Difference between revisions of "Subnets and VLANS"

From DCWiki
Jump to: navigation, search
(Update from master)
Line 10: Line 10:
 
!DHCP Server
 
!DHCP Server
 
|-
 
|-
−
|10||Managed Wireless AP's||10.40.1.0/24||This is where my thin AP's go. Routed by the controller, there is an extra interface on the ASH 3560 with helper addresses pointed at [[Bellona]] & [[Victoria]]||172.20.163.2, 10.40.1.1||H3C WX5004||Cole B-18 rack above 6509||[[Bellona]] & [[Victoria]]
+
|8||Aerohive_Wireless||10.40.8.0/22||Aerohive AP's||172.20.160.1,10.40.8.1||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 
|-
 
|-
−
|20||Everything else||192.101.188.0/24, 64.254.160.0/20, 172.20.0.0/16||This is all of our globally-valid IP's plus legacy internal stuff from before we had VLANs. We are trying to get rid of all the desktop users who have 172.20.x.x on their workstations. Printers still live here, at 172.20.6.x. All of this stuff is routed in the core 6509, as opposed to at our layer 3 switches.||172.20.160.1, 172.20.0.254, 172.20.64.254, 172.20.160.254, 192.33.12.254, 192.101.188.254||6509||Cole B-18|| [[Bellona]] & [[Victoria]]
+
|10||H3C_Wireless||10.40.1.0/24||H3C AP's||172.20.160.1, 10.40.1.254||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 +
|-
 +
|12||Ubiquiti_Wireless||10.40.12.0/22||Ubiquiti Unifi AP's||172.20.160.1,10.40.12.1||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 +
|-
 +
|16||Aruba_Wireless||10.40.16.0/22||Aruba AP's, if they stick around - just eval for now||172.20.160.1,10.40.16.1||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 +
|-
 +
|20||Everything else||192.101.188.0/24, 64.254.160.0/20, 172.20.0.0/16||This is most of our globally-valid IP's plus legacy internal stuff from before we had VLANs. We are trying to get rid of all the desktop users who have 172.20.x.x on their workstations. Printers still live here, at 172.20.6.x. All of this stuff is routed in the core 6509, as opposed to at our layer 3 switches.||172.20.160.1, 172.20.0.254, 172.20.64.254, 172.20.160.254, 192.101.188.254||6509||Cole B-18|| [[Bellona]] & [[Victoria]]
 
|-
 
|-
 
|n/a||n/a||64.254.160.0/21||UMass ASA Translation addresses. 64.254.163.204 - 254 are reserved for static translations. PAT (overflow addresses are 64.254.163.201 and 64.254.163.202.||n/a||n/a||n/a||n/a
 
|n/a||n/a||64.254.160.0/21||UMass ASA Translation addresses. 64.254.163.204 - 254 are reserved for static translations. PAT (overflow addresses are 64.254.163.201 and 64.254.163.202.||n/a||n/a||n/a||n/a
 
|-
 
|-
−
|n/a||n/a||66.251.24.0/22||Paetec ASA Translation addresses block 1. Actually starts at 66.251.24.10 - below that is management addresses, etc. Pat (overflow) address is 66.251.24.9||n/a||n/a||n/a||n/a
+
|n/a||n/a||66.251.24.0/22||Paetec ASA Translation addresses block 1. Actually starts at 66.251.24.10 - below that is management addresses, etc. PAT (overflow) address is 66.251.24.9||n/a||n/a||n/a||n/a
 
|-
 
|-
 
|n/a||n/a||74.88.88.0/22||Paetec ASA Translation addresses block 2. PAT (overflow) address is 74.88.88.1||n/a||n/a||n/a||n/a
 
|n/a||n/a||74.88.88.0/22||Paetec ASA Translation addresses block 2. PAT (overflow) address is 74.88.88.1||n/a||n/a||n/a||n/a
Line 31: Line 37:
 
|-
 
|-
 
|44||VCL Infrastructure||192.168.100.0/24||VCL Infrastructure VLAN shared with Amherst College via switch at 148.85.178.115|| || || ||
 
|44||VCL Infrastructure||192.168.100.0/24||VCL Infrastructure VLAN shared with Amherst College via switch at 148.85.178.115|| || || ||
 +
|-
 +
|45||CEPH OSD Fabric||10.45.0.0/16||[[Ceph]]||None|| || ||
 
|-
 
|-
 
|100||Networking||172.25.160.0/21||"networking" vlan. I think all this has in it right now is netreg and netvmhosts... not really sure what else it was intended to be for.||172.20.160.1, 172.25.160.1||6509||Cole B-18||none
 
|100||Networking||172.25.160.0/21||"networking" vlan. I think all this has in it right now is netreg and netvmhosts... not really sure what else it was intended to be for.||172.20.160.1, 172.25.160.1||6509||Cole B-18||none
Line 60: Line 68:
 
|115||VPN||172.25.66.0/24||Addresses assigned to people using the VPN||172.20.162.5,172.25.66.1||3560||ASH 2nd Floor Mechanical Room||charon (VPN concentrator)
 
|115||VPN||172.25.66.0/24||Addresses assigned to people using the VPN||172.20.162.5,172.25.66.1||3560||ASH 2nd Floor Mechanical Room||charon (VPN concentrator)
 
|-
 
|-
−
|116||OneCard||172.25.67.0/24||iStars and whatnot||172.20.160.1,172.25.67.1||6509||Cole B-18||[[Bellona]] & [[Victoria]] where applicable - mostly static
+
|116||OneCard||172.25.67.0/24||iStars, alarms and whatnot - Adam's stuff||172.20.160.1,172.25.67.1||6509||Cole B-18||[[Bellona]] & [[Victoria]] where applicable - mostly static
 
|-
 
|-
 
|117||Vendors||172.25.68.0/22||Third-party vendors||172.20.160.1,172.25.68.1||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 
|117||Vendors||172.25.68.0/22||Third-party vendors||172.20.160.1,172.25.68.1||6509||Cole B-18||[[Bellona]] & [[Victoria]]
 
|-
 
|-
−
|118||HVAC||172.25.72.0/22||HVAC: 72.x is AutoMatrix, 73.x is Automated Logic||172.20.160.1,172.25.72.1||6509||Cole B-18||none - all static so far
+
|[[VLAN118 | 118]]||HVAC||172.25.72.0/22||HVAC: 72.x is AutoMatrix ( [[vmhost29]] ), 73.x is Automated Logic/Yankee Tech ( [[WebCtrl]] )||172.20.160.1,172.25.72.1||6509||Cole B-18||none - all static so far
 
|-
 
|-
 
|119||Bon_Appetit_POS||n/a||Private VLAN for Bon Appetit's private PCI-compliant Point of Sale network with its own router||n/a||theirs||TBD||theirs
 
|119||Bon_Appetit_POS||n/a||Private VLAN for Bon Appetit's private PCI-compliant Point of Sale network with its own router||n/a||theirs||TBD||theirs
Line 85: Line 93:
 
|-
 
|-
 
|133||Blair_Hall||172.25.212.0/22||Blair, Red Barn, Admissions, HR, etc||172.20.162.18, 172.25.212.1||WS-C3560-24TS||Blair Hall Server Room||[[Bellona]] & [[Victoria]]
 
|133||Blair_Hall||172.25.212.0/22||Blair, Red Barn, Admissions, HR, etc||172.20.162.18, 172.25.212.1||WS-C3560-24TS||Blair Hall Server Room||[[Bellona]] & [[Victoria]]
 +
|-
 +
|134||Wallace||172.30.80.0/20, 10.30.80.0/20||netreg'ed wireless||Merrill - 172.20.160.119, 172.30.80.1||3550||Merrill G-6||netreg
 
|-
 
|-
 
|134||Wallace||172.26.0.0/20, 10.26.0.0/20||Facstaff Wireless (supercedes old wallace that was registered on minos)||172.20.160.47,172.26.0.1,10.26.0.1||3560E||Liebling||pasiphae
 
|134||Wallace||172.26.0.0/20, 10.26.0.0/20||Facstaff Wireless (supercedes old wallace that was registered on minos)||172.20.160.47,172.26.0.1,10.26.0.1||3560E||Liebling||pasiphae
Line 92: Line 102:
 
|136||PS_Alarms||n/a||Alarms over to Mt. Holyoke||n/a||n/a||n/a||n/a
 
|136||PS_Alarms||n/a||Alarms over to Mt. Holyoke||n/a||n/a||n/a||n/a
 
|-
 
|-
−
|174||VCL_External||64.254.174.0/24||External VCL VLAN||172.20.160.1, 64.254.174.254||6509||Cole B-18||[[Eileithyia]]
+
|174||VCL_External||64.254.174.0/24||External VCL VLAN - there's an internal one too... for what?||172.20.160.1, 64.254.174.254||6509||Cole B-18||The master VCL Machine or something - Chris?
 
|-
 
|-
−
|175||Student_Servers||64.254.175.0/24||Student Servers||172.20.160.1, 64.254.175.254||6509||Cole B-18|| none
+
|175||Student_Servers||64.254.175.0/24||Student Servers||172.20.160.1, 64.254.175.254||6509||Cole B-18||[[Eileithyia]]
 
|-
 
|-
 
|204||Gromit||172.31.128.0/21, 10.31.128.0/21||wireless subnet - academic spaces, any Hampshire community member has access. The 10.0's are unregistered users||172.20.160.47, 172.31.128.1||3560E||Liebling||minos
 
|204||Gromit||172.31.128.0/21, 10.31.128.0/21||wireless subnet - academic spaces, any Hampshire community member has access. The 10.0's are unregistered users||172.20.160.47, 172.31.128.1||3560E||Liebling||minos

Revision as of 08:26, 17 April 2014

Our network is split up into a number of VLANs, which roughly correspond to subnets, though this is not entirely a one-to-one relationship, as VLAN 20, the "old" VLAN, has a large number of subnets in it - basically anything we haven't moved over to the new model yet. See Theory of Operation for more info on the larger plan here. This page aims to document what VLANs we have, what subnets are in them, where they live and what their function is.

VLAN ID VLAN name subnet(s) Comments/Description Router device addresses: management, gateway Router Device Type Router Physical Location DHCP Server
8 Aerohive_Wireless 10.40.8.0/22 Aerohive AP's 172.20.160.1,10.40.8.1 6509 Cole B-18 Bellona & Victoria
10 H3C_Wireless 10.40.1.0/24 H3C AP's 172.20.160.1, 10.40.1.254 6509 Cole B-18 Bellona & Victoria
12 Ubiquiti_Wireless 10.40.12.0/22 Ubiquiti Unifi AP's 172.20.160.1,10.40.12.1 6509 Cole B-18 Bellona & Victoria
16 Aruba_Wireless 10.40.16.0/22 Aruba AP's, if they stick around - just eval for now 172.20.160.1,10.40.16.1 6509 Cole B-18 Bellona & Victoria
20 Everything else 192.101.188.0/24, 64.254.160.0/20, 172.20.0.0/16 This is most of our globally-valid IP's plus legacy internal stuff from before we had VLANs. We are trying to get rid of all the desktop users who have 172.20.x.x on their workstations. Printers still live here, at 172.20.6.x. All of this stuff is routed in the core 6509, as opposed to at our layer 3 switches. 172.20.160.1, 172.20.0.254, 172.20.64.254, 172.20.160.254, 192.101.188.254 6509 Cole B-18 Bellona & Victoria
n/a n/a 64.254.160.0/21 UMass ASA Translation addresses. 64.254.163.204 - 254 are reserved for static translations. PAT (overflow addresses are 64.254.163.201 and 64.254.163.202. n/a n/a n/a n/a
n/a n/a 66.251.24.0/22 Paetec ASA Translation addresses block 1. Actually starts at 66.251.24.10 - below that is management addresses, etc. PAT (overflow) address is 66.251.24.9 n/a n/a n/a n/a
n/a n/a 74.88.88.0/22 Paetec ASA Translation addresses block 2. PAT (overflow) address is 74.88.88.1 n/a n/a n/a n/a
33 IT Servers 192.33.12.0/24 IT servers 172.20.160.1, 192.33.12.254 6509 Cole B-18 none
40 Infrastructure 10.40.0.0/24 VM Hosts, Network Storage, UPS, etc. 172.20.160.1, 10.40.0.254 6509 Cole B-18 none
41 SAN Fabric 10.41.0.0/16 VMHost to SAN connectivity None - Cole B-18, LO G-8 none
42 Datatel Idiocy 10.42.0.0/16 Datatel "Secure" FTP Transport None -
43 VCL Management 10.43.0.0/16 Virtual Computing Lab Backend Network None - Eileithyia
44 VCL Infrastructure 192.168.100.0/24 VCL Infrastructure VLAN shared with Amherst College via switch at 148.85.178.115
45 CEPH OSD Fabric 10.45.0.0/16 Ceph None
100 Networking 172.25.160.0/21 "networking" vlan. I think all this has in it right now is netreg and netvmhosts... not really sure what else it was intended to be for. 172.20.160.1, 172.25.160.1 6509 Cole B-18 none
102 Public_Wireless 172.30.64.0/20 hampguest - through UMass, firewall rules in porter on outgoing to limit ports available 172.20.160.1, 172.30.64.1 6509 Cole B-18 Bellona & Victoria
104 Student_VPN 172.30.96.0/21 Student VPN Addresses 172.20.160.1,172.30.96.1 6509 Cole B-18 hecate (student VPN concentrator)
105 Dakin 172.30.136.0/21, 10.30.136.0/21 wired subnet - student dorms. The 10.0's are unregistered users, same below. 172.20.160.132, 172.30.136.1 3550 Dakin G-21 minos
106 Merrill 172.30.144.0/21, 10.30.144.0/21 see above 172.20.160.119, 172.30.144.1 3550 Merrill G-6 minos
107 Prescott 172.30.152.0/21, 10.30.152.0/21 see above 172.20.161.50, 172.30.152.1 3550 mech room in front of 84 minos
108 Greenwich 172.30.160.0/21, 10.30.160.0/21 see above 172.20.161.20, 172.30.160.1 3550 Basement of Donut 3 minos
109 Enfield 172.30.168.0/21, 10.30.168.0/21 see above 172.20.161.3, 172.30.168.1 3550 HVAC room near tennis courts, next to the laundry room, by the Women's Center minos
110 Library 172.25.208.0/22 Library wired facstaff 172.20.162.6, 172.25.162.1 3560 Closet in Ground floor stairwell Bellona & Victoria
111 Cole 172.25.204.0/22 Cole Science Center wired facstaff 172.20.162.15, 172.25.204.1 3560-24TS Room with sliding door behind Jeff Schmittlein's Office Bellona & Victoria
112 FPH 172.25.200.0/22 Franklin Patterson Hall wired facstaff 172.20.162.51, 172.25.200.1 WS-C3560-24TS Ground Floor closet immediately on right inside office inside back door facing the circle Bellona & Victoria
113 Public Safety 172.25.64.0/24 Public Safety officer computers, etc 172.20.162.6,172.25.64.1 3560 Closet in Ground floor stairwell Bellona & Victoria
114 Misc_Facstaff 172.25.65.0/24 Merrill, RCC, and Dakin (and possibly others) Faculty and Staff 172.20.160.1,172.25.65.1 6509 Cole B-18 Bellona & Victoria
115 VPN 172.25.66.0/24 Addresses assigned to people using the VPN 172.20.162.5,172.25.66.1 3560 ASH 2nd Floor Mechanical Room charon (VPN concentrator)
116 OneCard 172.25.67.0/24 iStars, alarms and whatnot - Adam's stuff 172.20.160.1,172.25.67.1 6509 Cole B-18 Bellona & Victoria where applicable - mostly static
117 Vendors 172.25.68.0/22 Third-party vendors 172.20.160.1,172.25.68.1 6509 Cole B-18 Bellona & Victoria
118 HVAC 172.25.72.0/22 HVAC: 72.x is AutoMatrix ( vmhost29 ), 73.x is Automated Logic/Yankee Tech ( WebCtrl ) 172.20.160.1,172.25.72.1 6509 Cole B-18 none - all static so far
119 Bon_Appetit_POS n/a Private VLAN for Bon Appetit's private PCI-compliant Point of Sale network with its own router n/a theirs TBD theirs
120 Labs 172.30.32.0/22 Public labs 172.20.162.6, 172.30.32.1 3560 Library Switch - closet in Ground floor stairwell Bellona & Victoria
121 Arts_Village 172.25.192.0/22 Arts Village FacStaff wired 172.20.162.6, 172.25.192.1 WS-C3560G-24TS-E ASH 2nd Floor Mechanical Room Bellona & Victoria
122 ASH_Media 172.25.136.0/22 ASH gigabit media VLAN 172.20.162.6, 172.25.136.1 WS-C3560G-24TS-E ASH 2nd Floor Mechanical Room Bellona & Victoria
123 Lib_Media_Basement 172.25.140.0/22 Library Media Basement (and maybe Liebling Media at some point) VLAN 172.20.160.1, 172.25.140.1 6509 Cole B-18 Bellona & Victoria
124 EDH 172.25.220.0/22 EDH and Writing Center 172.20.160.1, 172.25.220.1 6509 Cole B-18 Bellona & Victoria
130 Voice 172.25.32.0/19 Mitel VOIP VLAN 172.20.160.1, 172.25.32.1 6509 Core - Cole B-18 Mitel 3300
131 Outlying 172.25.216.0/22 Physical Plant, maybe Eric Carle Someday, Children's Center, Multisport, etc 172.20.161.50, 172.25.216.1 WS-C3550-12G mech room in front of mod 84 Bellona & Victoria
132 Test_VLAN 172.30.240.0/21 Josiah's sandbox VLAN 172.20.162.5, 172.30.240.1 WS-C3560G-24TS-E ASH 2nd Floor Mechanical room netreg or Bellona & Victoria, depending on current router helper addresses
133 Blair_Hall 172.25.212.0/22 Blair, Red Barn, Admissions, HR, etc 172.20.162.18, 172.25.212.1 WS-C3560-24TS Blair Hall Server Room Bellona & Victoria
134 Wallace 172.30.80.0/20, 10.30.80.0/20 netreg'ed wireless Merrill - 172.20.160.119, 172.30.80.1 3550 Merrill G-6 netreg
134 Wallace 172.26.0.0/20, 10.26.0.0/20 Facstaff Wireless (supercedes old wallace that was registered on minos) 172.20.160.47,172.26.0.1,10.26.0.1 3560E Liebling pasiphae
135 PS_Radio n/a Radios over to Mt. Holyoke - not routed here n/a n/a n/a n/a
136 PS_Alarms n/a Alarms over to Mt. Holyoke n/a n/a n/a n/a
174 VCL_External 64.254.174.0/24 External VCL VLAN - there's an internal one too... for what? 172.20.160.1, 64.254.174.254 6509 Cole B-18 The master VCL Machine or something - Chris?
175 Student_Servers 64.254.175.0/24 Student Servers 172.20.160.1, 64.254.175.254 6509 Cole B-18 Eileithyia
204 Gromit 172.31.128.0/21, 10.31.128.0/21 wireless subnet - academic spaces, any Hampshire community member has access. The 10.0's are unregistered users 172.20.160.47, 172.31.128.1 3560E Liebling minos
205 Dakin_Wireless 172.31.136.0/21, 10.31.136.0/21 wireless subnet - student dorms. The 10.0's are unregistered users, same below. 172.20.160.132, 172.31.136.1 3550 Dakin G-21 minos
206 Merrill Wireless 172.31.144.0/21, 10.31.144.0/21 see above 172.20.160.119, 172.31.144.1 3550 Merrill G-6 minos
207 Prescott Wireless 172.31.152.0/21, 10.31.152.0/21 see above 172.20.161.50, 172.31.152.1 3550 mech room in front of 84 minos
208 Greenwich Wireless 172.31.160.0/21, 10.31.160.0/21 see above 172.20.161.20, 172.31.160.1 3550 Basement of Donut 3 minos
209 Enfield Wireless 172.31.168.0/21, 10.31.168.0/21 see above 172.20.161.3, 172.31.168.1 3550 HVAC room near tennis courts, next to the laundry room, by the Women's Center minos
Retrieved from "https://dcwiki.hampshire.edu/wiki/index.php?title=Subnets_and_VLANS&oldid=201"