Revision as of 13:49, 19 September 2016

The hackspace network and servers are look after by the Network and Servers group

Network Layout

This page will show the network topology & proposals for network expansion / modification.

External IP address 79.77.188.139.

External domain address lspace.nottinghack.org.uk (DNS record looked after by 'RepRap' Matt)

Static & Reserved IP's

There are a few VLANs:

VLAN	Network	Description
1	192.168.1.0/24	Default
2	10.0.0.0/24	Main Hackspace network
3	192.168.0.0/24	Instrumentation projects
4	-	Able / ADSL Modem (PPPoE)
5	192.168.0.0/24	Instrumentation test (Rommie)
6	192.168.6.0/24	Collective<->Locutus direct network
7	192.168.7.0/24	Queen<->Collective direct network
8	192.168.8.0/24	Queen<->Locutus direct network

The following ranges are reserved for there given purpose:

Start	End	Purpose
10.0.0.1	10.0.0.1	kryten The Main Router
10.0.0.2	10.0.0.79	Static things
10.0.0.80	10.0.0.89	openVPN DHCP pool
10.0.0.90	10.0.0.99	Static Printers
10.0.0.100	10.0.0.254	DHCP Range
10.0.0.255	10.0.0.255	Broadcast
192.168.0.1	192.168.0.100	Static HackSpace Instrumentation

VLAN 1

These are all statically assigned.

VLAN	IP	DNS Name	Notes
1	192.168.1.1	HollyVM	Our always on server - VM running under Collective
1	192.168.1.2	ws-switch	Workshop switch
1	192.168.1.3	Lore	Workshop Wifi AP
1	192.168.1.4	st-switch	Studio/BlueRoom switch
1	192.168.1.5	Data	Studio/BlueRoom Wifi AP
1	192.168.1.6	Gibson	Wifi RADIUS Server
1	192.168.1.7	studio-gbit	Dell PowerConnect 2724 (24x gbit)
1	192.168.1.8	Queeg	Hollys backup

VLAN 2

These are assigned via DHCP/MAC using Kryten or set statically on the device

VLAN	IP	DNS Name	Notes
2	10.0.0.1	Kryten	pfSense router on Collective
2	10.0.0.2	HollyVM	Our always on server - VM running under Collective
2	10.0.0.3	Joshua	Our "playful" games server
2	10.0.0.4	JARVIS	Sandbox Debian VM open for all members
2	10.0.0.5	Rommie	HMS Development VM
2	~~10.0.0.6~~	~~Workshop~~	~~Workshop Wifi AP (channel 11)~~
2	~~10.0.0.7~~	~~Zyxel~~	~~Additional Wifi AP (channel 1)~~
2	10.0.0.10	Collective	ESXi Management Server
2	10.0.0.11	vCMA	VMware vCenter Mobile Access runnning under Collective
	~~10.0.0.12~~	~~HollyVM~~	~~Holly VM running under Collective~~
2	10.0.0.12	Queeg	Hollys backup
2	10.0.0.15	Gibson	Wifi RADIUS Server
2	10.0.0.16	Intersect	VM on Collective running Ubuntu 14.04 LTS x64
2	10.0.0.17	unimatrix	Temporary IP for Collective KVM install box
2	10.0.0.18	Locutus
2	~~10.0.0.21~~	~~yoocnc~~	~~YooCNC desktop~~
2	10.0.0.22	Quorra	Quorra
2	10.0.0.23	Kiosk	Kiosk PC (under 50" screen in blueroom). WIP.
2	10.0.0.24	Bishop	Laptop for 3D printer
2	10.0.0.25	BarBot	Pi in Project:BarBot
2	10.0.0.26	Asterisk	Asterisk VM on collective
2	10.0.0.27	pbx	Asterisk on bare metal
2	10.0.0.28	payphone	RaspberryPi in the Payphone
2	10.0.0.40	studiocam	Pan/Tilt Studio webcam
2	~~10.0.0.90~~	~~marvin~~	~~A4 Laser Printer~~
2	~~10.0.0.91~~	~~Clank~~	~~A3 Laser Printer~~
2	~~10.0.0.92~~	B4	~~A4 InkJet with Scanner~~
2	10.0.0.93	Vinyl	Vinyl
2	10.0.0.94	Rosey	Epson WF-7610DWF
2	10.0.0.95	Bender	HP5550
2	10.0.0.96	Zebra_2844	Label printer
2	10.0.0.97	Plotter	Plotter (HP DesignJet 600)

(coming soon...)

VLAN 3

These are all statically assigned.

VLAN	IP	DNS Name	Notes
3	192.168.0.1	HollyVM	Our always on server - VM running under Collective
3	192.168.0.10	gatekeeper	Access Control Arduino
3	192.168.0.11	MatrixMQTT	BIG LED Matrix Display Arduino
3	192.168.0.12	Vending Machine	RFID cashless payment nanode
3	192.168.0.13	Mini-matrix	Blue room mini-matrix display nanode
3	~~192.168.0.14~~	~~Wall of Faces~~	~~Wall of members faces~~
3	192.168.0.15	Studio Controller	Lighting Controller (Studio)
3	192.168.0.16	Workshop Controller	Lighting Controller (Workshop)
3	192.168.0.17	Studio Switch Panel	Lighting Switch's (Studio)
3	192.168.0.18	Workshop Switch Panel	Lighting Switch's (Workshop)
3	192.168.0.19	WorkshopMQTT	Workshop Bell and Temp Node
3	192.168.0.21	NoteAcceptor	Note acceptor for Snackspace / Vending Machine payments
3	192.168.0.22	laser	Laser RFID
3	192.168.0.23	3D Printer	3D Printer RFID
3	192.168.0.24	Laser Display	LED display near laser cutter
3	192.168.0.25	Queeg	Hollys backup
3	192.168.0.26	Embroidery Machine	Embroidery machine RIFD

(coming soon...)

VLAN 6

Direct network between Collective and Locutus used for HDD replication
These are all statically assigned.

VLAN	IP	DNS Name	Notes
6	192.168.6.1	Collective
6	192.168.6.2	Locutus

VLAN 7

Direct network between Collective and Queen used for VM Backups
These are all statically assigned.

VLAN	IP	DNS Name	Notes
7	192.168.7.1	Collective
7	192.168.7.3	Queen

VLAN 8

Direct network between Locutus and Queen used for VM Backups
These are all statically assigned.

VLAN	IP	DNS Name	Notes
8	192.168.8.2	Locutus
8	192.168.8.3	Queen

External Port Routing

Service	External Port	Internal Port	Internal IP	Notes
HTTP	80	80	10.0.0.2	Webserver on Holly
HTTPS	443	443	10.0.0.2	HMS SSL Webserver on Holly
SSH	1921	22	10.0.0.2	SSH on Holly
SSH	1922	22	10.0.0.12	SSH on HollyVM
SSH	3000	22	10.0.0.4	SSH on JARVIS
SSH	3045	22	10.0.0.5	SSH on Rommie
RTP	10000-20000	10000-20000	10.0.0.27	Asterisk/RTP on PBX
SIP	5060	5060	10.0.0.27	Asterisk/SIP on PBX

Switch port assignments

Netgear Prosafe FS728x

The switch in the members storage room is a Netgear FS728TP (24x 100mbit with POE + 4x gbit ports), the switch in the workshop is FS728TS (same, but with no POE). As far as possible, both switches should have identical configuration; I.e. if the studio switch fails, the workshop switch should be a drop in replacement.

Port	VLAN	Comments
e1-e6	3	Instrumentation projects
e7	4	Able (VDSL Modem)
e8	1,2	Data/Lore (WAP)
e9-e10	3	Instrumentation projects
e11	all	Queeg
e12	2	Thomson ST2020 SIP phone in blue room
e13+	2	Main hackspace network
g1	all	Collective
g2	2	Gigabit switch on Blue room table
g3	1,2,3,5	Dell PowerConnect 2724
g4	all	other switch (FS728TP or FS728TS)

Dell PowerConnect 2724

The Dell switch is in the members storage room, just above collective. It is connected to the Netgear FS728TP and to most of the Studio network sockets.

Port	VLAN	Comments
e1-e23	2	Main hackspace network
e24	1,2,3,5	Netgear FS728TP

Server Naming

See here for our naming convention

Network Devices

Able

Able is Kryten's brother the BT Openreach VDSL modem that talks to the outside world.

Kryten

Kryten is VM on Collective running pfSense, it handles all our DHCP and routing from the external world.
It is connected to VLAN 4 for access to Able, and 2 for the main hackspace network.

The Nottinghack VLAN has access to local resources - e.g. a samba file-share on JARVIS, a future local dropbox server for projects & collaborations, a backup of all Web / Wiki files (to allow a remote restore in the event of moving hosts / outage of services) and anything else we don't want to be web facing.

The VPN (when enabled) would allow remote management of the VLANS, which could come in handy in the event of issues with the client WiFi access point.

Router management username & password for Authorised members only. If there something you need changing ask on the google group or speak to 'RepRap' Matt or Daniel directly

Usual rules apply, as to any tool - if you don't know how to use it / don't do anything :)

OpenVPN

Not currently running and not for member access
Kryten runs our openVPN server for access to the hackspace network from the outside world.

For more details see the VPN page

WiFi

There are three WiFi networks:

HSNOTTS

WiFi for Hackspace SSID: HSNOTTS passcode uses WPA2 protocol AES encryption. Members only, passcode on request, changes to the passcode will be emailed to members only.

HSNOTTS_GUEST

WiFi for guests is setup as HSNOTTS_GUEST and passcode can be provided and this will (possibly at some point) run on a separate VLAN.

spacenet

Cross-hackspace wireless network, using WPA2 Enterprise. Login using:
Username: <HMS-username>@nottinghack.org.uk
Password: <HMS-password>

For more details, see spacenet.

Servers

Joshua

Joshua loves to play games, Tic Tac Toe, Chess, Global Thermonuclear War... all the family favourites. We've co-opted him into running Quake II, Open Arena, Unreal Tournament & Counter Strike 1.5.
The aim is to have a games server running games suitable for clients running low powered netbooks & laptops. This allows us to run LAN parties & have more people join in, without having to bring gaming rigs from home. Also QII & Open Arena have open source install paths available, with Unreal & Counter Strike available at low cost.
Joshua is running Windows XP Pro on a 1GHz PIII with 512MB RAM & a RIVA TNT2 graphics card.
Impressive I know.

There are 2 user accounts -
"David" - not password protected, but limited access - suitable for web browsing / printing etc.
"Falken" - admin account - speak to Tony_S if you need the password.

Genral Use PC

Quorra

A workstation with dual heads, Quorra is available for all members to use.

WOPR

Another general-use PC in the blue room, by the window

Printers

For more details, see Printers.

Bender

The HP Color Laserjet HP5550 is set up on 10.0.0.95 as Bender.
The printer feeds A4 paper from tray 2 and A3 paper from tray 3.
A duplexer is installed enabling double-sided printing.
Bender is shared on JARVIS, so should be auto-detected by Linux machines.

Rosey

An Epson WF-7610DWF printer/scanner set up on 10.0.0.94. The scanner/printer should be auto-detected by most Linux/Mac machines, and is known to work from Quorra using Xsane.

Plotter

HP DesignJet 600 Not networked, but connected via serial or parallel interface to quorra

Websites

Nottinghack.org.uk

The main Nottinghack websites are run form Andromeda.

This hosts the Wordpress blog, this wiki, the Nottinghack Planet

The Twitterbot for @HSNOTTS is also hosted on on this server.

lspace.nottinghack.org.uk

Hosted locally at the space on Holly

Includes:

Hackspace Management System - see HMS
Graph showing connected network device count

DNS record looked after by 'RepRap' Matt

cacti.nottinghack.org.uk

Also hosted locally on Holly this provides graphing of various stats and info (mostly temperature graphs) from the hackspace instrumentation

http://hollyvm/

Our intranet, only accessible from the hackspace network

HackSpace Instrumentation

The Network and Holly provide the backbone to our HackSpace Instrumentation projects.

Other Info

ADSL Connection Reboot Procedure

If for some reason the internet connection is not responding!
Then Able is located on the Internet shelf on the Members Storage room
On Able check if the 'DSL' and 'Internet' lights are green
If not on then reboot Able by cycling power using the power switch on the back,
If two minutes after doing this the 'DSL' light does not come back on then you need to get in touch with either 'RepRap' Matt or Daniel who can check on Kryten
If there's still no look, it could well be an outside issue with talktalk.

Extra Equipment

See here for a list of our other network gear

Subcategories

This category has the following 3 subcategories, out of 3 total.

C

Communications protocol

I

Instrumentation

N

Network (other)

Pages in category "Network"

The following 63 pages are in this category, out of 63 total.

A

B

Bender

C

Collective

D

DM2Tweet

F

Fey

G

Gatekeeper

H

I

J

K

K-9

L

M

N

P

Q

Quorra

R

S

V

W

WOPR

Media in category "Network"

The following 5 files are in this category, out of 5 total.

Hackspace network 26-02.jpg 1,686 × 1,177; 286 KB
Patch Panel AC Mapping.png 4,038 × 1,774; 912 KB
Patch Panel B Mapping.png 1,710 × 612; 113 KB
Patch Panel D Mapping.png 1,817 × 1,325; 223 KB
Upstairs Members Storage Network.jpeg 4,032 × 3,024; 2.12 MB

@@ Line 208: / Line 208: @@
 ===VLAN 6===
-Direct network between Collective and Locutus used for HDD replication
+Direct network between Collective and Locutus used for HDD replication<br/>
 These are all statically assigned.
 {| class="wikitable"
@@ Line 221: / Line 221: @@
 | 6 || 192.168.6.2 || [[Collective#Locutus|Locutus]] ||
 |-
+<!--
 | 8 || 192.168.6.3 || [[Collective#Queen|Queen]] || Reserved Not connected
 |-
+-->
 |}
 ===VLAN 7===
-Direct network between Collective and Queen used for VM Backups
+Direct network between Collective and Queen used for VM Backups<br/>
 These are all statically assigned.
 {| class="wikitable"
@@ Line 237: / Line 239: @@
 | 7 || 192.168.7.1 || [[Collective]] ||
 |-
+<!--
 | 7 || 192.168.7.2 || [[Collective#Locutus|Locutus]] || Reserved Not connected
 |-
+-->
 | 7 || 192.168.7.3 || [[Collective#Queen|Queen]] ||
 |}
 ===VLAN 8===
-Direct network between Locutus and Queen used for VM Backups
+Direct network between Locutus and Queen used for VM Backups<br/>
 These are all statically assigned.
 {| class="wikitable"
@@ Line 252: / Line 256: @@
 ! Notes
 |-
+<!--
 | 8 || 192.168.8.1 || [[Collective]] || Reserved Not connected
 |-
+-->
 | 8 || 192.168.8.2 || [[Collective#Locutus|Locutus]] ||
 |-

Category:Network: Difference between revisions