Network: Difference between revisions
→Printers: rosey |
→Plotter: correction |
||
| Line 812: | Line 812: | ||
=== Plotter === | === Plotter === | ||
The HP DesignJet 600 plotter is called [[Plotter]]. It is connected to the | The HP DesignJet 600 plotter is called [[Plotter]]. It is connected to the network at 10.0.0.97. Network operation is unconfirmed. | ||
=Websites= | =Websites= | ||
Revision as of 13:48, 12 March 2019
This page gives the details of the space's network and connected devices. The Network and Servers group maintain and look after the network.
Network Layout
This page will show the network topology & proposals for network expansion / modification.
External IP address 92.27.40.214.
External domain address lspace.nottinghack.org.uk (DNS record looked after by 'RepRap' Matt)
Static & Reserved IP's
There are a few VLANs:
| VLAN | Network | Description |
|---|---|---|
| 1 | 192.168.1.0/24 | Default (management network) |
| 2 | 10.0.0.0/24 | Main Hackspace network |
| 3 | 192.168.0.0/24 | Instrumentation projects |
| 4 | - | Able / ADSL Modem (PPPoE) |
| 5 | 192.168.0.0/24 | Instrumentation test (Rommie) |
| 6 | 192.168.6.0/24 | Unimatrix<->Locutus direct network |
| 7 | 192.168.7.0/24 | Queen<->Unimatrix direct network |
| 8 | 192.168.8.0/24 | Queen<->Locutus direct network |
The following ranges are reserved for there given purpose:
| Start | End | Purpose |
|---|---|---|
| 10.0.0.1 | 10.0.0.1 | kryten The Main Router |
| 10.0.0.2 | 10.0.0.79 | Static things |
| 10.0.0.80 | 10.0.0.89 | openVPN DHCP pool |
| 10.0.0.90 | 10.0.0.99 | Static Printers |
| 10.0.0.100 | 10.0.0.254 | DHCP Range |
| 10.0.0.255 | 10.0.0.255 | Broadcast |
| 192.168.0.1 | 192.168.0.100 | Static HackSpace Instrumentation |
VLAN 1
These are all statically assigned.
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 1 | |||
| 1 | 192.168.1.2 | ws-switch | Workshop switch |
| 1 | 192.168.1.3 | Lore | Workshop Wifi AP |
| 1 | |||
| 1 | 192.168.1.5 | Data | WiFi AP for classroom (currently in storage) |
| 1 | 192.168.1.6 | Gibson | Wifi RADIUS Server |
| 1 | |||
| 1 | 192.168.1.8 | Queeg | Hollys backup |
| 1 | 192.168.1.9 | Unimatrix | |
| 1 | 192.168.1.10 | Locutus | |
| 1 | 192.168.1.11 | Queen | |
| 1 | 192.168.1.12 | Holly (on Unimatrix) | |
| 1 | 192.168.1.13 | 1of3 (APC UPS) | Upstairs members storage |
| 1 | 192.168.1.19 | 1of9 (HP 2824) | Upstairs members storage (Core switch) |
| 1 | 192.168.1.23 | 2of3 (APC UPS) | Team storgare |
| 1 | 192.168.1.29 | 2of9 (HP 2650-48) | CNCRoom Switch |
| 1 | 192.168.1.30 | Dorian | Raspberry Pi UniFi controller |
| 1 | 192.168.1.33 | 3of3 (APC UPS) | Downstairs members storage |
| 1 | 192.168.1.34 | B-4 | CncRoom Wifi Ap |
| 1 | 192.168.1.44 | Lal | New Studio Wifi Ap (AC) |
| 1 | 192.168.1.39 | 3of9 (HP 2650-48) | Upstairs members storage |
| 1 | 192.168.1.49 | 4of9 (HP 2650-48) | Downstairs members storage (Classroom Side) |
| 1 | 192.168.1.59 | 5of9 (HP 2650-48) | Downstairs members storage (Metalworking Side) |
VLAN 2
These are assigned via DHCP/MAC using Kryten or set statically on the device
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 2 | 10.0.0.1 | Kryten | pfSense router on Collective |
| 2 | 10.0.0.2 | HollyVM | Our primary server hosing hms and instrumentation things (Squeeze under KVM) |
| 2 | 10.0.0.4 | JARVIS | Sandbox Debian VM open for all members |
| 2 | 10.0.0.5 | Rommie | HMS Development VM |
| 2 | 10.0.0.6 | JARVIS-stretch | Sandbox Debian VM open for all members |
| 2 | 10.0.0.11 | Samaritan | Monitoring server |
| 2 | 10.0.0.12 | Queeg | Hollys backup |
| 2 | 10.0.0.14 | Holly | Our primary server hosing hms and instrumentation things (Jessie under KVM) |
| 2 | 10.0.0.15 | Gibson | Wifi RADIUS Server |
| 2 | 10.0.0.17 | Unimatrix | |
| 2 | 10.0.0.18 | Locutus | |
| 2 | 10.0.0.19 | Queen | |
| 2 | 10.0.0.22 | Quorra | Quorra |
| 2 | 10.0.0.24 | Bishop | Laptop for 3D printer |
| 2 | 10.0.0.25 | BarBot | Pi in Project:BarBot |
| 2 | 10.0.0.27 | pbx | Asterisk on bare metal |
| 2 | 10.0.0.28 | payphone | RaspberryPi in the Payphone |
| 2 | 10.0.0.29 | Ziggy | Git work shop vm |
| 2 | 10.0.0.30 | Dorian | RaspberryPi based Unifi controller |
| 2 | 10.0.0.33 | VIKI | RaspberryPi WirelessThings MessageBridge |
| 2 | 10.0.0.40 | studiocam | Pan/Tilt Studio webcam |
| 2 | |||
| 2 | |||
| 2 | |||
| 2 | 10.0.0.93 | Vinyl | Vinyl |
| 2 | 10.0.0.94 | Rosey | Epson WF-7610DWF |
| 2 | 10.0.0.95 | Bender | HP5550 |
| 2 | 10.0.0.96 | Zebra_2844 | Label printer |
| 2 | 10.0.0.97 | Plotter | Plotter (HP DesignJet 600) |
(coming soon...)
VLAN 3
These are all statically assigned.
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 3 | 192.168.0.1 | Holly | Our primary server hosing hms and instrumentation things |
| 3 | |||
| 3 | 192.168.0.10 | gatekeeper | Access Control Arduino for upstairs inner (studio) door |
| 3 | 192.168.0.11 | MatrixMQTT | BIG LED Matrix Display Arduino |
| 3 | 192.168.0.12 | Vending Machine | RFID cashless payment nanode in snack vending machine |
| 3 | 192.168.0.13 | Mini-matrix | Blue room mini-matrix display nanode |
| 3 | |||
| 3 | |||
| 3 | |||
| 3 | |||
| 3 | 192.168.0.19 | WorkshopMQTT | Workshop Bell and Temp Node |
| 3 | 192.168.0.20 | CoinAcceptor | Coin acceptor for Snackspace / Vending Machine payments |
| 3 | 192.168.0.21 | NoteAcceptor | Note acceptor for Snackspace / Vending Machine payments |
| 3 | 192.168.0.22 | laser | Laser RFID |
| 3 | 192.168.0.23 | 3D Printer | 3D Printer RFID |
| 3 | 192.168.0.24 | Laser Display | LED display near laser cutter |
| 3 | 192.168.0.25 | Queeg | Hollys backup |
| 3 | 192.168.0.26 | Embroidery Machine | Embroidery machine RIFD |
| 3 | 192.168.0.27 | CNCRoomController | Lighting Controller (CNCRoomController) |
| 3 | 192.168.0.28 | Gatekeeper-4 | CNC Corridor Access (1C:E3:0D:02:6A:4D) |
| 3 | 192.168.0.29 | Gatekeeper-6 | Communal door (L) / blue room (1C:E3:0D:02:6A:4E) |
| 3 | 192.168.0.30 | Can machine | Can vending machine in studio (DE:ED:BA:FE:FE:11) |
| 3 | 192.168.0.31 | Gatekeeper-3 | Workshop (upstairs backdoor) (1C:E3:0D:02:6A:4F) |
| 3 | 192.168.0.32 | G5 Doorbell | Doorbell/temperature node (DE:ED:BA:FE:62:12) |
| 3 | 192.168.0.33 | VIKI | RaspberryPi WirelessThings MessageBridge |
| 3 | 192.168.0.128/25 (129-254) | Queen | Docker instrumentation network pool |
(coming soon...)
VLAN 6
Direct network between Unimatrix and Locutus used for HDD replication
These are all statically assigned.
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 6 | 192.168.6.1 | Unimatrix | |
| 6 | 192.168.6.2 | Locutus |
VLAN 7
Direct network between Unimatrix and Queen used for VM Backups
These are all statically assigned.
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 7 | 192.168.7.1 | Unimatrix | |
| 7 | 192.168.7.3 | Queen |
VLAN 8
Direct network between Locutus and Queen used for VM Backups
These are all statically assigned.
| VLAN | IP | DNS Name | Notes |
|---|---|---|---|
| 8 | 192.168.8.2 | Locutus | |
| 8 | 192.168.8.3 | Queen |
External Port Routing
| Service | External Port | Internal Port | Internal IP | Notes |
|---|---|---|---|---|
| HTTP | 80 | 80 | 10.0.0.14 | Webserver on Holly |
| HTTPS | 443 | 443 | 10.0.0.14 | HMS SSL Webserver on Holly |
| SSH | 1922 | 22 | 10.0.0.18 | SSH on Unimatrix |
| SSH | 3000 | 22 | 10.0.0.4 | SSH on JARVIS |
| RTP | 10000-20000 | 10000-20000 | 10.0.0.27 | Asterisk/RTP on PBX |
| SIP | 5060 | 5060 | 10.0.0.27 | Asterisk/SIP on PBX |
Switch port assignments
1of9 ProCurve 2824 (J4903A)
Located in the upstairs members storage, this is the core switch that all others connect to
| Port | VLAN | Comments |
|---|---|---|
| g1 | 1u | Management access |
| g2 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Uplink trunk (A25) - FS728TS / ws-switch |
| g3 | 5u | Instrumentation test |
| g4 | 4u | Modem (Able) |
| g5 | 2u | Main hackspace network |
| g6 | 2u | Main hackspace network (Queeg) |
| g7 | 2u | Main hackspace network |
| g8 | 3u | Instrumentation (Queeg) |
| g9 | 2u | Main hackspace network |
| g10 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Trunk (Queeg) |
| g11 | 2u | Main hackspace network |
| g12 | 1t, 2u | (dorian) |
| g13 | 1u, 2t | WiFi (POE > A34) |
| g14 | 1u | 1of3 UPS |
| g15 | 1u, 2t, 3t, 4t, 5t | Server (Unimatrix) |
| g16 | 1u, 2t, 3t, 4t, 5t | Server (Queen) |
| g17 | 1u, 2t, 3t, 4t, 5t | Server (Locutus) |
| g18 | 6t | Unimatrix<->Locutus direct network |
| g19 | 7t | Queen<->Unimatrix direct network |
| g20 | 8t | Queen<->Locutus direct network |
| g21 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Downlink trunk (2of9) |
| g22 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Downlink trunk (3of9) |
| g23 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Downlink trunk (4of9) |
| g24 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Downlink trunk (5of9) |
2of9 ProCurve 2650-48 (J4899B)
Located in the CNC room cabinet, this switch servers the Blue room, CNC room and Team storage
| Port | VLAN | Comments |
|---|---|---|
| e1-e32 | 2u | Main hackspace network |
| e33-e40 | 3u | Instrumentation |
| e41-e42 | 1u, 2t | Wifi |
| e43 | 3u | Instrumentation |
| e44 | 4u | Modem |
| e45 | 5u | Instrumentation test |
| e46 | 6t | Unimatrix<->Locutus direct network |
| e47 | 7t | Queen<->Unimatrix direct network |
| e48 | 8t | Queen<->Locutus direct network |
| g49 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Uplink trunk (1of9) |
| g50 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Server trunk |
3of9 ProCurve 2650-48 (J4899B)
Located in upstairs members storage, this switch serves the Comfy area, Studio, Craft Room and Kitchen
| Port | VLAN | Comments |
|---|---|---|
| e1-e9 | 2u | Main hackspace network |
| e10 | 3u | Instrumentation (Can Vend) |
| e11 | 2u | Main hackspace network |
| e12 | 3u | Instrumentation (Snack Vend) |
| e13 | 2u | Main hackspace network |
| e14 | 3u | Instrumentation (Gatekeeper) |
| e15 | 2u | Main hackspace network |
| e16 | 3u | Instrumentation (MatrixMQTT) |
| e17 | 2u | Main hackspace network |
| e18 | 3u | Instrumentation (miniMatrix) |
| e19-e24 | 2u | Main hackspace network |
| e25 | 2u | Main hackspace network (auto-10) |
| e26-e29 | 2u | Main hackspace network |
| e30 | 3u | Instrumentation (Coin Acceptor) |
| e31-32 | 2u | Main hackspace network |
| e33 | 3u | Instrumentation (Embroidery Machine) |
| e34-37 | 2u | Main hackspace network |
| e38 | 3u | Instrumentation (Note Acceptor) |
| e39-48 | 2u | Main hackspace network |
| g49 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Uplink trunk (1of9) |
| g50 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Server trunk |
4of9 ProCurve 2650-48 (J4899C)
| Port | VLAN | Comments |
|---|---|---|
| e1-e32 | 2u | Main hackspace network |
| e33-e40 | 3u | Instrumentation |
| e41-e42 | 1u, 2t | Wifi |
| e43 | 3u | Instrumentation |
| e44 | 4u | Modem |
| e45 | 5u | Instrumentation test |
| e46 | 6t | Unimatrix<->Locutus direct network |
| e47 | 7t | Queen<->Unimatrix direct network |
| e48 | 8t | Queen<->Locutus direct network |
| g49 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Uplink trunk (1of9) |
| g50 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Server trunk |
5of9 ProCurve 2650-48 (J4899B)
| Port | VLAN | Comments |
|---|---|---|
| e1-e32 | 2u | Main hackspace network |
| e33-e40 | 3u | Instrumentation |
| e41-e42 | 1u, 2t | Wifi |
| e43 | 3u | Instrumentation |
| e44 | 4u | Modem |
| e45 | 5u | Instrumentation test |
| e46 | 6t | Unimatrix<->Locutus direct network |
| e47 | 7t | Queen<->Unimatrix direct network |
| e48 | 8t | Queen<->Locutus direct network |
| g49 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Uplink trunk (1of9) |
| g50 | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Server trunk |
ws-switch Netgear FS728TS
Located in the workshop.
| Port | VLAN | Comments |
|---|---|---|
| e1-e6 | 3u | Instrumentation |
| e7 | 4u | Do not use. |
| e8 | 1u, 2t, 3t, 5t | Lore/Wifi AP |
| e9-e10 | 5u | Instrumentation test |
| e11-e24 | 2u | Main hackspace network |
| g1 | 1u, 2t, 3t, 4t, 5t | (spare) |
| g2 | 1u, 2t, 3t, 4t, 5t | Uplink trunk (1of9) |
Patch Panels
| Name | Location | Area served |
|---|---|---|
| Network/Patch_Panel_A | Upstairs Member Storage | Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage |
| Network/Patch_Panel_B | CNC Room Cabinet | Down stairs: Blue Room, CNC room, CNC corridor, Team Storage |
| Network/Patch_Panel_C | Upstairs Member Storage | Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage |
| Network/Patch_Panel_D | Downstairs Member Storage | Down stairs: Class Room, Metalworking room, Corridor, Members Storage |
| Network/Patch_Panel_E | Downstairs Member Storage | Down stairs: Class Room, Metalworking room, Corridor, Members Storage |
Patch cable colour coding
| Colour | Vlan Tagging | Notes |
|---|---|---|
| Purple | 2u | Main hackspace network |
| Green | 3u | Instrumentation |
| Blue | 1u, 2t | Wifi |
| Red | Mixed | Warning check wiki for actual config details |
| Black | ||
| Pink | 4u | Modem |
| Yellow | 5u | Instrumentation test |
| White | 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t | Trunk |
| Orange | 1u, 2t, 3t, 4t, 5t | Server |
| Brown | 6u | 7u | 8u | Server direct links |
Server Naming
See here for our naming convention
UPS Power
The important infrastructure runs off 3 UPS's, each one is an APC Dell Smart UPS 5000 DL5000RMI5U.
| Name | Management IP | Location | Equipment served | Notes |
|---|---|---|---|---|
| One of Three | 192.168.1.13 00:C0:B7:74:D5:55 |
Upstairs Member Storage | Unimatrix, Queen (temporary), Locutus (temporary), Queeg, Dorian 1of9, 3of9, Lal, Able, HS2.0 Gatekeeper, MatrixMQTT, Mini-matrix, CoinAcceptor, |
In service since ~03/13 Batteries replaced 4/12/14 Cacti Graphs |
| Two of Three | 192.168.1.23 00:C0 B7:66:65:99 |
Team Storage | Queen (Once relocated), VIKI 2of9, 4of9 (temporary), 5of9 (temporary), B-4 CNCRoom lighting automation, CNC corridor Gatekeeper, Blue room Gatekeeper, Team storage Gatekeeper |
In service since 24/11/17 New Batteries fitted 24/11/17 Relay Fault as of 09/26/2018 Cacti Graphs |
| Three of Three | 192.168.1.33 00:C0:B7:D5:89:A3 |
Downstairs Members Storage | Locutus (Once relocated), 4of9 (Once relocated), 5of9 (Once relocated), Data (Once relocated) Corridor lighting automation, Metalworking lighting automation, Corridor Gatekeeper, Front door Gatekeeper, Members storage Gatekeeper |
Not yet in service New Batteries fitted xx/xx/xx Cacti Graphs |
Network Devices
Able
Able is Kryten's brother the BT Openreach VDSL modem that talks to the outside world.
Kryten
Kryten is VM on Unimatrix running pfSense, it handles all our DHCP and routing from the external world.
It is connected to VLAN 4 for access to Able, and 2 for the main hackspace network.
The Nottinghack VLAN has access to local resources - e.g. a samba file-share on JARVIS, a future local dropbox server for projects & collaborations, a backup of all Web / Wiki files (to allow a remote restore in the event of moving hosts / outage of services) and anything else we don't want to be web facing.
The VPN (when enabled) would allow remote management of the VLANS, which could come in handy in the event of issues with the client WiFi access point.
Router management username & password for Authorised members only. If there something you need changing ask on the google group or speak to 'RepRap' Matt or Daniel directly
Usual rules apply, as to any tool - if you don't know how to use it / don't do anything :)
OpenVPN
Not currently running and not for member access
Kryten runs our openVPN server for access to the hackspace network from the outside world.
For more details see the VPN page
WiFi
There are three WiFi networks:
HSNOTTS
WiFi for Hackspace SSID: HSNOTTS passcode uses WPA2 protocol AES encryption. Members only, passcode on request, changes to the passcode will be emailed to members only.
HSNOTTS_GUEST
WiFi for guests is setup as HSNOTTS_GUEST and passcode can be provided and this will (possibly at some point) run on a separate VLAN.
spacenet
Cross-hackspace wireless network, using WPA2 Enterprise. Login using:
Username: <HMS-username>@nottinghack.org.uk
Password: <HMS-password>
For more details, see spacenet.
Servers
The Collective
These are 3 HP N40L MicroServers that run the VMs within the space and act as our database cluster
See Collective
Unimatrix
Primary VM host
Hosts Kryten, Holly and Gibson
Kryten
VM running PfSense as Internet gateway and DHCP/DNS server
Holly
Our main workhorse vm, runs HMS and all the instrumentation programs
See Holly
Gibson
Our password store
Locutus
Secondary VM host
Hosts JARVIS and Rommie
JARVIS
Provides Samba file server, CUPS print server and member shell accounts
See JARVIS
Rommie
Staging server for HMS code dev
Queen
Backup Server
Does not host any VM's
Hosts Docker services nh-lighting and nh-nodered
Queeg
Fail over Monowall PC, its not much but it can keep GateKeeper running in a pinch
Dorian
RPi3 running our UniFi controller
Andromeda
This is our offsite server, hosted at Linode it run the main website, wiki, talk, and emails.
See Andromeda
Genral Use PC
Quorra
A workstation with dual heads, Quorra is available for all members to use.
Fey
General-use windows PC in the blue room,aimed at CAD work and anything else requiring a reasonably beefy GPU.
WOPR
Another general-use PC in the blue room, by the window
Printers
For more details, see Printers.
Bender
The HP Color Laserjet HP5550 is set up on 10.0.0.95 as Bender.
The printer feeds A4 paper from tray 2 and A3 paper from tray 3.
A duplexer is installed enabling double-sided printing.
Bender is shared on JARVIS, so should be auto-detected by Linux machines.
Rosey
Rosey is an Epson WF-7610DWF printer/scanner set up on 10.0.0.94. The scanner/printer should be auto-detected by most Linux/Mac machines, and is known to work from Quorra using Xsane.
Plotter
The HP DesignJet 600 plotter is called Plotter. It is connected to the network at 10.0.0.97. Network operation is unconfirmed.
Websites
- See also: Website
DNS record looked after by 'RepRap' Matt
Nottinghack.org.uk
The main Nottinghack websites are run form Andromeda.
This hosts the Wordpress blog, this wiki, the Nottinghack Planet
The Twitterbot for @HSNOTTS is also hosted on on this server.
lspace.nottinghack.org.uk
Hosted locally at the space on Holly
Includes:
- Graph showing connected network device count
Hackspace Management System
The Hackspace Management System
Hosted locally at the space on Holly
see HMS
cacti.nottinghack.org.uk
Also hosted locally on Holly this provides graphing of various stats and info (mostly temperature graphs) from the hackspace instrumentation
https://holly/
Our intranet, only accessible from the hackspace network
HackSpace Instrumentation
The Network and Holly provide the backbone to our HackSpace Instrumentation projects.
Other Info
ADSL Connection Reboot Procedure
If for some reason the internet connection is not responding!
Then Able is located on the Internet shelf on the Members Storage room
On Able check if the 'DSL' and 'Internet' lights are green
If not on then reboot Able by cycling power using the power switch on the back,
If two minutes after doing this the 'DSL' light does not come back on then you need to get in touch with either 'RepRap' Matt or Daniel who can check on Kryten
If there's still no look, it could well be an outside issue with talktalk.
Extra Equipment
See here for a list of our other network gear