Network - Revision history

Ztseguin: /* May-June 2017 Networking Changes */

2017-12-13T21:05:50Z

May-June 2017 Networking Changes

← Older revision		Revision as of 16:05, 13 December 2017
Line 103:		Line 103:
	* 1x24 1Gbps Ethernet ports		* 1x24 1Gbps Ethernet ports
	* 1x20 Ethernet + 4 SFP 1Gbps ports		* 1x20 Ethernet + 4 SFP 1Gbps ports

	== May-June 2017 Networking Changes ==

	The CSC network is currently undergoing major changes.

	A highlight:

	* Two routers: mc-rt-3015-mso-a and dc-rt-3558-mso-a
	** Routers will be configured with VRRP for CSC/MSO networks
	** Networks will be interconnected by a 1Gbps link (until an additional 10Gbps card + transceivers are acquired)

Ztseguin: /* Networking Configuration */

2017-12-13T21:05:40Z

Networking Configuration

← Older revision		Revision as of 16:05, 13 December 2017
Line 88:		Line 88:
	=== mc-rt-3015-mso-a ===		=== mc-rt-3015-mso-a ===

	* 4 port 10Gbps SFP+		* 4 port 10Gbps SFP+ card
			* 8 port 10Gbps SFP+ card (funded by CIF)
	* 2x24 1Gbps Ethernet ports		* 2x24 1Gbps Ethernet ports

Line 96:		Line 97:
	* Trk10: fs00		* Trk10: fs00
	* Trk11: reserved - fs01		* Trk11: reserved - fs01

			=== dc-rt-3558-mso-a ===

			* 8 port 10Gbps SFP+ card (funded by CIF)
			* 1x24 1Gbps Ethernet ports
			* 1x20 Ethernet + 4 SFP 1Gbps ports

	== May-June 2017 Networking Changes ==		== May-June 2017 Networking Changes ==

Ztseguin: /* Assigned Subnets */

2017-12-13T21:03:54Z

Assigned Subnets

← Older revision		Revision as of 16:03, 13 December 2017
Line 68:		Line 68:

	ACL restrictions only allowing traffic from 129.97.134.0/24 (NOTE: should be restricted further) and from CSCF monitoring VLANs (for UPS and mirror.csclub monitoring)		ACL restrictions only allowing traffic from 129.97.134.0/24 (NOTE: should be restricted further) and from CSCF monitoring VLANs (for UPS and mirror.csclub monitoring)

			=== 172.19.4.96/28 (MC VLAN: 521) ===

			* Private network for printers located in MathSoc or club offices
			* Routing restricted to University of Waterloo campus

	=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===		=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===

Ztseguin: /* 172.19.134.0/24 (MC VLAN: 425) */

2017-12-13T21:01:25Z

172.19.134.0/24 (MC VLAN: 425)

← Older revision		Revision as of 16:01, 13 December 2017
Line 47:		Line 47:
	Gateway: 129.97.16.96		Gateway: 129.97.16.96

	=== 172.19.134.0/24 (MC VLAN: 425) ===		=== 172.19.134.0/24, 2620:101:f000:4903::/64 (MC VLAN: 425) ===

			* cloud.csclub user network
	* General use
	* Routing restricted to University of Waterloo campus		* Routing restricted to University of Waterloo campus
			* NAT for IPv4: 172.19.134.254
			* Incoming connections over IPv6 blocked at campus firewall

	=== 172.19.5.24/29 (PHY VLAN: 504) ===		=== 172.19.5.24/29 (PHY VLAN: 504) ===

Ztseguin at 02:19, 27 May 2017

2017-05-27T02:19:44Z

← Older revision		Revision as of 21:19, 26 May 2017
Line 76:		Line 76:
	* CSC Storage		* CSC Storage
	* ACL restrictions preventing most of campus from accessing this network		* ACL restrictions preventing most of campus from accessing this network

			== Networking Configuration ==

			=== mc-rt-3015-mso-a ===

			* 4 port 10Gbps SFP+
			* 2x24 1Gbps Ethernet ports

			Trunks:

			* Trk1-9: Reserved for router/switch connections
			* Trk10: fs00
			* Trk11: reserved - fs01

			== May-June 2017 Networking Changes ==

			The CSC network is currently undergoing major changes.

			A highlight:

			* Two routers: mc-rt-3015-mso-a and dc-rt-3558-mso-a
			** Routers will be configured with VRRP for CSC/MSO networks
			** Networks will be interconnected by a 1Gbps link (until an additional 10Gbps card + transceivers are acquired)

Ztseguin: /* 10.15.134.0/24 (MC VLAN: 520) */

2017-05-05T04:57:53Z

10.15.134.0/24 (MC VLAN: 520)

← Older revision		Revision as of 23:57, 4 May 2017
Line 64:		Line 64:
	** Lights Out Management		** Lights Out Management
	** Insecure devices (e.g. PDUs, KVMs, and PSUs)		** Insecure devices (e.g. PDUs, KVMs, and PSUs)

	* Our expectation was for this to be internal traffic only, no routing to or from other subnets (this was the case up until Monday, Dec. 14 when VLAN was added to 10Gig switch for mirror transition)
			ACL restrictions only allowing traffic from 129.97.134.0/24 (NOTE: should be restricted further) and from CSCF monitoring VLANs (for UPS and mirror.csclub monitoring)
	** jxpryde: My personal expectation was that no router had a routing table entry for this subnet, you had to be link-local. Thus, no ACL's would be necessary.

	=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===		=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===

Ztseguin at 06:04, 28 April 2017

2017-04-28T06:04:54Z

← Older revision		Revision as of 01:04, 28 April 2017
Line 1:		Line 1:
	Networks assigned to Math Student Org Net.		Networks assigned to Math Student Org Net.

			== IPv4 / IPv6 ==

			All of the CSC's public networks are fully dual-stack; this means all of our services are offered over both IPv4 and IPv6.

			If you are interested in checking your IPv6 connection, visit [http://test-ipv6.csclub.uwaterloo.ca test-ipv6.csclub.uwaterloo.ca].

	== Assigned Subnets ==		== Assigned Subnets ==

Ztseguin: Remove /* 10.0.134.0/24 (MC VLAN: ???) */

2017-04-26T00:35:21Z

Remove 10.0.134.0/24 (MC VLAN: ???)

← Older revision		Revision as of 19:35, 25 April 2017
Line 60:		Line 60:
	* Our expectation was for this to be internal traffic only, no routing to or from other subnets (this was the case up until Monday, Dec. 14 when VLAN was added to 10Gig switch for mirror transition)		* Our expectation was for this to be internal traffic only, no routing to or from other subnets (this was the case up until Monday, Dec. 14 when VLAN was added to 10Gig switch for mirror transition)
	** jxpryde: My personal expectation was that no router had a routing table entry for this subnet, you had to be link-local. Thus, no ACL's would be necessary.		** jxpryde: My personal expectation was that no router had a routing table entry for this subnet, you had to be link-local. Thus, no ACL's would be necessary.

	=== 10.0.134.0/24 (MC VLAN: ???) ===

	A network we apparently have, that was supposed to be used for LOM.

	=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===		=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===

Ztseguin: /* 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) */

2017-04-26T00:34:26Z

172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529)

← Older revision		Revision as of 19:34, 25 April 2017
Line 70:		Line 70:
	* ACL restrictions preventing most of campus from accessing this network		* ACL restrictions preventing most of campus from accessing this network

	=== 172.19.168.32/27, fd74:6b6a:8eca:4903::/64 (MC VLAN: 530)		=== 172.19.168.32/27, fd74:6b6a:8eca:4903::/64 (MC VLAN: 530) ===

	* CSC Storage		* CSC Storage

Ztseguin: Added MC VLAN 529 and 530

2017-04-26T00:34:15Z

Added MC VLAN 529 and 530

← Older revision		Revision as of 19:34, 25 April 2017
Line 3:		Line 3:
	== Assigned Subnets ==		== Assigned Subnets ==

	=== 129.97.134.0/24, 2620:101:f000:4901::/64 (VLAN: 134) ===		=== 129.97.134.0/24, 2620:101:f000:4901::/64 (MC VLAN: 134) ===

	"Math Student Orgs Net" - Server network		"Math Student Orgs Net" - Server network
Line 19:		Line 19:
	(In the near future, this VLAN will not be available on the office switch. Use VLAN 427 instead.)		(In the near future, this VLAN will not be available on the office switch. Use VLAN 427 instead.)

	=== 129.97.31.128/26, 2620:101:f000:4902::/64 (VLAN: 427) ===		=== 129.97.31.128/26, 2620:101:f000:4902::/64 (MC VLAN: 427) ===

	"Math Student Orgs Net" - Client network		"Math Student Orgs Net" - Client network
Line 28:		Line 28:
	Accessible only on the offices switch.		Accessible only on the offices switch.

	=== 129.97.18.16/28 (VLAN: 506) ===		=== 129.97.18.16/28, 2620:101:f000:7300::/64 (PHY VLAN: 506) ===

	* Subnet for machines located in the Science machine room		* Subnet for machines located in the Science machine room
Line 34:		Line 34:
	Gateway: 129.97.18.17		Gateway: 129.97.18.17

	=== [Deprecated] 129.97.16.96/29 (VLAN: 505) ===		=== [Deprecated] 129.97.16.96/29 (PHY VLAN: 505) ===

	* Historical VLAN - Removed from service on July 18, 2016 to allow CSCF to expand one of their networks		* Historical VLAN - Removed from service on July 18, 2016 to allow CSCF to expand one of their networks
Line 41:		Line 41:
	Gateway: 129.97.16.96		Gateway: 129.97.16.96

	=== 172.19.134.0/24 (VLAN: 425) ===		=== 172.19.134.0/24 (MC VLAN: 425) ===

	* General use		* General use
	* Routing restricted to University of Waterloo campus		* Routing restricted to University of Waterloo campus

	=== 172.19.5.24/29 (VLAN: 504) ===		=== 172.19.5.24/29 (PHY VLAN: 504) ===

	* Subnet for machines located in the Science machine room		* Subnet for machines located in the Science machine room
Line 53:		Line 53:
	Gateway: 172.19.5.25		Gateway: 172.19.5.25

	=== 10.15.134.0/24 (VLAN: 520) ===		=== 10.15.134.0/24 (MC VLAN: 520) ===

	* Private network:		* Private network:
Line 61:		Line 61:
	** jxpryde: My personal expectation was that no router had a routing table entry for this subnet, you had to be link-local. Thus, no ACL's would be necessary.		** jxpryde: My personal expectation was that no router had a routing table entry for this subnet, you had to be link-local. Thus, no ACL's would be necessary.

	=== 10.0.134.0/24 (VLAN: ???) ===		=== 10.0.134.0/24 (MC VLAN: ???) ===

	A network we apparently have, that was supposed to be used for LOM.		A network we apparently have, that was supposed to be used for LOM.

			=== 172.19.168.0/27, fd74:6b6a:8eca:4902::/64 (MC VLAN: 529) ===

			* CSC Cloud Management
			* ACL restrictions preventing most of campus from accessing this network

			=== 172.19.168.32/27, fd74:6b6a:8eca:4903::/64 (MC VLAN: 530)

			* CSC Storage
			* ACL restrictions preventing most of campus from accessing this network