Difference between revisions of "Network"

Jump to navigation Jump to search
882 bytes added ,  00:56, 13 January 2023
no edit summary
 
(48 intermediate revisions by 4 users not shown)
Line 2: Line 2:
''For more information about sudo room's systems in general, see [[Systems Administration]]''
''For more information about sudo room's systems in general, see [[Systems Administration]]''


The sudo room '''network''' provides internal networking, internet access, wireless service, and some externally accessible devices or services. Information about the various devices in use and their configuration is available below.
The sudo room '''network''' provides internal networking, internet access, wireless service, and some externally accessible devices or services.


== peoplesopen.net ==
== Main PoE ethernet switch ===


If you wish to connect to the local mesh network [https://peoplesopen.net peoplesopen.net], then you can either connect using the peoplesopen.net wifi network, <s>or you can connect using ethernet through the D-Link DIR-601A router on the shelf next to the main switch</s>. Use DHCP to get a 10.0.0.0/8 IP address on the mesh network. The router will handle the meshing protocol for you and also provide you with normal Internet access.
* HP ProCurve 2910al-480-PoE+ switch [https://github.com/wwwhtml/hp-2910al-switch-firmware-upgrade/ How to manage / firmware update]
* username: manager or operator
* password: Ask juul or someone on the sysadmins list
* MAC address main switch: a0:b3:cc:ac:e7:c0
* MAC address backup switch (not turned on): c0:91:34:c4:12:00
* Port 1 is VLAN 1 untagged, acting as DHCP client, is management VLAN
* Management possible via HTTP (no SSL) or SSH
* Port 1 is for management, untagged no VLAN and requests an IP using DHCP (not plugged into anything right now)
* Port 2 and 3 are for tagged access to VLANs 2 and 3 (public and private)
* Ports 4 to 24 are for untagged access to VLAN 2 (public)
* Ports 25 to 48 are for untagged access to VLAN 3 (private)


== Routing ==
== WAN ==
* [[Router/Config/Interface|Configure Interface Addresses]]
* [[Router/Config/PortForward|Open a port to the outside world]]


== Network Info ==
Internet access comes from LMI. The modem is connected through VDSL copper next to the Omni main electrical panels.
{|class="altop"
|
Internet access is via '''space.local''', a rackmount server running Ubuntu 14.04. If you follow the ethernet cable from the LMI modem through the patch panel, this is the first box connected to it.


=== External ===
The modem is up in the rack area near '''saros''' (a desktop computer running Debian Stretch) which serves as the primary gateway router.
==== Addresses ====


Our public IP is 142.254.26.9 aka '''room.sudoroom.org'''.
Our public IP is 142.254.26.9 aka '''room.sudoroom.org'''.


=== Internal ===
== LAN ==
==== Ranges ====
* Wifi subnet: 100.64.64.0/22
* Internal subnet: 192.168.0.0/16
** 100.64.64.2 to 100.64.64.49: legacy static range
* DHCP range: 192.168.50.1 to 192.168.200.254
** 100.64.64.50 to 100.64.67.250: DHCP
* Wired subnet: 192.168.0.0/16
** 192.168.1.2 to 192.168.41.254: unused for now
** 192.168.42.2 to 192.168.49.254: self assigned static range
** 192.168.50.1 to 192.168.200.254: DHCP
 
This list of static IPs may not be complete. Before choosing a static IP, please use ping or nmap to check it first.
 
By request, we can reserve an IP from the DHCP pool and/or forward ports for you. Please send the MAC address and/or desired ports to [mailto:sysadmins@omnicommons.org sysadmins@omnicommons.org]


==== Addresses ====
{| class="wikitable sortable blue_lines"
{| class="wikitable blue_lines"
|+ Machines with static IPs
!style="width:120px;"| IPv4 Address
! style="width:120px;" data-sort-type="IPAddress" | IPv4 Address
!style="width:110px;"| IPv6 Address
! style="width:110px;" data-sort-type="IPAddress" | IPv6 or MAC Address
!style="width:110px;"| Assigned to
! style="width:110px;" | Assigned to
!Notes
! class="unsortable" | Notes
!Who set it up?
! Who set it up?
|-
| 192.168.42.1
|
| saros
| router
| [[User:yar|Yar]]
|-
| 100.64.64.1
|
| saros
| router
| [[User:yar|Yar]]
|-
|-
| 192.168.42.1 / 142.254.26.9
| 192.168.42.2
| fd4f:dc5d:8d1::1
| fd4f:dc5d:8d1::1
| [[space.local|space.local / room.sudoroom.org]]
| [[space.local]]
| Our gateway. Located in the sudo room server "room".
| Former gateway/router. Located in the sudo room server "room".
| maxb and somebody
| maxb and somebody
|-
|-
| 100.64.64.11
| 100.64.64.11
| fe80::d239:72ff:fe18:5906
|
| omnidoor2
| omnidoor
| beaglebone black controlling the door
| beaglebone black controlling the door
| juul and jake
| juul and jake
|-
| 100.64.64.82
| b8:27:eb:14:14:36
| vending2.local
| [[Hack-o-mat| Snackshop II vending machine]]
| [[User:jake|jake]]
|-
|-
| 192.168.42.3
| 192.168.42.3
Line 58: Line 88:
| Dell PowerConnect 5448 48 port gigabit switch
| Dell PowerConnect 5448 48 port gigabit switch
| juul
| juul
|-
| 192.168.42.6
| fe80::219:b9ff:fe17:821c
| reproxy.local
| Load balancer and reverse proxy (not yet in commission).
| wrought
|-
| 192.168.42.7
| fe80::214:22ff:feb0:606
| shell.local
| Shell server (not yet in commission).
| wrought
|-
| 192.168.42.8
|
|
| the 3d printer desktop computer
| [[User:Yar|yar]]
|-
| 192.168.42.9
|
| BespokeBridge
| temporary wireless bridge to '''LaCommuneFront''' for public terminals near den in upstairs mezzanine
| [[User:Wrought|wrought]]
|-
|-
| 192.168.42.10
| 192.168.42.10
Line 88: Line 94:
| The sudo mesh node configuration and build server
| The sudo mesh node configuration and build server
| Primarily [[User:Juul|juul]] and maxb
| Primarily [[User:Juul|juul]] and maxb
|-
| 100.64.64.88
| 00:21:b7:80:59:47
| ET0021B7805947.local
| [[Lexmark T654dn | Lexmark T654dn laser printer]]
| [[User:Jerkey|jerkey]]
|-
|-
| 192.168.42.12
| 192.168.42.12
Line 95: Line 107:
| [[User:Yar|yar]]
| [[User:Yar|yar]]
|-
|-
| 192.168.42.22
| 100.64.64.20
| Used only to build sudo mesh firmware and turned off when not in use.
| 00:21:9b:1d:85:c1
| meshbuild.local
| wasp.local
| [[Mesh/Build server|sudo mesh build server]]
| [[Wasp.local| 3d printer desktop computer & giant_robot_arm serial host]]
| [[User:Juul|juul]]
| [[User:jake|jake]]
|-
| 192.168.42.24
|
| ccl.local
| The Counter Culture Labs server. Located in the sudo room server rack.
| [[User:Juul|juul]]
|-
|-
| 192.168.42.31
| 100.64.64.27
|  
| C0:3F:D5:6F:25:68
| hackomat.local
| orangenuk.local
| The [[hack-o-mat]] vending machine.
| [[bigtv| orange fanless PC connected to the big TV above skülgaard]]
| [[User:Juul|juul]]
| [[User:jake|jake]]
|-
|-
| 192.168.42.42
| 100.64.65.229
| c0:8a:de:1d:59:b6
|  
|  
| omnidoor.local
| ruckus_wifi_controller [https://github.com/sudoroom/ruckus-zonedirector1100-firmware-upgrade-process firmware upgrade process]
| Dell laptop controlling the main Omni door access.
| daniel
| [[User:Juul|juul]]
|-
|-
| 192.168.42.47
|
| spartacus.local
| Dell desktop proxy server, apt server, for setting up new computers
| [[User:biged|biged]]
|-
! 192.168.42.50 -<br/>192.168.42.254
|
!colspan=3| '''DHCP'''
|}
|}


== Wireless Access Points ==
== Wireless Access Points ==
All of the indoor wifi is being served up by [[Mesh/OmniWifi|TP-Link N750 routers modified for PoE]] running OpenWRT and configured as bridges with static IPs.
{| class="wikitable blue_lines"
{| class="wikitable blue_lines"
!SSID
!SSID
Line 141: Line 141:
!Hardware
!Hardware
!Who set it up?
!Who set it up?
|-
|peoplesopen.net-omniroof
|open
|''n/a''
|Find Me
|100.64.64.4
|161 (5ghz)
|On flagpole on roof
|Ubiquiti NanoBeam
|[[User:Juul|juul]]
|-
|peoplesopen.net
|open
|''n/a''
|Find Me
|100.64.64.2
|11 (2.4ghz) and 36 (5ghz)
|Above entrance to CCL
|TP-Link N750
|[[User:Juul|juul]]
|-
|peoplesopen.net
|open
|''n/a''
|Find Me
|100.64.64.3
|6 (2.4ghz) and 165 (5ghz)
|middle of basement
|TP-Link N750
|[[User:Juul|juul]]
|-
|-
|sudomesh
|sudomesh

Navigation menu