VLAN and IP address-space information (Do Not Migrate)
This page documents established network assignments (that is manually maintained). For the definitive list of VLans in use (that includes projects under developement) refer to this CSCF Vlan Information or IST's nsbuild application
.
For a discussion about general policies and our general network architecture, see the network schema discussion.
- VLAN and IP address-space information (Do Not Migrate)
- Additional references
- Current VLAN assignments
- VLAN 438 is IST wired authentication or 802.1x (building independent)
- Research external network
- VLANs in 129.97.0.0/16
- VLANs in 192.168.0.0/16
- VLANs in 172.19.0.0/16
- VLANs in 10.0.0.0/8
- IST networks of interest
- Historical information (no longer correct but perhaps of historical interest)
Additional references
- Lan Switching: https://en.wikipedia.org/wiki/LAN_switching - definitions of Layer 2,3,4 ... etc switching
- A reference to the VLAN and firewall information in the DRCSCS public web-space is at http://www.cs.uwaterloo.ca/cscf/policies/firewall. However, this information is obsolete as of January 2010. There is an accurate firewall zone quick reference in "Firewall Zones".
Router configurations
All of our vlans are routed one of five HP routers, as shown in the "Location" column of the reference tables below. The ONA links to their configurations are:- mc (ie mc-cs2): https://istns.uwaterloo.ca/ona/viewconfig.php?ipname=mc-cs2
- mc border (ie cs-rt-mc-3015-a) : https://istns.uwaterloo.ca/ona/editdevice.php?ipname=cs-rt-mc-3015-a
- dc (ie dc-cs2): https://istns.uwaterloo.ca/ona/viewconfig.php?ipname=dc-cs2
- dc2303a (ie cs-rt-dc-2303a): https://istns.uwaterloo.ca/ona/viewconfig.php?ipname=cs-rt-dc-2303a
- m3 (ie cs-rt-m3-3101): https://istns.uwaterloo.ca/ona/viewconfig.php?ipname=cs-rt-ms-3101
"Network name" column in the following tables
The network name column is intended to show the router name of the network, not the DNS name. The DNS name for the network is, by convention, assigned to the ".0" address (the address of the network) and can be determined from a standard DNS lookup. Please be sure to use the correct name in the column. Router network names can be determined from the ONA vlan summary for the router on which the network is routed (see the bullet list above).Current VLAN assignments
VLAN 438 is IST wired authentication or 802.1x (building independent)
Date: Thu, 14 Feb 2013 13:54:30 -0500 To: <noc@ist.uwaterloo.ca>, <ist-mgmt@lists.uwaterloo.ca>, <ctsc@lists.uwaterloo.ca>, <cnsc@lists.uwaterloo.ca>, <watcard@uwaterloo.ca>, <ist-css@lists.uwaterloo.ca>, <ist-itms@lists.uwaterloo.ca>, <acohelp@watarts.uwaterloo.ca>, <admin-support@lists.uwaterloo.ca>, <tg-networks@cscf.cs.uwaterloo.ca>, <kevin.kennedy@family-medicine.ca>, <esag@engmail.uwaterloo.ca>, <cmseitz@uwaterloo.ca>, <admin@pdeng.uwaterloo.ca>, <faccus@lists.uwaterloo.ca>, <isthd@ist.uwaterloo.ca>, <acoccia@uwaterloo.ca>, <sbradley@uwaterloo.ca>, <wcarroll@uwaterloo.ca>, <tkanerva@uwaterloo.ca>, <uw.network@rumours.uwaterloo.ca>, <reshelp@uwaterloo.ca>, <cskingle@uwaterloo.ca>, <rddigby@uwaterloo.ca>, <arbhagat@uwaterloo.ca>, <kjjack@uwaterloo.ca> Subject: NETWORK ALERT - 2013-02-19 - Activation of 802.1x in MC From: <daldwinc@uwaterloo.ca> Description: Activation of 802.1x in MC Date: (YYYY-MM-DD) 2013-02-19 Start Time: 7 AM End Time: 8 AM Impact: Resolution: Submitted By: daldwinc@uwaterloo.ca Comment: On the morning of February 19th, a number of network ports in MC will have 802.1X authentication turned on. Ports in public locations may require users to authenticate before the port becomes fully active. Dave Aldwinckle IST Network Services Notice Submitted: Thu Feb 14 13:54:30 EST 2013 Note: If you have any questions or concerns please contact the IST Help Desk at ext: 84357 or helpdesk@uwaterloo.ca Subject: [UW-RT #273071] FW: NETWORK ALERT - 2013-02-19 - Activation of 802.1x in MC From: David Aldwinckle via RT <rt@rt.uwaterloo.ca> To: <isthelpd@uwaterloo.ca> CC: <trevor.grove@uwaterloo.ca> Date: Fri, 15 Feb 2013 11:26:58 -0500 The ports in question are all on either MATH or AS switches. There will be no changes to CS devices at this time. > 1) which ports are affected? Those that have historically had authentication enabled (the old aruba captive portal page), and are now sitting on VLAN 438 with no authentication enabled. > 2) how will users know if they are supposed to authenticate? Users will DHCP a private address and all of their web traffic will be redirected to a web page that explains that they are using a port that requires authentication. > 3) how will they authenticate (if necessary)? The page mentioned above will have instructions on how to configure 802.1x for Windows 7 and Ubuntu 12.04. OS X clearly prompts the user for authentication. The most important things to note are: Authentication Type: PEAP Inner authentication: MSCHAPv2 Certificate: GlobalSign Root CA (built-in to Windows, Ubuntu, OS X) UserID: MUST have the @uwaterloo.ca suffix. Specific user issues can be handled through RT. Please let me know if you have any additional questions. DaveVLAN 439 in the future will be wired authentication or 802.1x (building independent)
Research external network
VLANs in 129.97.0.0/16
129.97.152.0/24 Notes
- On IST RT#350945 and CS ST#94616 129.97.152.0/24 was split into small networks as follows (to allow for CS networks in other buildings)
- 129.97.152.0/25 into /28 (16 IPs) blocks
- 129.97.152.128/25 into /29 (8 IPs) blocks
VLANs in 192.168.0.0/16
VLANs in 172.19.0.0/16
172.19.20.0/24 Notes
- On IST RT#350945 and CS ST#94616 172.19.20.0/24 was created to support CS management and ILOM access in MC
VLANs in 10.0.0.0/8
IST networks of interest
These are of interest, not as vlan information but for the address-range information, for use in setting up local firewalls or access restrictions.| IPv4 range | Description | NATted range | ||
|---|---|---|---|---|
| 172.16.36.0/22 | campus VPN address range | n/a | ||
| 10.20.0.0/14 | campus wireless, divided into: | |||
| 10.22.0.0/15 | main campus, divided into: | |||
| 10.20.0.0/16 | Eduroam | 129.97.124.0/23 | ||
| 10.21.0.0/16 | uw-guest/uw-unsecured | 129.97.124.0/23 | ||
| 10.22.0.0/15 | ResNet, divided into: | |||
| 10.22.0.0/16 | Eduroam | 129.97.124.0/23 | ||
| 10.23.0.0/16 | uw-guest/uw-unsecured | 129.97.124.0/23 | ||
| 172.31.192.0/18 | ResNet wired (ie dorm rooms) address range | 129.97.131.0/24 | ||
| IPv6 range | Description | ||
|---|---|---|---|
| 2620:101:f000:700::/62 | campus wireless, divided into: | ||
| 2620:101:f000:700::/63 | main campus, divided into: | ||
| 2620:101:f000:700::/64 | Eduroam | ||
| 2620:101:f000:701::/64 | uw-guest/uw-unsecured | ||
| 2620:101:f000:702::/63 | ResNet, divided into: | ||
| 2620:101:f000:702::/64 | Eduroam | ||
| 2620:101:f000:703::/64 | uw-guest/uw-unsecured | ||
| 2620:101:f000:3000::/54 | ResNet wired (ie dorm rooms) address range | ||
Historical information (no longer correct but perhaps of historical interest)
Topic revision: r200 - 2024-10-11 - MariHassanzada
Information in this area is meant for use by CSCF staff and is not official documentation, but anybody who is interested is welcome to use it if they find it useful.
- CF Web
- CF Web Home
- Changes
- Index
- Search
- Administration
- Communication
- Hardware
- HelpDeskGuide
- Infrastructure
- InternalProjects
- Linux
- MachineNotes
- Macintosh
- Management
- Networking
- Printing
- Research
- Security
- Software
- Solaris
- StaffStuff
- TaskGroups
- TermGoals
- Teaching
- UserSupport
- Vendors
- Windows
- XHier
- Other Webs
- My links
 |
|
Copyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors. Ideas, requests, problems regarding TWiki? Send feedback