CSCF Networking Twiki

This is to augment CSCF WWW networking information which is the authoritative site until merged with this site.

There are also public facing Network planning guidelines located at: http://www.cs.uwaterloo.ca/cscf/infrastructure/network/

CSCF networking philosophy and schema

A description of our underlying network design principles, the various classes of networks allocated to us, and how we intend to use them.

Network hardware

• See http://www.cs.uwaterloo.ca/cscf/policies/standard-platforms/architectures#Network

Host naming and DNS updates

• DNS server quick reference:
  • For systems that use CS directory services, you need to be able to access the CS SRV records so:
    • in DC use: 172.19.32.5, 172.19.32.6 and 172.19.47.6
    • in MC use: 172.19.47.5, 172.19.47.6 and 172.19.32.6
  • If the client OS doesn't need CS directory services, or if the client supports more than three severs, add the IST servers 129.97.2.1 and 129.97.2.2. Note that previous IST DNS adddresses (128.100, 128.10, 129.10 etc) are all deprecated and should not be used.
• There is public DNS documentation at http://www.cs.uwaterloo.ca/cscf/software/dns/ to which users can be referred.
• See https://www.cs.uwaterloo.ca/cscf/internal/edocs/Documentation/DNS-implementation-guide/ for details of the architecture of our DNS service.
• HostNameConventions - how to name machines and fill in the DNS information with IST's DNS utility

External Domain Registration and Management

• ExternalDomainRegistration - how to setup an external domain that is managed by CS

DHCP

• DHCPInCS - how DHCP is set up, quirks, related documentation
• DhcpDebug - DHCP Debugging tools
• DHCPHelperTool

Network Security

• Summary of the network ACLs used for CS networks
• Other security information, including IST access restrictions and wireless information.
• Port security for HP: how we're using the MAC address port security features of HP switches to prevent ethernet port hijacking in public labs.

Training and Tutorials

From time-to-time, at CSCF staff meetings and elsewhere, the Networking group presents briefings and information updates to CSCF staff. See "Networking updates" in http://www.cs.uwaterloo.ca/cscf/internal/presentations

• Network Tutorials

Troubleshooting

VLAN and subnet information

• Current VLAN and IP address-space information

Miscellaneous Notes

• Rogers backup connection information
• ICR PresentationRooms - how to use authenticated network connections in ICR presentation rooms
• DRH's assortment of "how to" notes.

Historical information, now obsolete

Firewall information (obsolete as of December 2013)

• Current information
• Firewall zone reference
• Legacy information of historical interest:
  • generic information: http://www.cs.uwaterloo.ca/cscf/internal/networks/ns_getting_started.html
  • policy information (policy principles are correct but the detailed enumeration of current networks is no longer valid): http://www.cs.uwaterloo.ca/cscf/policies/firewall.shtml
  • really obsolete policy information: https://www.cs.uwaterloo.ca/twiki/view/CF/CSCFNetFirewallPolicies
  • legacy routing information: http://www.cs.uwaterloo.ca/cscf/internal/networks/ns_new_subnet.shtml