SubGroups/Network

This page is for the network and server infrastructure for the space.

Members

• Wizzup
• tg
• Arda Xi
• Webmind
• Mattronix
• nathan7
• Piele

Features

• Wireless Leiden
• Virtual machines for members
• Spacenet
• Wifi (SSIDs: TechInc, Spacenet) on 2.4 Ghz ; Techinc-5Ghz for 5Ghz
• spacenet using RADIUS, LDAP for members when authenticating at remote spacenet places.

Plans

Current items / TODO:

• Get rid of redudant (and especially: noisy, power hungry) devices.
• Re-enable public ipv6 for all devices.
• Rebuild the virtual machine server as it is very unstable. > Neuromancer 2.0 > Mattronix/AndreasR
• TODO: move uplink to cleanroom-port which will free up 'uplink1' cable (see below)

Network Cleanup

• Label Cables
• Replace old 10/100 access switches
• Fix or replace wireless infra (random Drops, cannot promise stability)
• Check Switch config and name all interfaces and vlans
• Fix management IP of the switch in the urban resort rack.
• confirm and fix documentation

Server Infra

• Designate a location for the infra
• Decide and discuss an OS for server operation

applications

decide on a possible Shell server
Space hosted services (Web? Mail? VMS?) Ticket System? or mailing list?

Support Roles

Who is maintaining what?

Responsibility

• Oversee network infrastructure

Network Structure

Diagrams

New Infra Design effective as of 27-06-2014 Mattronix

== VLANS == (Updated 27-06-2014 Mattronix)

VLAN ID	VLAN Name	Subnet	Gateway	Description	MTU
1	TechInc	10.0.20.0/22	10.0.21.254	TechInc Public net	1500
2	Spacenet	10.0.20.0/24	10.0.21.254	Spacenet VLAN, bridged to TechInc	1500
4	Zandbak	10.0.4.0/24	10.0.4.1	TechInc Zandbak
5	UrbanStatic1	??		Urban resort static subnet
6	UrbanStatic2	??		Urban resort static subnet
7	UrbanStatic3	??		Urban resort static subnet
8	WLeiden	172.17.92.0/24	172.17.92.1	Wireless Leiden network (gateway: 172.17.92.1)	1200
9	ChaosVPN	172.31.186.0/24	172.31.186.1	ChaosVPN subnet	1200
10	TI-PEERING	192.168.94.0/24	N/A	Techinc Peering VLAN for EDGE switch TI-Urbanresort-sw001	1500
11	Storage	10.0.19.0/24	N/A	Storage network for NFS shares between Netapp & Hypervisors	9000

PEERS

VLAN 10 Peers List (updated 27-06-2014 Mattronix)

Peer Name	Peer IP	Routes Behind Peer	Description	MTU
TechInc	192.168.94.1/24	10.0.20.1/22	TechInc Public net	1500
Wireless Amsterdam	192.168.94.1/24	172.17.92.0/24	Spacenet VLAN, bridged to TechInc	1500

Public IP Addresses

Currently we have 3 IPv4 addresses. The IPv6 comes through a tunnel via Hurricane Electric.

Address	Reverse DNS name	Purpose
195.169.146.32	acta.techinc.nl	main public facing IP, currently not in use since migration from Nyancat to Mikrotik routerboard
195.169.146.33	ur33.waag.org	Connected to Wireless Amsterdam
195.169.146.34	ur34.waag.org	Currently our public facing ip, will be used for services
2001:470:1b15:162::/64	N/A	Routed /64 subnet which comes with our tunnel
2001:470:7894::/48	N/A	Routed /48 subnet assigned to us

Reserved IP Ranges

Ranges reserved for Techinc Services and may not be used without consent from the contact Person.

Range Start - Range End	Range Name	Range Description	Contact Person
10.0.20.1 - 10.0.20.254	USERS	Reserved for non infra clients	N/A
10.0.20.50 - 10.0.20.250	DHCP	Range for DHCP assignment	N/A
10.0.21.1 - 10.0.21.254	PHYS-INFRA	Reserved for physical infra machines	N/A
10.0.21.16 - 10.0.21.49	RANGE-15	Reserved for new server deployment from FIFO	Mattronix
10.0.22.1 - 10.0.22.254	VMS	Reserved for VM's	N/A
10.0.22.1 - 10.0.22.99	??	Reserved for space infra VM's	Mattronix
10.0.22.100 - 10.0.22.254	??	Reserved for member VM's	Mattronix

Switch ports

Updated and is now correct.

TI-Glassroom-sw001 [top] (Updated 12-11-2014 Piele)

Port	Connected to	Untagged VLAN	Tagged VLANS	Cable
1	Serial Server	TechInc (1)	N/A	BLUE
2	HV1 Interface 1	TechInc (1)	N/A	B12 (Yellow)
3	RED Port 2	TechInc (1)	N/A	A12 (Yellow)
4	RED Port 3	TechInc (1)	N/A	A7 (Yellow)
5	RED Port 4	TechInc (1)	N/A	UNI-3 (Yellow)
6	RED Port 1	TechInc (1)	N/A	A9 (Yellow)
7	DEAD??	TechInc (1)	N/A	N/A
8	HV2 Interface 1	TechInc (1)	N/A	B9 (Yellow)
9	TI Filer2 E0 A	TechInc (1)	N/A	A8 (Yellow)
10	TI Filer1 E0 A	TechInc (1)	N/A	A6 (Yellow)
11	TI Filer2 E0 B	Storage (11)	N/A	B4 (Yellow)
12	TI Filer1 E0 B	Storage (11)	N/A	B7 (Yellow)
13	Core-Router WAN	Urban-Static1 (5)	1	WHITE MIKROTIK ETH1
14	Core-Router LAN	TechInc (1)	4	WHITE MIKROTIK ETH2
15	Patchpanel port 4 "uplink 1"	TechInc (1)	N/A	24 (Green)
16	HV1 Interface 2	Storage (11)	N/A	20 (Green)
17	HV2 Interface 2	Storage (11)	N/A	B3 (Yellow)
18	LAN Nyancat ETH1	Urban-Static1 (5)	N/A	B1 (Yellow)
19	ADM Uplink via mikrotik	Urban-Static1 (5)	N/A	A14 (Yellow)
20	UPLINK Urban Resort	TechInc (1)	N/A	B15 (Yellow)
21	TP-Link AP via Patchpanel port 2	TechInc (1)	4	A5 (Yellow)
22	Glassroom switch 2	TechInc (1)	N/A	B11 (Yellow)
23	TI-Cleanroom-sw001-UPLINK A	TechInc (1)	N/A	N/A
24	TI-Cleanroom-sw001-UPLINK B	TechInc (1)	N/A	N/A

TI-Glassroom-sw002 [bottom] (former: TI-Cleanroom Switch): (Updated 12-11-2014 Piele) in the middle of updating

Port	Connected to	Untagged VLAN	Tagged VLANS	Cable
1	Glassroom switch 1	TechInc (1)	N/A	B11 (Yellow)
2	DOWN			B10 (Yellow)
3	DOWN			A13 (Yellow)
4	DOWN
5	HV2 iLO	TechInc (1)	N/A	A1 (Yellow)
6	HV1 iLO	TechInc (1)	N/A	A3 (Yellow)
7	DOWN
8	DOWN
9	DOWN
10	DOWN
11	DOWN
12	Doorbot	TechInc (1)	N/A	B6 (Yellow)
13	Eastside Window	TechInc (1)	??	"Eastside-Window" (Grey)
14	Ripe Atlas	TechInc (1)	??	UNI-2 (Yellow)
15	Sheeva Plug	TechInc (1)	??	B13 (Yellow)
16	DOWN
17	DOWN
18	DOWN
19	Wireless Amsterdam??	TechInc (1)	??	RED
20	Switch WestSide	TechInc (1)	??	"West-Space" (Grey)
21	DOWN
22	DOWN
23	DOWN
24	DOWN

UrbanResort-Switch-001:

Port	Connected to	Untagged VLAN	Tagged VLANS	Where does it go?
1	DOWN
2	DOWN
3	DOWN
4	DOWN
5	DOWN
6	DOWN
7	DOWN
8	DOWN
9	DOWN
10	DOWN
11	DOWN
12	DOWN
13	132.16	TechInc (1)	N/A	Next to entrance door Aux room
14	DOWN
15	DOWN
16	132.C2	TechInc (1)	N/A	Where is this one?
17	DOWN
18	DOWN
19	132.24	TechInc (1)	N/A	Makerlane
20	132.5	TechInc (1)	N/A	Where is this one?
21	132.22	TechInc (1)		Makerlane
22	132.21	TechInc (1)		Makerlane
23	132.20	TechInc (1)		Makerlane (connected to lasercutter)
24	132.19	TechInc (1)		Makerlane
25	132.3	Urban-Static1 (5)	1	Next to entrance door Aux room (connected to Patchpanel, port 1 [uplink])
26	L1-05 / L1-06	??	??	Fiber input from Urban Resort

Cables & Sockets

There are three kinds of ethernet-cabling currently in the space.

The first kind are the ethernet data-bars provided by Urban Resort to facilitate providing each space in the building with an uplink for internet of some sort. In our space these can be found in the solder-area (below the window there), as well as one set of two ports in the 'dirty room' and a similar set in the 'dirty room'. Currently our uplink to UR-infra comes from a port in the cleanroom. The ports in the soldering area are patched into our switch at Urban Resort.

The second kind of cabling is the 'permanent' cabling as provided by ourselves that run from/to the clean-room and provide ethernet connectivity to different ports/devices in the space. The short-term goal is to have these cables all terminate on a patch-bay in the clean-room and dual-RJ45 ports on the walls or other places. All cables are to have the same label on both ends of the cable.

An inventory of currently provided ports is below:

port	description
port 1	First port of two in the wall behind the presentation desk
port 2	Second port of two in the wall behind the presentation desk
door1	First of two cables that run to the corner of the ceiling at the door
door2	second of two cables that run to the corner of the ceiling at the door
middle1	First of two cables that run to the center of the space; above the ceiling just behind the beamer; runs to solder-space switch for now; planned for power-bar infra later
middle2	second of two cables that run to the center of the space; above the ceiling just behind the beamer; has AP connected
table	runs to wall next to the arcade; reserved for connecting the table with ethernet
arcade	runs to the wall next to the arcade; reserved for connecting the arcade machine with ethernet
uplink1	Cable running from soldering area to cleanroom, please use with care to prevent broadcast-storms.

The third kind of ethernet-cabling is the cabling found in the space, drawn from local switches on tables or walls to devices found in the space. Currently there is no overview of these devices or the amount of switches/there. It might be good to make a distinction between 'permanent infra' switches and 'user-purpose' switches later.

layer 2/3

• Nyancat is the main router.
• There is now a TP-Link WDR4300 connected directly to the switch, with three SSIDs:

 * TechInc and Spacenet. [Legacy and public, unfiltered IPv6]
 * TechInc-zandbak Legacy (and soon: firewalled IPv6)

Machines

Hostname	IPv4	IPv6	Function	Location	Contact
TI-HP-UrbanResort	10.0.20.2		Switch	Urban Resort Patchroom
Indicio	10.0.20.3		MPD Server	Below the mixer
TI-HP-CleanRoom	10.0.20.4		Switch	CleanRoom
Case	10.0.20.6	2001:470:7894::6	Playground	Neuromancer	Webmind
Peter Riviera	10.0.20.10	2001:470:7894::10	Shardik	Neuromancer	Dreamer
Hideo	10.0.20.11	2001:470:7894::11		Neuromancer	Ultratux
Wintermute	10.0.20.12	2001:470:7894::12	Lorea testing	Neuromancer	Webmind
Dixie Flatline	10.0.20.13	2001:470:7894::13	asterisk	Neuromancer	Realitygaps
Replicator	10.0.20.17		3D printer, powerbar-server	Next to 3D printer	Nathan7 Arda Xi
Lady 3Jane Marie-France Tessier-Ashpool	10.0.20.18	2001:470:7894::18	playground	Neuromancer	Amx109
MikroTik	10.0.20.22		routing	Roof
Finn	10.0.20.23	2001:470:7894::23	monitoring/alerting	Neuromancer
RIPE3248	10.0.20.24		Backdoor	NSA	Webmind
Maelcum	10.0.20.25		testing	neuromancer
C64	10.0.20.26		A/V	Below the A/V desk
SIPphone	10.0.20.27		It's a phone	Under mixer	Arda Xi
Deane	10.0.20.28	2001:470:7894::28	diaspora	Neuromancer	?
Cerberupsvoertuig	10.0.20.30		3D printing	makerlane	Ultratux Control-k Wizzup
TP-Link	10.0.20.31	2001:470:7894::31	WAP	In space	Wizzup
Huelights	10.0.20.32		control lights on the table	table	The JinX
Four	10.0.20.34		Workstation	Next to the Arcade	Arda Xi
Neuromancer v3	10.0.20.35		Hypervisor	TBA	Arda Xi
HP Laserjet 4050TN	10.0.20.36		Printing	Aux room	Justa
Ltsp-laptop0	10.0.20.37		Fat-client laptop		Muse
Ltsp-laptop1	10.0.20.38		Fat-client laptop		Muse
Ltsp-laptop2	10.0.20.39		Fat-client laptop		Muse
Ltsp-laptop3	10.0.20.40		Fat-client laptop		Muse
Powerbar2	10.0.20.41	2001:470:7894::41	Powerbars	Aux	Wizzup
Gencore	10.0.20.42	2001:470:7894::42	LDAP/RADIUS		Wizzup
LaosLaser	10.0.20.43		laser cutter	techinc	Daan
Voodoo1	10.0.20.44	2001:470:7894::44	Dual SLI workstation	Dual screen desktop under the logo wheel	Elves

refresh

Add

Physical Infra Network Team

This is an initial setup, by Mattronix on 15-11-2014 This is a table of physical devices that maintain the spaces core services. TODO: change all physical infra to the 10.0.21.0 range, see reserved ip ranges above

Hostname	IPv4	IPv6	Function	Contact
hv1.ti	10.0.21.72/10.0.21.3	N/A	KVM Hypervisor 1 + LXC	Piele
hv2.ti	10.0.21.73/10.0.19.4	N/A	KVM Hypervisor 2 + LXC	Piele
TI-Filer1	10.0.21.68/10.0.19.1	N/A	Storage SAN/NAS Controller 1	Mattronix
TI-Filer2	10.0.21.69/10.0.19.2	N/A	Storage SAN/NAS Controller 2	Mattronix
RED	10.0.21.11	N/A	SmartOS Hypervisor	Mattronix
Glassroom-Switch-001	10.0.21.9	N/A	Glassroom Top Switch in rack used for Servers, Uplink to Urban Resort Switch and Downlink to the Glassroom Switch 2	Mattronix
Glassroom-Switch-002	10.0.21.76	N/A	Glassroom Bottem Switch in the rack used for client access and as an uplink for all the user switches in the space	Mattronix
UrbanResort-Switch-001	10.0.21.57	N/A	Used to connect to the Fiber Uplink from our ISP and for multiple patches across the space	Mattronix
router.ti	10.0.21.254	2001:470:7894::1	Core Router for the space, all internet traffic goes though this device.	Mattronix

Virtual Machines

This is an initial setup, by Piele on 12-11-2014

Hostname	IPv4	IPv6	Function	Contact
techinc-srv1.ti	10.0.22.1	N/A	ISPConfig	Mattronix
monitoring.ti	10.0.22.2	N/A	Monitoring server	Andreasr
techinc-backup.ti	10.0.22.3	N/A	Backup Server	Mattronix
techinc-quessel.ti	10.0.22.4	N/A	Quessel Server	Mattronix
techinc-vpn.ti	10.0.22.5	N/A	Openvpn Server	Piele
techinc-cloud.ti	10.0.22.7	N/A	Owncloud	Mattronix
techinc-ldap.ti	10.0.22.8	N/A	LDAP server	Mattronix
techinc-radius.ti	10.0.22.9	N/A	Radius server	Mattronix
techinc-ampache.ti	10.0.22.10	N/A	Ampache server	Mattronix
codeasm-minecraft	10.0.22.11	N/A	codeasm-minecraft-server	CodeAsm

Services

List of services, each with a small guide/article on how to use / tweak it said service:

• Neuromancer, VPS host and IPv6 router, managed by Webmind and Wizzup Does not excist anymore, 13-11-2014
• Molly, VPS guest, runs Hypatia, managed by Webmind
• (Armitage, VPS guest on neuromancer, spacenet, run by DrWax) (Spacenet runs on gencore, and is managed by Wizzup)
• physical infra (cables/ports/etc) can be inquired about Justa
• Remove pulseaudio sink on indicio. PULSE_SERVER=indicio.ti mplayer <foo> (Questions ask Wizzup)
• Indicio, MPD Server, managed by Wizzup & others