Jump to content

Network

From /dev/hack

Monitoring

A POC deployment of LibreNMS is up at this URL. https://devhack-nms.owo.me

This is currently deployed in a colocation facility at KOMO Plaza. There will be plans to eventually deploy this on prem.

Wifi

  • devhack_guest : public (internet-only)
  • InternetOfShit : for all the IOT / misc devices
  • wlan0 : internal wifi for members only
  • cyberspace : Internet-only wifi for event on 2024-11-17

For passwords for wifi networks, contact NetworkingTeam (avery & eliri)

IPv6 Service

AS21903 provides the following IPv6 announced from a machine in KOMO Plaza:

  • 2602:fa6d:300::/48

AS21903 (Arnhem Networks LLC) is operated by Alyx, and NOC contact information can be found at ANL-357.

IPv6 service is provided on a best-effort basis.

It's routed over the wg4 Wireguard interface on the Edgerouter.

All interfaces have their own /64 address that matches the IPv4 network (if the v4 network is 192.168.10.0/24, the corresponding v6 network is 2602:fa6d:300:10::1/64).

The only exception to this rule is the GUEST network which doesn't have IPv6 configured at all. This is intentional, do not change it.


Disabling IPv6

To disable ipv6 per-machine (for various reasons, for example api.telegram.org bans our ipv6 address), run:

nmcli con m «connection name» ipv6.method disabled

And then restart the connection.


VLANs

These VLANs are configured on both the Router and the Switch. The IPs below are the ones configured on the Router.

  • Trunk - All VLANs
  • 10 - CORE (10.213.8.1/21)
  • 20 - MGMT / INT (10.213.0.1/24)
  • 30 - PXE / MAAS (10.213.16.1/24)
  • 99 - ISP / WAN Atlas Networks (66.170.190.194/29)

These VLANs are configured on the Router, but aren't setup anywhere else. They're vestigial from the previous version of the network that used the Brocade ICX 6610 as the Switch and the 192.168.0.0/16 address range. They're free to use for other projects. Please move them to the above list when they're actually provisioned.

  • 40 - VOIP (192.168.40.1/24)
  • 50 - IOT (192.168.50.1/24)
  • 70 - FLAN (10.213.28.1/22)

Keystone colors

  • Trunk: YELLOW
  • Core: RED
  • MGMT / INT: BLACK
  • READ DOCS: BLUE

Port Configurations

Rack2 Ciscos
serverroom-sw(1)
Port Name Port Type Port VLAN Native VLAN Device
TenGigabitEthernet1/0/1 ACCESS MGMT (20) C240 M5 (smallpox)
TenGigabitEthernet1/0/2 ACCESS MGMT (20) C240 M5 (rubella)
TenGigabitEthernet1/0/3 ACCESS MGMT (20) C240 M5 (measels)
TenGigabitEthernet1/0/4 ACCESS MGMT (20)
TenGigabitEthernet1/0/5 ACCESS MGMT (20)
TenGigabitEthernet1/0/6 ACCESS MGMT (20)
TenGigabitEthernet1/0/7 ACCESS MGMT (20)
TenGigabitEthernet1/0/8 ACCESS MGMT (20)
TenGigabitEthernet1/0/9 Unconfigured
TenGigabitEthernet1/0/10 Unconfigured
TenGigabitEthernet1/0/11 Unconfigured
TenGigabitEthernet1/0/12 Unconfigured
TenGigabitEthernet1/0/13 Unconfigured
TenGigabitEthernet1/0/14 Unconfigured
TenGigabitEthernet1/0/15 Unconfigured
TenGigabitEthernet1/0/16 Unconfigured
TenGigabitEthernet1/0/17 TRUNK ALL
TenGigabitEthernet1/0/18 TRUNK ALL
TenGigabitEthernet1/0/19 TRUNK ALL
TenGigabitEthernet1/0/20 TRUNK ALL
TenGigabitEthernet1/0/21 TRUNK ALL
TenGigabitEthernet1/0/22 TRUNK ALL comms room
TenGigabitEthernet1/0/23 TRUNK ALL rack1 netgear
TenGigabitEthernet1/0/24 ISP 99 Atlas Networks
FortyGigabitEthernet1/1/1 TRUNK ALL
FortyGigabitEthernet1/1/2 TRUNK ALL 20
serverroom-sw(2)
Port Name Port Type Port VLAN Native VLAN
GigabitEthernet2/0/1 ACCESS MGMT (20) KVM switch
GigabitEthernet2/0/2 ACCESS MGMT (20) shelly
GigabitEthernet2/0/3 ACCESS MGMT (20) devhacked (port1)
GigabitEthernet2/0/4 ACCESS MGMT (20) some lenovo desktop
GigabitEthernet2/0/5 ACCESS MGMT (20)
GigabitEthernet2/0/6 ACCESS MGMT (20)
GigabitEthernet2/0/7 ACCESS MGMT (20)
GigabitEthernet2/0/8 ACCESS MGMT (20)
GigabitEthernet2/0/9 Unconfigured
GigabitEthernet2/0/10 Unconfigured
GigabitEthernet2/0/11 Unconfigured
GigabitEthernet2/0/12 Unconfigured
GigabitEthernet2/0/13 Unconfigured
GigabitEthernet2/0/14 Unconfigured
GigabitEthernet2/0/15 Unconfigured
GigabitEthernet2/0/16 Unconfigured
GigabitEthernet2/0/17 Unconfigured
GigabitEthernet2/0/18 Unconfigured
GigabitEthernet2/0/19 Unconfigured
GigabitEthernet2/0/20 Unconfigured
GigabitEthernet2/0/21 Unconfigured
GigabitEthernet2/0/22 Unconfigured
GigabitEthernet2/0/23 Unconfigured
GigabitEthernet2/0/24 Unconfigured
FortyGigabitEthernet2/1/1 TRUNK ALL rack1 juniper
FortyGigabitEthernet2/1/2 TRUNK ALL

Bauds

- Server Room Cisco: 115200 - Everything else: 9600