Personal tools

Difference between revisions of "Service:Network"

From Eth0Wiki

Jump to: navigation, search
 
(40 intermediate revisions by 10 users not shown)
Line 1: Line 1:
−
=Network design=
+
{{Service|contact=[[User:R3boot|r3boot]]|email=[mailto:noc@eth-0.nl noc@eth-0.nl]}}
−
There will be a flat network with a single uplink. Nothing is known yet about the availability of public ip space. Depending on the availability of the hardware, the topology will either be ring or star based. In both situations, multiple distribution switches will be available on the fields.
+
 
 +
==r3boot says "hai"==
 +
 
 +
[[Image:Noc engeneer.jpg]]
 +
gay
 +
 
 +
==Network design==
 +
There will be a flat network with a single uplink. Nothing is known yet about the availability of public ip space. Depending on the availability of the hardware, the topology will either be ring or star based. In both situations, multiple distribution switches will be available on the fields. Due to the decision to deliver a stable and robust network, the plans for setting up multiple vlan's to prevent abuse is dropped. Instead, a flat network will be created. There will be a separate vlan for hacking purposes, if you'd like a port in there, contact noc@ when laying a cable to a distribution point. Please note, there is, as of yet, NO WIFI AVAILABLE. However, if someone is willing and able to provide us with an AP, we're reachable via noc@ :)
 +
 
 +
==Topology==
 +
A star topology has been chosen, since this creates a bit more robust field-to-core transport. Yes, a single core is a SPOF, but it's all we have. Below is the intended design:
 +
[[Image:Network layout layer2 v0.1.jpeg]]
 +
 
 +
==Actual Topology==
 +
In the image below, you can see a semi-accurate representation of what the network really looked like:
 +
[[Image:Network_layout_layer2_v0.2-actual.jpeg]]
 +
 
 +
==Available network ranges==
 +
The available network ranges are picked out of the following IPv4/6 ranges:
 +
10.42.122.0/23 (255.255.252.0)
 +
2001:7b8:607:122::/64
 +
 
 +
 
 +
{| class="wikitable" border="1"
 +
|-
 +
! range
 +
! purpose
 +
|-
 +
| 10.42.122.1..100
 +
| Infrastructure devices
 +
|-
 +
| 10.42.122.101..200
 +
| Game servers
 +
|-
 +
| 10.42.122.201..250
 +
| RFC 2322 dhcp
 +
|-
 +
| 10.42.123.0..253
 +
| dynamic dhcp
 +
|}
 +
 
 +
==Network settings==
 +
gateway: 10.42.122.1
 +
dns: 10.42.122.1
 +
 
 +
==Network facilities==
 +
The organisation will provide DHCP/DNS/rtadvd servers, together with rate-limited and firewalled low-bandwith internet. Both IPv4 and IPv6 will be automatically provisioned if you let your machine do autoconfiguration. There will also be multiple file / gaming serves on the network, of which a list is provided below:
 +
 
 +
{| class="wikitable" border="1"
 +
|-
 +
! service
 +
! ipaddr
 +
! provided by
 +
! details
 +
|-
 +
|Gameservers
 +
|n/a
 +
| Slackville
 +
| 3 gameservers with several games
 +
|}
 +
 
 +
FTP Servers
 +
{| class="wikitable" border="1"
 +
|-
 +
! link
 +
! owner
 +
! space (used/available)
 +
! comments
 +
|-
 +
| ftp://eth0:eth0@10.42.123.164/
 +
| Mathijs (mononoke)
 +
| 1180GB/1629GB
 +
| only japanese midget documentaries
 +
|-
 +
| ftp://ftp.eth-0.nl
 +
| r3boot (mononoke)
 +
| 2.5T (2.5T/8.2G)
 +
| NO MILFS ALLOWED
 +
|-
 +
| ftp://10.42.122.221
 +
| VictorB
 +
| genoeg
 +
| WW2 films en documentaries, en andere zooi
 +
|-
 +
| DC++ 10.42.122.210:1090
 +
| Bad_Boeli
 +
| Groeit met meer mensen
 +
| Van alles
 +
|-
 +
| St0r2n ftp://10.42.123.112
 +
| ]V[ (mononoke)
 +
| 2Tb
 +
| also NFS
 +
|-
 +
| Powermac G4 van Johan ftp://10.42.123.242
 +
| Aequitas
 +
| ~2Tb
 +
| mirror van r3boot (FTP-eth0 dir) en was extra zooi van mij, oa Drawn together's)
 +
|-
 +
| ftp://10.42.123.176
 +
| isACK
 +
| 1,3 TB
 +
| ff laptoppie ingericht met een beetje data
 +
|}
  
 
==Getting uplink==
 
==Getting uplink==
 
When you've setup all your gear, lay a cable to one of the distribution points. Noc engineers will periodically scan all the distribution points to connect all the cable's there. Under no circumstances it's permitted that you connect your own cable yourself!
 
When you've setup all your gear, lay a cable to one of the distribution points. Noc engineers will periodically scan all the distribution points to connect all the cable's there. Under no circumstances it's permitted that you connect your own cable yourself!
−
 
−
=IDPS monitoring=
 
−
To prevent abuse of the network and it's uplink, several IDS sensors will be placed on the network, together with IPS software. These sensors will detect and respond to the following scenario's:
 
−
 
−
==Malware distribution==
 
−
If your system is malware infected or is active part of a botnet, your switchport will be configured to be part of the quarantine network. In this network, the only connectivity you'll have is with the FTP server provided with the organisation. You will notice you are in this vlan by checking your webbrowser. If it displays the quarantine page, follow the onscreen instructions or contact noc@
 
  
 
==Hacking==
 
==Hacking==
−
No hacking of other systems is allowed on this event. If you're caught you'll be subjected to the dutch laws and we'll be glad to hand you over to local authorities. If you're still unwise enough to hack other systems, please be aware that we have prepared a special vlan, just for you kiddies :)
+
No hacking of other systems is allowed on this event. If you're caught you'll be subjected to the dutch laws and we'll be glad to hand you over to local authorities.
−
 
 
  
 +
* [[User:Mathijs|Mathijs]]: Perhaps an idea to organise a hacking contest on this special vlan? (See special hacking vlan, let it organise itself :)
  
 
==Network hardware==
 
==Network hardware==
 
Hardware to be used in the NOC, field distribution and end users connectivity.
 
Hardware to be used in the NOC, field distribution and end users connectivity.
−
*3x Extreme Summit 48 (48x 10/100mbit rj45, 2x Gbic + 2x failover Gbic)
+
*5x Extreme Summit 48 (48x 10/100mbit rj45, 2x Gbic + 2x failover Gbic)
 
*30x Nortel Baystack 450 (24x 10/100mbit rj45, 1 MDA slot, 1 Cascade slot)
 
*30x Nortel Baystack 450 (24x 10/100mbit rj45, 1 MDA slot, 1 Cascade slot)
 
*24x 1000sx Gbic
 
*24x 1000sx Gbic
Line 25: Line 122:
 
**ws-X6K-SUP2-2GE  (Supervisor 2x Gbic)
 
**ws-X6K-SUP2-2GE  (Supervisor 2x Gbic)
 
**WS-X6348= (48x 10/100mbit rj45)
 
**WS-X6348= (48x 10/100mbit rj45)
 +
 +
==Wireless==
 +
Wireless is available under the "eth0" ESSID, the wireless network is bridged to the campsite LAN, so you can follow the normal connection procedure.
  
 
[[ Category:Service ]]
 
[[ Category:Service ]]
 +
[[ Category:Network ]]

Latest revision as of 20:55, 14 July 2008

About this service
Contact: r3boot
E-mail: noc@eth-0.nl

r3boot says "hai"

Noc engeneer.jpg gay

Network design

There will be a flat network with a single uplink. Nothing is known yet about the availability of public ip space. Depending on the availability of the hardware, the topology will either be ring or star based. In both situations, multiple distribution switches will be available on the fields. Due to the decision to deliver a stable and robust network, the plans for setting up multiple vlan's to prevent abuse is dropped. Instead, a flat network will be created. There will be a separate vlan for hacking purposes, if you'd like a port in there, contact noc@ when laying a cable to a distribution point. Please note, there is, as of yet, NO WIFI AVAILABLE. However, if someone is willing and able to provide us with an AP, we're reachable via noc@ :)

Topology

A star topology has been chosen, since this creates a bit more robust field-to-core transport. Yes, a single core is a SPOF, but it's all we have. Below is the intended design: Network layout layer2 v0.1.jpeg

Actual Topology

In the image below, you can see a semi-accurate representation of what the network really looked like: Network layout layer2 v0.2-actual.jpeg

Available network ranges

The available network ranges are picked out of the following IPv4/6 ranges: 

10.42.122.0/23 (255.255.252.0)
2001:7b8:607:122::/64


range purpose
10.42.122.1..100 Infrastructure devices
10.42.122.101..200 Game servers
10.42.122.201..250 RFC 2322 dhcp
10.42.123.0..253 dynamic dhcp

Network settings

gateway: 10.42.122.1 dns: 10.42.122.1

Network facilities

The organisation will provide DHCP/DNS/rtadvd servers, together with rate-limited and firewalled low-bandwith internet. Both IPv4 and IPv6 will be automatically provisioned if you let your machine do autoconfiguration. There will also be multiple file / gaming serves on the network, of which a list is provided below:

service ipaddr provided by details
Gameservers n/a Slackville 3 gameservers with several games

FTP Servers

link owner space (used/available) comments
ftp://eth0:eth0@10.42.123.164/ Mathijs (mononoke) 1180GB/1629GB only japanese midget documentaries
ftp://ftp.eth-0.nl r3boot (mononoke) 2.5T (2.5T/8.2G) NO MILFS ALLOWED
ftp://10.42.122.221 VictorB genoeg WW2 films en documentaries, en andere zooi
DC++ 10.42.122.210:1090 Bad_Boeli Groeit met meer mensen Van alles
St0r2n ftp://10.42.123.112 ]V[ (mononoke) 2Tb also NFS
Powermac G4 van Johan ftp://10.42.123.242 Aequitas ~2Tb mirror van r3boot (FTP-eth0 dir) en was extra zooi van mij, oa Drawn together's)
ftp://10.42.123.176 isACK 1,3 TB ff laptoppie ingericht met een beetje data

Getting uplink

When you've setup all your gear, lay a cable to one of the distribution points. Noc engineers will periodically scan all the distribution points to connect all the cable's there. Under no circumstances it's permitted that you connect your own cable yourself!

Hacking

No hacking of other systems is allowed on this event. If you're caught you'll be subjected to the dutch laws and we'll be glad to hand you over to local authorities.

  • Mathijs: Perhaps an idea to organise a hacking contest on this special vlan? (See special hacking vlan, let it organise itself :)

Network hardware

Hardware to be used in the NOC, field distribution and end users connectivity.

  • 5x Extreme Summit 48 (48x 10/100mbit rj45, 2x Gbic + 2x failover Gbic)
  • 30x Nortel Baystack 450 (24x 10/100mbit rj45, 1 MDA slot, 1 Cascade slot)
  • 24x 1000sx Gbic
  • Cisco 6509 Chassis / Redundant PSU
    • WS-X6416-GBIC (16x Gbic)
    • ws-X6K-SUP2-2GE (Supervisor 2x Gbic)
    • WS-X6348= (48x 10/100mbit rj45)

Wireless

Wireless is available under the "eth0" ESSID, the wireless network is bridged to the campsite LAN, so you can follow the normal connection procedure.

Retrieved from "https://wiki.eth0.nl/index.php?title=Service:Network&oldid=1384"