (soon)
- Workstation (just one)
