Difference between revisions of "Network"

From Nottinghack Wiki
Jump to navigation Jump to search
(134 intermediate revisions by 7 users not shown)
Line 1: Line 1:
−
===Network Layout===
+
{{TOC right|limit=4}}
−
This page will show the network topology & proposals for network expansion / modification.
+
[[File:Upstairs_Members_Storage_Network.jpeg|400px|thumb|right]]
 +
This page gives the details of the space's '''network''' and connected devices. The [[Team:Network_and_Servers|Network and Servers team]] maintain and look after the network.
  
−
[[File:Hackspace_network_26-02.jpg|800px|thumb|none|alt=A |Hackspace Network]]
+
=Network Layout=
 +
This page will show the network topology & proposals for network expansion / modification.<br/>
  
−
External IP address 92.27.61.158.
+
[[File:Hackspace_network_26-02.jpg|600px|thumb|none|alt=A |Hackspace Network]]
  
−
External domain address [http://lspace.nottinghack.org.uk lspace.nottinghack.org.uk] (DNS record looked after by [[User:Lwk|'RepRap' Matt]])
+
<!--External IP address 92.27.40.214<br>-->
 +
External Virgin IP address<br>
 +
80.235.226.218 (lspace.nottinghack.org.uk, hms. etc)<br>
 +
80.235.226.219 (jarvis.nottinghack.org.uk)<br>
 +
80.235.226.220 (rommie.nottinghack.org.uk)<br>
 +
Virgin IP's not yet used<br>
 +
80.235.226.221<br>
 +
80.235.226.222
  
−
Internal IP address range with reserved IP's available from 10.0.0.2 - 10.0.0.99 and DHCP allocation from 10.0.0.100.
+
External domain address [http://lspace.nottinghack.org.uk lspace.nottinghack.org.uk] (DNS record looked after by [[User:Lwk|'RepRap' Matt]])<br/>
 +
 
 +
== Static & Reserved IP's ==
 +
There are a few VLANs:
 +
 
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! Network
 +
! Description
 +
|-
 +
| [[#VLAN 1|1]] || 192.168.1.0/24 || Default (management network)
 +
|-
 +
| [[#VLAN 2|2]] || 10.0.0.0/24 || Main Hackspace network
 +
|-
 +
| [[#VLAN 3|3]] || 192.168.0.0/24 || [[HackSpace_Instrumentation|Instrumentation projects]]
 +
|-
 +
| [[#VLAN 4|4]] || - || Able / ADSL Modem (PPPoE)
 +
|-
 +
| [[#VLAN 5|5]] || 192.168.0.0/24 || Instrumentation ''test'' (Rommie)
 +
|-
 +
| [[#VLAN 6|6]] || 192.168.6.0/24 || [[Collective#Unimatrix|Unimatrix]]<->[[Collective#Locutus|Locutus]] direct network
 +
|-
 +
| [[#VLAN 7|7]] || 192.168.7.0/24 || [[Collective#Queen|Queen]]<->[[Collective#Unimatrix|Unimatrix]] direct network
 +
|-
 +
| [[#VLAN 8|8]] || 192.168.8.0/24 || [[Collective#Queen|Queen]]<->[[Collective#Locutus|Locutus]] direct network
 +
|}
 +
 
 +
The following ranges are reserved for there given purpose:
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Start
 +
! End
 +
! Purpose
 +
|-
 +
| 10.0.0.1 || 10.0.0.1 || [[#Kryten|kryten]] The Main Router
 +
|-
 +
| 10.0.0.2 || 10.0.0.79 || Static things
 +
|-
 +
| 10.0.0.80 || 10.0.0.89 || openVPN DHCP pool
 +
|-
 +
| 10.0.0.90 || 10.0.0.99 || Static Printers
 +
|-
 +
| 10.0.0.100 || 10.0.0.254 || DHCP Range
 +
|-
 +
| 10.0.0.255 || 10.0.0.255 || Broadcast
 +
|-
 +
| 192.168.0.1 || 192.168.0.100 || Static [[HackSpace_Instrumentation|HackSpace Instrumentation]]
 +
|}
 +
 
 +
 
 +
===VLAN 1===
 +
These are all statically assigned.
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
| 1 || <s>192.168.1.1</s> || <s>[[Holly|HollyVM]]</s> || <s>Our primary server hosing hms and instrumentation things</s>
 +
|-
 +
| 1 || 192.168.1.2 || ws-switch|| Workshop switch
 +
|-
 +
| 1 || 192.168.1.3 || Lore || Workshop Wifi AP
 +
|-
 +
| 1 || <s>192.168.1.4</s> || <s>st-switch</s> || <s>Studio/BlueRoom switch</s>
 +
|-
 +
| 1 || ''192.168.1.5'' || Data || WiFi AP for classroom (currently in storage)
 +
|-
 +
| 1 || 192.168.1.6 || [[#Gibson|Gibson]] || Wifi RADIUS Server
 +
|-
 +
| 1 || <s>192.168.1.7</s> || <s>studio-gbit</s> || <s>Dell PowerConnect 2724 (24x gbit)</s>
 +
|-
 +
| 1 || 192.168.1.8 || [[Queeg]] || Hollys backup
 +
|-
 +
| 1 || 192.168.1.9 || [[Collective#Unimatrix|Unimatrix]] ||
 +
|-
 +
| 1 || 192.168.1.10 || [[Collective#Locutus|Locutus]] ||
 +
|-
 +
| 1 || 192.168.1.11 || [[Collective#Queen|Queen]] ||
 +
|-
 +
| 1 || 192.168.1.12 || Holly (on Unimatrix) ||
 +
|-
 +
| 1 || 192.168.1.13 || 1of3 (APC UPS) || Upstairs members storage
 +
|-
 +
| 1 || 192.168.1.19 || 1of9 (HP 2824) || Upstairs members storage (Core switch)
 +
|-
 +
| 1 || 192.168.1.23 || 2of3 (APC UPS) || Team storgare
 +
|-
 +
| 1 || 192.168.1.29 || 2of9 (HP 2650-48) || CNCRoom Switch
 +
|-
 +
| 1 || 192.168.1.30 || [[Dorian]] || Raspberry Pi UniFi controller
 +
|-
 +
| 1 || 192.168.1.33 || 3of3 (APC UPS) || Downstairs members storage
 +
|-
 +
| 1 || 192.168.1.34 || B-4 || CncRoom Wifi Ap
 +
|-
 +
| 1 || 192.168.1.44 || Lal || New Studio Wifi Ap (AC)
 +
|-
 +
| 1 || 192.168.1.39 || 3of9 (HP 2650-48) || Upstairs members storage
 +
|-
 +
| 1 || 192.168.1.49 || 4of9 (HP 2650-48) || Downstairs members storage (Classroom Side)
 +
|-
 +
| 1 || 192.168.1.59 || 5of9 (HP 2650-48) || Downstairs members storage (Metalworking Side)
 +
|}
 +
 
 +
===VLAN 2===
 +
These are assigned via DHCP/MAC using [[#Kryten|Kryten]] or set statically on the device
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
| 2 || 10.0.0.1 || [[#Kryten|Kryten]] || pfSense router on [[Collective]]
 +
|-
 +
| 2 || 10.0.0.2 || [[Holly|HollyVM]] || Our primary server hosing hms and instrumentation things (Squeeze under KVM)
 +
|-
 +
| 2 || 10.0.0.4 || [[JARVIS]] || Sandbox Debian VM open for all members
 +
|-
 +
| 2 || 10.0.0.5 || [[Rommie]] || HMS Development VM
 +
|-
 +
| 2 || 10.0.0.6 || [[JARVIS|JARVIS-stretch]] || Sandbox Debian VM open for all members
 +
|-
 +
| <s>2</s> || <s>10.0.0.7</s> || <s>Zyxel</s> || <s>Additional Wifi AP (channel 1)</s>
 +
|-
 +
| <s>2</s> || <s>10.0.0.10</s> || <s>[[Collective]]</s> || <s>ESXi Management Server</s>
 +
|-
 +
| 2 || 10.0.0.11 || [[Samaritan]] || Monitoring server
 +
|-
 +
| 2  || 10.0.0.12  || [[Queeg]] || Hollys backup
 +
|-
 +
| 2 || 10.0.0.14 || [[Holly]] || Our primary server hosing hms and instrumentation things (Jessie under KVM)
 +
|-
 +
| 2 || 10.0.0.15 || [[#Gibson|Gibson]] || Wifi RADIUS Server
 +
|-
 +
| 2 || 10.0.0.17 || [[Collective#Unimatrix|Unimatrix]]  ||
 +
|-
 +
| 2 || 10.0.0.18 || [[Collective#Locutus|Locutus]] ||
 +
|-
 +
| 2 || 10.0.0.19 || [[Collective#Queen|Queen]] ||
 +
|-
 +
| <s>2</s> || <s>10.0.0.21</s> || <s>[[YooCNC|yoocnc]]</s> || <s>YooCNC desktop</s>
 +
|-
 +
| 2 || 10.0.0.22 || [[Quorra]] || Quorra
 +
|-
 +
| <s>2</s> || <s>10.0.0.23</s> || <s>Kiosk</s> || <s>Kiosk PC (under 50" screen in blueroom). WIP.</s>
 +
|-
 +
| 2 || 10.0.0.24 || [[Bishop]] || Laptop for 3D printer
 +
|-
 +
| 2 || 10.0.0.25 || BarBot || Pi in [[Project:BarBot]]
 +
|-
 +
| 2 || 10.0.0.27 || pbx || Asterisk on bare metal
 +
|-
 +
| 2 || 10.0.0.28 || payphone || RaspberryPi in the Payphone
 +
|-
 +
| 2 || 10.0.0.29 || [[Ziggy]] || Git work shop vm
 +
|-
 +
| 2 || 10.0.0.30 || [[Dorian]] || RaspberryPi based Unifi controller
 +
|-
 +
| 2 || 10.0.0.33 || VIKI || RaspberryPi WirelessThings MessageBridge
 +
|-
 +
| 2 || 10.0.0.40 || [[Webcams|studiocam]] || Pan/Tilt Studio webcam
 +
|-
 +
| 2 ||<s>10.0.0.90</s> || <s>[[#Marvin|marvin]]</s> || <s>A4 Laser Printer</s>
 +
|-
 +
| 2 ||<s>10.0.0.91</s> || <s>[[#Clank|Clank]]</s> || <s>A3 Laser Printer</s>
 +
|-
 +
| 2 || <s>10.0.0.92</s> || <s>[[#B4|B4]]</s> || <s>A4 InkJet with Scanner</s>
 +
|-
 +
| 2 || 10.0.0.93 || [[Signmaker|Vinyl]] || [[Signmaker|Vinyl]]
 +
|-
 +
| 2 || 10.0.0.94 || [[Rosey]] || Epson WF-7610DWF
 +
|-
 +
| 2 || 10.0.0.95 || [[Bender]] || HP5550
 +
|-
 +
| 2 || 10.0.0.96 || Zebra_2844 || Label printer 
 +
|-
 +
| 2 || 10.0.0.97 ||[[Plotter]] || Plotter (HP DesignJet 600)
 +
|}(''coming soon...'') <br />
 +
 
 +
===VLAN 3===
 +
These are all statically assigned.
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
| 3 || 192.168.0.1 || [[Holly|Holly]] || Our primary server hosing hms and instrumentation things
 +
|-
 +
| 3 || <s>192.168.0.6</s> || <s>[[Holly|HollyVM]]</s> || <s>OLD server. </s>
 +
|-
 +
| 3 || 192.168.0.10 || [[Gatekeeper|gatekeeper]] || Access Control Arduino for upstairs inner (studio) door
 +
|-
 +
| 3 || 192.168.0.11 || [[LED_Matrix|MatrixMQTT]] || BIG LED Matrix Display Arduino
 +
|-
 +
| 3 || 192.168.0.12 || [[Vending_Machine|Vending Machine]] || RFID cashless payment nanode in snack vending machine
 +
|-
 +
| 3 || 192.168.0.13 || [[Mini-matrix|Mini-matrix]] || Blue room mini-matrix display nanode
 +
|-
 +
| <s>3</s> || <s>''192.168.0.14''</s> || <s>[[Wall of Faces]]</s> || <s>''Wall of members faces''</s>
 +
|-
 +
| 3 || 192.168.0.15 || [[Lighting Automation|ClassRoomController]] || Lighting Controller (ClassRoomController) (B8:FC:BF:87:52:65)
 +
|-
 +
| 3 || 192.168.0.16 || [[Lighting Automation|Workshop Controller]] || Lighting Controller (Workshop) (b8:fc:bf:87:52:67)
 +
|-
 +
| 3 || 192.168.0.17 || [[Lighting Automation|Studio Controller]] || Lighting Controller (Studio)  (b8:fc:bf:87:52:69)
 +
|-
 +
| 3 || <s>''192.168.0.18''</s> || <s>[[Lighting Automation|Workshop Switch Panel]]</s> || <s>''Lighting Switch's (Workshop)''</s>
 +
|-
 +
| 3 || 192.168.0.19 || WorkshopMQTT || Workshop Bell and Temp Node
 +
|-
 +
| 3 || 192.168.0.20 || [[CoinAcceptor]] || Coin acceptor for [[Snackspace]] / [[Vending_Machine|Vending Machine]] payments
 +
|-
 +
| 3 || 192.168.0.21 || [[NoteAcceptor]] || Note acceptor for [[Snackspace]] / [[Vending_Machine|Vending Machine]] payments
 +
|-
 +
| 3 || 192.168.0.22 || [[Laser_cutter|laser]] ||[[Nhtools|Laser RFID]]
 +
|-
 +
| 3 || 192.168.0.23 || [[3D Printer]] ||[[Nhtools|3D Printer RFID]]
 +
|-
 +
| 3 || 192.168.0.24 || [[Laser Display]] || LED display near laser cutter
 +
|-
 +
| 3 || 192.168.0.25 || [[Queeg]] || Hollys backup
 +
|-
 +
| 3 || 192.168.0.26 || [[Embroidery Machine]] || [[Nhtools|Embroidery machine RIFD]]
 +
|-
 +
| 3 || 192.168.0.27 || [[Lighting Automation|CNCRoomController]] || Lighting Controller (CNCRoomController) (B8:FC:BF:87:52:64)
 +
|-
 +
| 3 || 192.168.0.28 || [[Gatekeeper|Gatekeeper-4]] || CNC Corridor Access (1C:E3:0D:02:6A:4D)
 +
|-
 +
| 3 || 192.168.0.29 || [[Gatekeeper|Gatekeeper-6]] || Communal door (L) / blue room (1C:E3:0D:02:6A:4E)
 +
|-
 +
| 3 || 192.168.0.30 || Can machine || Can vending machine in studio (DE:ED:BA:FE:FE:11)
 +
|-
 +
| 3 || 192.168.0.31 || [[Gatekeeper|Gatekeeper-3]] || Workshop (upstairs backdoor) (1C:E3:0D:02:6A:4F)
 +
|-
 +
| 3 || 192.168.0.32 || G5 Doorbell || Doorbell/temperature node (DE:ED:BA:FE:62:12)
 +
|-
 +
| 3 || 192.168.0.33 || VIKI || RaspberryPi WirelessThings MessageBridge
 +
|-
 +
| 3 || 192.168.0.34 || [[Gatekeeper|Gatekeeper-7]] || Communal door (R) / downstairs metalworking (1C:E3:0D:02:6A:50)
 +
|-
 +
| 3 || 192.168.0.35 || [[Gatekeeper|Gatekeeper-8]] || Downstairs members storage (1C:E3:0D:02:6A:51)
 +
|-
 +
| 3 || 192.168.0.36 || Classroom doorbell || Classroom doorbell (DE:ED:BA:FE:62:14)
 +
|-
 +
| 3 || 192.168.0.37 || [[Anycubic Photon]] ||[[Nhtools|SLA 3D printer RFID]] (1C:E3:0D:02:6A:52)
 +
|-
 +
| 3 || 192.168.0.38 || [[Greyfin A2 Laser Cutter]] ||[[Nhtools|A2 Laser RFID]] (1C:E3:0D:02:6A:53)
 +
|-
 +
| 3 || 192.168.0.128/25 (129-254) || Queen || Docker instrumentation network pool
 +
 
 +
|}(''coming soon...'')
 +
 
 +
===VLAN 6===
 +
Direct network between Unimatrix and Locutus used for HDD replication<br/>
 +
These are all statically assigned.
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
| 6 || 192.168.6.1 || [[Collective#Unimatrix|Unimatrix]] ||
 +
|-
 +
| 6 || 192.168.6.2 || [[Collective#Locutus|Locutus]] ||
 +
|-
 +
<!--
 +
| 8 || 192.168.6.3 || [[Collective#Queen|Queen]] || Reserved Not connected
 +
|-
 +
-->
 +
|}
 +
 
 +
===VLAN 7===
 +
Direct network between Unimatrix and Queen used for VM Backups<br/>
 +
These are all statically assigned.
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
| 7 || 192.168.7.1 || [[Collective#Unimatrix|Unimatrix]] ||
 +
|-
 +
<!--
 +
| 7 || 192.168.7.2 || [[Collective#Locutus|Locutus]] || Reserved Not connected
 +
|-
 +
-->
 +
| 7 || 192.168.7.3 || [[Collective#Queen|Queen]] ||
 +
|}
 +
 
 +
===VLAN 8===
 +
Direct network between Locutus and Queen used for VM Backups<br/>
 +
These are all statically assigned.
 +
{| class="wikitable"
 +
|-
 +
! VLAN
 +
! IP
 +
! DNS Name
 +
! Notes
 +
|-
 +
<!--
 +
| 8 || 192.168.8.1 || [[Collective#Unimatrix|Unimatrix]] || Reserved Not connected
 +
|-
 +
-->
 +
| 8 || 192.168.8.2 || [[Collective#Locutus|Locutus]] ||
 +
|-
 +
| 8 || 192.168.8.3 || [[Collective#Queen|Queen]] ||
 +
|}
  
 
== External Port Routing ==
 
== External Port Routing ==
Line 19: Line 343:
 
! Notes
 
! Notes
 
|-
 
|-
−
| HTTP
+
| HTTP || 80 || 80 || 10.0.0.14 || Webserver on [[Holly]]
−
| 80
+
|-
−
| 80
+
| HTTPS || 443 || 443 || 10.0.0.14 || HMS SSL Webserver on [[Holly]]
−
| 10.0.0.2
+
|-
−
| Webserver on [[Holly]]
+
| SSH || 1922 || 22 || 10.0.0.18 || SSH on [[Collective#Unimatrix|Unimatrix]] (lspace.nottinghack.org.uk)
 +
|-
 +
| SSH || 3000 || 22 || 10.0.0.4 || SSH on [[JARVIS]] (jarvis.nottinghack.org.uk)
 +
|-
 +
| RTP || 10000-20000 || 10000-20000  || 10.0.0.27 || Asterisk/RTP on PBX
 +
|-
 +
| SIP || 5060 || 5060  || 10.0.0.27 || Asterisk/SIP on PBX
 +
|}
 +
 
 +
== Switch port assignments ==
 +
<!--
 +
=== Netgear Prosafe FS728x ===
 +
The switch in the members storage room is a Netgear FS728TP (24x 100mbit with [http://en.wikipedia.org/wiki/Power_over_Ethernet POE] + 4x gbit ports), the switch in the workshop is FS728TS (same, but with no POE). As far as possible, both switches should have identical configuration; I.e. if the studio switch fails, the workshop switch should be a drop in replacement.
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e6 || 3 || [[HackSpace_Instrumentation|Instrumentation projects]]
 +
|-
 +
| e7 || 4 || Able (VDSL Modem)
 +
|-
 +
| e8|| 1,2,3 || Data/Lore (WAP)
 +
|-
 +
| e9-e10 || 3 || [[HackSpace_Instrumentation|Instrumentation projects]]
 +
|-
 +
| e11 || all || [[Queeg]]
 +
|-
 +
| e12 || 2 ||  <s>Thomson ST2020 SIP phone in blue room</s>
 
|-
 
|-
−
| SSH
+
| e13-e14 || 2 || Main hackspace network
−
| 1921
+
|-
−
| 22
+
| e15 || N || Do Not Use
−
| 10.0.0.2
+
|-
−
| SSH on [[Holly]]
+
| e16-19 || 3 ||  [[HackSpace_Instrumentation|Instrumentation projects]]
 +
|-
 +
| e20 || 2u || Main hackspace network
 +
|-
 +
| e21 || 1u || UPS 1of3
 +
|-
 +
| e22 || 1u ||
 +
|-
 +
| e23 || 1u,2t,3t,5t ||
 +
|-
 +
| e24 || 2u ||
 +
|-
 +
| g1 || all || [[Collective]]
 +
|-
 +
| g2 || 2 || <s>Gigabit switch on Blue room table</s>
 +
|-
 +
| g3 || 1,2,3,5 || Dell PowerConnect 2724
 +
|-
 +
| g4 || all || ''other'' switch (FS728TP or FS728TS)
 
|}
 
|}
  
−
== Static IP's ==
+
=== Dell PowerConnect 2724 ===
−
These are assigned via DHCP/MAC using [[#Kryten|Kryten]]
+
The Dell switch is in the members storage room, just above collective. It is connected to the Netgear FS728TP and to most of the Studio network sockets.
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e23 || 2 || Main hackspace network
 +
|-
 +
| e5 || U1,2,3,5 || Locutus/Queen
 +
|-
 +
| e9 || U1,2,3,5 || Locutus/Queen
 +
|-
 +
| e24 || 1,2,3,5 || Netgear FS728TP
 +
|}
 +
-->
 +
=== 1of9 ProCurve 2824 (J4903A) ===
 +
Located in the upstairs members storage, this is the core switch that all others connect to
  
 
{| class="wikitable"
 
{| class="wikitable"
 
|-
 
|-
−
! IP
+
! Port
−
! DNS Name
+
! VLAN
 +
! Comments
 +
|-
 +
| g1 || 1u || Management access
 +
|-
 +
| g2 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Downlink trunk (A25) - FS728TS / ws-switch
 +
|-
 +
| g3 || 5u || Instrumentation test
 +
|-
 +
| g4 || 4u || Modem (Able)
 +
|-
 +
| g5 || 2u || Main hackspace network (kryten SG-1100)
 +
|-
 +
| g6 || 2u || Main hackspace network (Queeg)
 +
|-
 +
| g7 || 2u || Main hackspace network
 +
|-
 +
| g8 || 3u || Instrumentation (Queeg)
 +
|-
 +
| g9 || 2u || Main hackspace network
 +
|-
 +
| g10 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Trunk (Queeg)
 +
|-
 +
| g11 || 2u || Main hackspace network
 +
|-
 +
| g12 || 1t, 2u || (dorian)
 +
|-
 +
| g13 || 1u, 2t || WiFi (POE > A34)
 +
|-
 +
| g14 || 1u || 1of3 UPS
 +
|-
 +
| g15|| 1u, 2t, 3t, 4t, 5t, 8t || Server (Unimatrix)
 +
|-
 +
| g16|| 1u, 2t, 3t, 4t, 5t || Server (Queen)
 +
|-
 +
| g17|| 1u, 2t, 3t, 4t, 5t || Server (Locutus)
 +
|-
 +
| g18 || 6t || [[Collective#Unimatrix|Unimatrix]]<->[[Collective#Locutus|Locutus]] direct network
 +
|-
 +
| g19 || 7u || [[Collective#Queen|Queen]]<->[[Collective#Unimatrix|Unimatrix]] direct network (temp virgin to blue room switch on B15-7t)
 +
|-
 +
| g20 || 8u || [[Collective#Queen|Queen]]<->[[Collective#Locutus|Locutus]] direct network (temp  virgin to kryton-uni)
 +
|-
 +
| g21 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Downlink trunk (2of9)
 +
|-
 +
| g22 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Downlink trunk (3of9)
 +
|-
 +
| g23 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Downlink trunk (4of9)
 +
|-
 +
| g24 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || <s>Downlink trunk (5of9)</s>
 +
|}
 +
 
 +
=== 2of9 ProCurve 2650-48 (J4899B) ===
 +
Located in the CNC room cabinet, this switch servers the Blue room, CNC room and Team storage
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e32 || 2u || Main hackspace network
 +
|-
 +
| e33-e40 || 3u || Instrumentation
 +
|-
 +
| e41-e42 || 1u, 2t || Wifi
 +
|-
 +
| e43 || 3u || Instrumentation
 +
|-
 +
| e44 || 4u || Modem
 +
|-
 +
| e45 || 5u || Instrumentation test
 +
|-
 +
| e46 || 6t || [[Collective#Unimatrix|Unimatrix]]<->[[Collective#Locutus|Locutus]] direct network
 +
|-
 +
| e47 || 7t || [[Collective#Queen|Queen]]<->[[Collective#Unimatrix|Unimatrix]] direct network
 +
|-
 +
| e48 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (4of9, backup)
 +
|-
 +
| g49 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (1of9)
 +
|-
 +
| g50 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Server trunk
 +
|}
 +
 
 +
=== 3of9 ProCurve 2650-48 (J4899B) ===
 +
Located in upstairs members storage, this switch serves the Comfy area, Studio, Craft Room and Kitchen
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e9 || 2u || Main hackspace network
 +
|-
 +
| e10 || 3u || Instrumentation (Can Vend)
 +
|-
 +
| e11 || 2u || Main hackspace network
 +
|-
 +
| e12 || 3u || Instrumentation (Snack Vend)
 +
|-
 +
| e13|| 2u || Main hackspace network
 +
|-
 +
| e14 || 3u || Instrumentation (Gatekeeper)
 +
|-
 +
| e15 || 2u || Main hackspace network
 +
|-
 +
| e16 || 3u || Instrumentation (MatrixMQTT)
 +
|-
 +
| e17 || 2u || Main hackspace network
 +
|-
 +
| e18 || 3u || Instrumentation (miniMatrix)
 +
|-
 +
| e19-e24 || 2u || Main hackspace network
 +
|-
 +
| e25 || 2u || Main hackspace network (auto-10)
 +
|-
 +
| e26-e29 || 2u || Main hackspace network
 +
|-
 +
| e30 || 3u || Instrumentation (Coin Acceptor)
 +
|-
 +
| e31-32 || 2u || Main hackspace network
 +
|-
 +
| e33 || 3u || Instrumentation (Embroidery Machine)
 +
|-
 +
| e34-37 || 2u || Main hackspace network
 +
|-
 +
| e38 || 3u || Instrumentation (Note Acceptor)
 +
|-
 +
| e39-41 || 2u || Main hackspace network
 +
|-
 +
| e42 || 3u ||  Instrumentation (A2 Laser RFID)
 +
|-
 +
| e43-48 || 2u || Main hackspace network
 +
|-
 +
| g49 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (1of9)
 +
|-
 +
| g50 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Server trunk
 +
|}
 +
 
 +
=== 4of9 ProCurve 2650-48 (J4899C) ===
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e32 || 2u || Main hackspace network
 +
|-
 +
| e33-e40 || 3u || Instrumentation
 +
|-
 +
| e41-e42 || 1u, 2t || Wifi
 +
|-
 +
| e43 || 3u || Instrumentation
 +
|-
 +
| e44 || 4u || Modem
 +
|-
 +
| e45 || 5u || Instrumentation test
 +
|-
 +
| e46 || 6t || [[Collective#Unimatrix|Unimatrix]]<->[[Collective#Locutus|Locutus]] direct network
 +
|-
 +
| e47 || 7t || [[Collective#Queen|Queen]]<->[[Collective#Unimatrix|Unimatrix]] direct network
 +
|-
 +
| e48 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (2of9, backup)
 +
|-
 +
| g49 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (1of9)
 +
|-
 +
| g50 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Downlink trunk (5of9)
 +
|}
 +
 
 +
=== 5of9 ProCurve 2650-48 (J4899B) ===
 +
 
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e5 || 2u || Main hackspace network
 +
|-
 +
| e6 || 1u, 2t || Wifi
 +
|-
 +
| e7-e48 || 2u || Main hackspace network
 +
|-
 +
| g49 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Uplink trunk (4of9)
 +
|-
 +
| g50 || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Server trunk
 +
|}
 +
 
 +
=== ws-switch Netgear FS728TS ===
 +
Located in the workshop.
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Port
 +
! VLAN
 +
! Comments
 +
|-
 +
| e1-e6 || 3u || Instrumentation
 +
|-
 +
| e7 || 4u || Do not use.
 +
|-
 +
| e8 || 1u, 2t, 3t, 5t || Lore/Wifi AP
 +
|-
 +
| e9-e10 || 5u || Instrumentation test
 +
|-
 +
| e11-e24|| 2u || Main hackspace network
 +
|-
 +
| g1 || 1u, 2t, 3t, 4t, 5t || (spare)
 +
|-
 +
| g2 || 1u, 2t, 3t, 4t, 5t || Uplink trunk (1of9)
 +
|}
 +
 
 +
== Patch Panels ==
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Name
 +
! Location
 +
! Area served
 +
|-
 +
| [[Network/Patch_Panel_A]] || Upstairs Member Storage || Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage
 +
|-
 +
| [[Network/Patch_Panel_B]] || CNC Room Cabinet || Down stairs: Blue Room, CNC room, CNC corridor, Team Storage
 +
|-
 +
| [[Network/Patch_Panel_C]] || Upstairs Member Storage || Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage
 +
|-
 +
| [[Network/Patch_Panel_D]] || Downstairs Member Storage || Down stairs: Class Room, Metalworking room, Corridor, Members Storage
 +
|-
 +
| [[Network/Patch_Panel_E]] || Downstairs Member Storage || Down stairs: Class Room, Metalworking room, Corridor, Members Storage
 +
|}
 +
 
 +
Patch cable colour coding
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Colour
 +
! Vlan Tagging
 
! Notes
 
! Notes
 
|-
 
|-
−
| 10.0.0.1
+
| Purple || 2u || Main hackspace network
−
| [[#Kryten|kryten]]
+
|-
−
| Router
+
| Green || 3u || Instrumentation
 +
|-
 +
| Blue || 1u, 2t || Wifi
 +
|-
 +
| Red || Mixed || Warning check wiki for actual config details
 +
|-
 +
| Black || ||
 +
|-
 +
| Pink || 4u || Modem
 +
|-
 +
| Yellow || 5u || Instrumentation test
 +
|-
 +
| White || 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t || Trunk
 +
|-
 +
| Orange || 1u, 2t, 3t, 4t, 5t ||  Server
 
|-
 
|-
−
| 10.0.0.2
+
| Brown || | 6u | 7u | 8u || Server direct links
−
| [[Holly|holly]]
 
−
| Our always on server
 
 
|-
 
|-
−
| 10.0.0.90
 
−
| [[#Marvin|marvin]]
 
−
| Laser Printer
 
 
|}
 
|}
  
−
== [http://en.wikipedia.org/wiki/Kryten Kryten] ==
+
== Server Naming ==
−
Kryten is Linksys WRT54GL running DD-WRT VPN Build, he handles all our DHCP, routing from the external world and WiFi.
+
See [[Network/Naming|here]] for our naming convention
  
−
Kryten has a 4 port switch - [[Holly]] takes 1, [[#Marvin|Marvin]] takes 1 & the external switches take 2, leaving 8 ports on the external switches available.
+
== UPS Power ==
  
−
WiFi for Hackspace SSID: '''HSNOTTS''' passcode uses WPA2 protocol AES encryption.  Members only, passcode on request, changes to the passcode will be posted to the members only Google group.
+
The important infrastructure runs off 3 UPS's, each one is an APC Dell Smart UPS 5000 DL5000RMI5U.
  
−
WiFi for workshops will be setup as '''HSNOTTS_OPEN''' and only be available when needed passcode will be provided on the day and this will run on a seperate VLAN.  
+
{| class="wikitable"
 +
|-
 +
! Name
 +
! Management IP
 +
! Location
 +
! Equipment served
 +
! Notes
 +
|-
 +
| One of Three || 192.168.1.13<br/>00:C0:B7:74:D5:55 || Upstairs Member Storage || Unimatrix, Queen (temporary),  Locutus (temporary), Queeg, Dorian<br/> 1of9, 3of9, Lal, Able,<br/> HS2.0 Gatekeeper, MatrixMQTT, Mini-matrix, CoinAcceptor,  || In service since ~03/13<br/> Batteries replaced 4/12/14 <br/> [https://cacti.nottinghack.org.uk/graph_view.php?action=tree&tree_id=1&leaf_id=30&nodeid=node1_30&host_group_data= Cacti Graphs]
 +
|-
 +
| Two of Three || 192.168.1.23<br/>00:C0:B7:66:65:99 || Team Storage || Queen (Once relocated), VIKI<br/> 2of9, 4of9 (temporary), 5of9 (temporary), B-4 <br/> CNCRoom lighting automation, CNC corridor Gatekeeper, Blue room Gatekeeper, Team storage Gatekeeper || In service since 24/11/17<br/> New Batteries fitted 24/11/17 <br>Relay Fault as of 09/26/2018<br/> [https://cacti.nottinghack.org.uk/graph_view.php?action=tree&tree_id=1&leaf_id=33&nodeid=node1_33&host_group_data= Cacti Graphs]
 +
|-
 +
| Three of Three || 192.168.1.33<br/>00:C0:B7:D5:89:A3<br/> || Downstairs Members Storage ||Locutus (Once relocated),<br/> 4of9 (Once relocated), 5of9 (Once relocated), Data (Once relocated)<br/> Corridor lighting automation, Metalworking lighting automation, Corridor Gatekeeper, Front door Gatekeeper, Members storage Gatekeeper  || Not yet in service<br/> New Batteries fitted xx/xx/xx<br> [https://cacti.nottinghack.org.uk/graph_view.php?action=tree&node=tbranch-153&host_id=63&site_id=-1&host_template_id=-1&hgd=&hyper=true Cacti Graphs]
 +
|}
 +
 
 +
= Network Devices=
 +
=== Able ===
 +
Able is Kryten's brother the <s>BT Openreach VDSL</s> VirginMedia modem that talks to the outside world. <br/>
  
−
The Nottinghack VLAN has access to local resources - e.g. a future NAS file-share , a local dropbox server for projects & collaborations, a backup of all Web / Wiki files (to allow a remote restore in the event of moving hosts / outage of services) and anything else we don't want to be web facing.
+
=== [http://en.wikipedia.org/wiki/Kryten Kryten] ===
  
−
The VPN (when enabled) would allow remote management of the VLANS, which could come in handy in the event of issues with the client WiFi access point.
+
Kryten is a <s>VM on [[Collective#Unimatrix|Unimatrix]]</s> Netgate SG-1100 running [http://www.pfsense.org pfSense], it handles all our DHCP, local DNS and routing from the external world.<br/>
 +
It is connected to VLAN 4 for access to Able, and VLAN 2 for the main hackspace network.
  
−
Router management username & password only for Authorised members only. If there something you need changing ask on the member group or speak to [[User:Lwk|'RepRap' Matt]] or [[User:Tony_S|Tony]]
+
The Nottinghack VLAN has access to local resources - e.g. a samba file-share on [[JARVIS]], a future local dropbox server for projects & collaborations, a backup of all Web / Wiki files (to allow a remote restore in the event of moving hosts / outage of services) and anything else we don't want to be web facing.<br/>
 +
 
 +
The VPN (when enabled) would allow remote management of the VLANS, which could come in handy in the event of issues with the client WiFi access point.<br/>
 +
 
 +
Router management username & password for Authorised members only. If there something you need changing ask on the google group or speak to [[User:Lwk|'RepRap' Matt]] or [[User:Daniel|Daniel]] directly<br/>
  
 
Usual rules apply, as to any tool - if you don't know how to use it / don't do anything :)
 
Usual rules apply, as to any tool - if you don't know how to use it / don't do anything :)
  
 +
====OpenVPN====
 +
 +
'''Not currently running and not for member access'''<br/>
 +
Kryten runs our openVPN server for access to the hackspace network from the outside world.<br/>
 +
 +
For more details see the [[Network/VPN|VPN]] page
 +
 +
=== WiFi ===
 +
There are three WiFi networks:
 +
 +
==== HSNOTTS ====
 +
WiFi for Hackspace SSID: '''HSNOTTS''' passcode uses WPA2 protocol AES encryption. Members only, passcode on request, changes to the passcode will be emailed to members only.<br/>
 +
 +
==== HSNOTTS_GUEST ====
 +
WiFi for guests is setup as '''HSNOTTS_GUEST''' and passcode can be provided and this will (possibly at some point) run on a separate VLAN. <br/>
 +
 +
==== [https://spacefed.net/index.php?title=Spacenet spacenet] ====
 +
Cross-hackspace wireless network, using WPA2 Enterprise. Login using: <br />
 +
Username: ''&lt;[[HMS]]-username&gt;''@nottinghack.org.uk <br />
 +
Password: ''&lt;[[HMS]]-password&gt;'' <br />
 +
 +
For more details, see [[spacenet]].
 +
 +
=Servers=
 +
 +
===[[Collective|The Collective]]===
 +
These are 3 HP N40L MicroServers that run the VMs within the space and act as our database cluster<br>
 +
See [[Collective]]
 +
 +
====[[Collective#Unimatrix|Unimatrix]]====
 +
Primary VM host<br>
 +
Hosts <s>Kryten</s>, Holly and Gibson
 +
 +
=====Kryten=====
 +
Netgate SG-1100 PfSense as Internet gateway and DHCP/DNS server
 +
 +
=====Holly=====
 +
Our main workhorse vm, runs HMS and all the instrumentation programs<br>
 +
See [[Holly]]
 +
 +
=====Gibson=====
 +
Our password store<br>
 +
 +
====[[Collective#Locutus|Locutus]]====
 +
Secondary VM host<br>
 +
Hosts JARVIS and Rommie
 +
=====JARVIS=====
 +
Provides Samba file server, CUPS print server and member shell accounts<br>
 +
See [[JARVIS]]
 +
 +
=====Rommie=====
 +
Staging server for HMS code dev
 +
 +
====[[Collective#Queen|Queen]]====
 +
Backup Server<br>
 +
Does not host any VM's<br>
 +
Hosts Docker services nh-lighting and nh-nodered
 +
 +
 +
===[[Queeg]]===
 +
Fail over Monowall PC, its not much but it can keep GateKeeper running in a pinch
 +
 +
===[[Dorian]]===
 +
RPi3 running our UniFi controller
 +
 +
===[[Andromeda]]===
 +
This is our offsite server, hosted at Linode it run the main website, wiki, talk, and emails.<br>
 +
See [[Andromeda]]
 +
 +
===OS Versions===
 +
 +
Debian is our preferred OS for servers
 +
 +
{| class="wikitable"
 +
|-
 +
! Server !! Version !! Code Name
 +
|-
 +
| Andromeda || 9.x || Stretch
 +
|-
 +
| Unimatrix || 10.x || Buster
 +
|-
 +
| Locutus || 10.x || Buster
 +
|-
 +
| Queen || 10.x || Buster
 +
|-
 +
| Holly || 9.x || Stretch
 +
|-
 +
| Gibson || 10.x || Buster
 +
|-
 +
| JARVIS || 7.x || Wheezy
 +
|-
 +
| JARVIS-stretch || 9.x || Stretch
 +
|-
 +
| Rommie || 10.x || Buster
 +
|-
 +
| Ziggy || 10.x || Buster
 +
|-
 +
| Dorian || 9.x || Stretch (raspbian)
 +
|-
 +
| Viki || 9.x || Stretch (raspbian)
 +
|-
 +
|}
 +
 +
=Genral Use PC=
 +
===[[Quorra]]===
 +
A workstation with dual heads, Quorra is available for all members to use.
 +
 +
===[[Fey]]===
 +
General-use windows PC in the blue room,aimed at CAD work and anything else requiring a reasonably beefy GPU.
  
 +
===<s>[[WOPR]]</s>===
 +
<s>Another general-use PC in the blue room, by the window</s>
  
−
== [http://en.wikipedia.org/wiki/Marvin_the_Paranoid_Android Marvin] ==
+
=Printers=
−
Marvin the Paranoid Android
+
For more details, see [[Printers]].
−
<blockquote>According to Marvin, "The first ten million years were the worst, and the second ten million years, they were the worst too. The third ten million I didn't enjoy at all. After that I went into a bit of a decline." Apparently, the best conversation he'd had was over 40 million years ago, and that was with a coffee machine.</blockquote>
 
  
−
The HP Laserjet 4 Plus is set up on 10.0.0.90 as marvin.
+
=== Bender ===
 +
The HP Color Laserjet HP5550 is set up on 10.0.0.95 as [[Bender]].<br/>
 +
The printer feeds A4 paper from tray 2 and A3 paper from tray 3.<br/>
 +
A duplexer is installed enabling double-sided printing.<br/>
 +
Bender is shared on [[JARVIS]], so should be auto-detected by Linux machines.
  
−
We have a few spare toners but donations towards paper usage are more than welcome.
+
=== Rosey ===
 +
[[Rosey]] is an Epson WF-7610DWF printer/scanner set up on 10.0.0.94. The scanner/printer should be auto-detected by most Linux/Mac machines, and is known to work from [[Quorra]] using Xsane.
  
 +
=== Plotter ===
 +
The HP DesignJet 600 plotter is called [[Plotter]]. It is connected to the network at 10.0.0.97. Network operation is unconfirmed.
  
−
== [http://nottinghack.org.uk Nottinghack.org.uk] ==
+
=Websites=
−
The main Nottinghack website is run for a dedicated linux server located in Florida provided by [[User:Lwk|'RepRap' Matt]]
+
{{also|Website}}
 +
DNS record looked after by [[User:Lwk|'RepRap' Matt]]
  
−
This hosts the [http://nottinghack.org.uk Wordpress blog], [http://wiki.nottinghack.org.uk this wiki], [http://planet.nottinghack.org.uk the Nottinghack Planet], and all the external DNS recordes for Nottinghack domains, we have nottinghack.[org.uk|co.uk|com]
+
=== [http://nottinghack.org.uk Nottinghack.org.uk] ===
 +
 
 +
The main Nottinghack websites are run form [[Andromeda]].
 +
 
 +
This hosts the [http://nottinghack.org.uk Wordpress blog], [http://wiki.nottinghack.org.uk this wiki], [http://planet.nottinghack.org.uk the Nottinghack Planet]
  
 
The [[Twitterbot]] for @HSNOTTS is also hosted on on this server.
 
The [[Twitterbot]] for @HSNOTTS is also hosted on on this server.
  
−
== HackSpace Instrumentation ==
+
===[http://lspace.nottinghack.org.uk lspace.nottinghack.org.uk]===
 +
 
 +
Hosted locally at the space on [[Holly]] <br/>
 +
 
 +
Includes:
 +
* [http://lspace.nottinghack.org.uk/addr_graphs/ Graph] showing connected network device count
 +
 
 +
===[http://hms.nottinghack.org.uk Hackspace Management System]===
 +
The Hackspace Management System<br/>
 +
Hosted locally at the space on [[Holly]] <br/>
 +
see [[HMS]]
 +
 
 +
===[http://cacti.nottinghack.org.uk/graph_view.php cacti.nottinghack.org.uk]===
 +
 
 +
Also hosted locally on [[Holly]] this provides graphing of various stats and info (mostly temperature graphs) from the hackspace instrumentation
 +
 
 +
===https://holly/===
 +
 
 +
Our intranet, only accessible from the hackspace network
 +
 
 +
= HackSpace Instrumentation =
 
The Network and [[Holly]] provide the backbone to our [[HackSpace Instrumentation]] projects.
 
The Network and [[Holly]] provide the backbone to our [[HackSpace Instrumentation]] projects.
  
−
== Naming ==
+
= Domains =
−
See [[Network/Naming|here]] for our naming convention
+
The hackspace maintains a number of domain name tho .org.uk is our most used, almost all our sites can be access via the other TLD's
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Domain
 +
! Registrar
 +
! Description
 +
|-
 +
| nottinghack.org.uk || [https://lcn.com LCN] ||
 +
|-
 +
| nottinghack.org || [https://lcn.com LCN] ||
 +
|-
 +
| nottinghack.co.uk || [https://lcn.com LCN] ||
 +
|-
 +
| nottinghack.uk || [https://lcn.com LCN] ||
 +
|-
 +
| nottinghack.space || [https://webhosting.uk.com WHUK] ||
 +
|}
 +
 
 +
DNS records for all are hosted by [https://cloudns.net ClouDNS]
 +
 
 +
=Other Info=
  
  
Line 99: Line 920:
 
See [[Network/Equipment|here]] for a list of our other network gear
 
See [[Network/Equipment|here]] for a list of our other network gear
  
−
[[Category:Hackspace]]
 
 
[[Category:Network]]
 
[[Category:Network]]
−
[[Category:Website]]
+
[[Category:Infrastructure]]

Revision as of 07:10, 20 October 2021

Upstairs Members Storage Network.jpeg

This page gives the details of the space's network and connected devices. The Network and Servers team maintain and look after the network.

Network Layout

This page will show the network topology & proposals for network expansion / modification.

A
Hackspace Network

External Virgin IP address
80.235.226.218 (lspace.nottinghack.org.uk, hms. etc)
80.235.226.219 (jarvis.nottinghack.org.uk)
80.235.226.220 (rommie.nottinghack.org.uk)
Virgin IP's not yet used
80.235.226.221
80.235.226.222

External domain address lspace.nottinghack.org.uk (DNS record looked after by 'RepRap' Matt)

Static & Reserved IP's

There are a few VLANs:

VLAN Network Description
1 192.168.1.0/24 Default (management network)
2 10.0.0.0/24 Main Hackspace network
3 192.168.0.0/24 Instrumentation projects
4 - Able / ADSL Modem (PPPoE)
5 192.168.0.0/24 Instrumentation test (Rommie)
6 192.168.6.0/24 Unimatrix<->Locutus direct network
7 192.168.7.0/24 Queen<->Unimatrix direct network
8 192.168.8.0/24 Queen<->Locutus direct network

The following ranges are reserved for there given purpose:

Start End Purpose
10.0.0.1 10.0.0.1 kryten The Main Router
10.0.0.2 10.0.0.79 Static things
10.0.0.80 10.0.0.89 openVPN DHCP pool
10.0.0.90 10.0.0.99 Static Printers
10.0.0.100 10.0.0.254 DHCP Range
10.0.0.255 10.0.0.255 Broadcast
192.168.0.1 192.168.0.100 Static HackSpace Instrumentation


VLAN 1

These are all statically assigned.

VLAN IP DNS Name Notes
1 192.168.1.1 HollyVM Our primary server hosing hms and instrumentation things
1 192.168.1.2 ws-switch Workshop switch
1 192.168.1.3 Lore Workshop Wifi AP
1 192.168.1.4 st-switch Studio/BlueRoom switch
1 192.168.1.5 Data WiFi AP for classroom (currently in storage)
1 192.168.1.6 Gibson Wifi RADIUS Server
1 192.168.1.7 studio-gbit Dell PowerConnect 2724 (24x gbit)
1 192.168.1.8 Queeg Hollys backup
1 192.168.1.9 Unimatrix
1 192.168.1.10 Locutus
1 192.168.1.11 Queen
1 192.168.1.12 Holly (on Unimatrix)
1 192.168.1.13 1of3 (APC UPS) Upstairs members storage
1 192.168.1.19 1of9 (HP 2824) Upstairs members storage (Core switch)
1 192.168.1.23 2of3 (APC UPS) Team storgare
1 192.168.1.29 2of9 (HP 2650-48) CNCRoom Switch
1 192.168.1.30 Dorian Raspberry Pi UniFi controller
1 192.168.1.33 3of3 (APC UPS) Downstairs members storage
1 192.168.1.34 B-4 CncRoom Wifi Ap
1 192.168.1.44 Lal New Studio Wifi Ap (AC)
1 192.168.1.39 3of9 (HP 2650-48) Upstairs members storage
1 192.168.1.49 4of9 (HP 2650-48) Downstairs members storage (Classroom Side)
1 192.168.1.59 5of9 (HP 2650-48) Downstairs members storage (Metalworking Side)

VLAN 2

These are assigned via DHCP/MAC using Kryten or set statically on the device

VLAN IP DNS Name Notes
2 10.0.0.1 Kryten pfSense router on Collective
2 10.0.0.2 HollyVM Our primary server hosing hms and instrumentation things (Squeeze under KVM)
2 10.0.0.4 JARVIS Sandbox Debian VM open for all members
2 10.0.0.5 Rommie HMS Development VM
2 10.0.0.6 JARVIS-stretch Sandbox Debian VM open for all members
2 10.0.0.7 Zyxel Additional Wifi AP (channel 1)
2 10.0.0.10 Collective ESXi Management Server
2 10.0.0.11 Samaritan Monitoring server
2 10.0.0.12 Queeg Hollys backup
2 10.0.0.14 Holly Our primary server hosing hms and instrumentation things (Jessie under KVM)
2 10.0.0.15 Gibson Wifi RADIUS Server
2 10.0.0.17 Unimatrix
2 10.0.0.18 Locutus
2 10.0.0.19 Queen
2 10.0.0.21 yoocnc YooCNC desktop
2 10.0.0.22 Quorra Quorra
2 10.0.0.23 Kiosk Kiosk PC (under 50" screen in blueroom). WIP.
2 10.0.0.24 Bishop Laptop for 3D printer
2 10.0.0.25 BarBot Pi in Project:BarBot
2 10.0.0.27 pbx Asterisk on bare metal
2 10.0.0.28 payphone RaspberryPi in the Payphone
2 10.0.0.29 Ziggy Git work shop vm
2 10.0.0.30 Dorian RaspberryPi based Unifi controller
2 10.0.0.33 VIKI RaspberryPi WirelessThings MessageBridge
2 10.0.0.40 studiocam Pan/Tilt Studio webcam
2 10.0.0.90 marvin A4 Laser Printer
2 10.0.0.91 Clank A3 Laser Printer
2 10.0.0.92 B4 A4 InkJet with Scanner
2 10.0.0.93 Vinyl Vinyl
2 10.0.0.94 Rosey Epson WF-7610DWF
2 10.0.0.95 Bender HP5550
2 10.0.0.96 Zebra_2844 Label printer
2 10.0.0.97 Plotter Plotter (HP DesignJet 600)

(coming soon...)

VLAN 3

These are all statically assigned.

VLAN IP DNS Name Notes
3 192.168.0.1 Holly Our primary server hosing hms and instrumentation things
3 192.168.0.6 HollyVM OLD server.
3 192.168.0.10 gatekeeper Access Control Arduino for upstairs inner (studio) door
3 192.168.0.11 MatrixMQTT BIG LED Matrix Display Arduino
3 192.168.0.12 Vending Machine RFID cashless payment nanode in snack vending machine
3 192.168.0.13 Mini-matrix Blue room mini-matrix display nanode
3 192.168.0.14 Wall of Faces Wall of members faces
3 192.168.0.15 ClassRoomController Lighting Controller (ClassRoomController) (B8:FC:BF:87:52:65)
3 192.168.0.16 Workshop Controller Lighting Controller (Workshop) (b8:fc:bf:87:52:67)
3 192.168.0.17 Studio Controller Lighting Controller (Studio) (b8:fc:bf:87:52:69)
3 192.168.0.18 Workshop Switch Panel Lighting Switch's (Workshop)
3 192.168.0.19 WorkshopMQTT Workshop Bell and Temp Node
3 192.168.0.20 CoinAcceptor Coin acceptor for Snackspace / Vending Machine payments
3 192.168.0.21 NoteAcceptor Note acceptor for Snackspace / Vending Machine payments
3 192.168.0.22 laser Laser RFID
3 192.168.0.23 3D Printer 3D Printer RFID
3 192.168.0.24 Laser Display LED display near laser cutter
3 192.168.0.25 Queeg Hollys backup
3 192.168.0.26 Embroidery Machine Embroidery machine RIFD
3 192.168.0.27 CNCRoomController Lighting Controller (CNCRoomController) (B8:FC:BF:87:52:64)
3 192.168.0.28 Gatekeeper-4 CNC Corridor Access (1C:E3:0D:02:6A:4D)
3 192.168.0.29 Gatekeeper-6 Communal door (L) / blue room (1C:E3:0D:02:6A:4E)
3 192.168.0.30 Can machine Can vending machine in studio (DE:ED:BA:FE:FE:11)
3 192.168.0.31 Gatekeeper-3 Workshop (upstairs backdoor) (1C:E3:0D:02:6A:4F)
3 192.168.0.32 G5 Doorbell Doorbell/temperature node (DE:ED:BA:FE:62:12)
3 192.168.0.33 VIKI RaspberryPi WirelessThings MessageBridge
3 192.168.0.34 Gatekeeper-7 Communal door (R) / downstairs metalworking (1C:E3:0D:02:6A:50)
3 192.168.0.35 Gatekeeper-8 Downstairs members storage (1C:E3:0D:02:6A:51)
3 192.168.0.36 Classroom doorbell Classroom doorbell (DE:ED:BA:FE:62:14)
3 192.168.0.37 Anycubic Photon SLA 3D printer RFID (1C:E3:0D:02:6A:52)
3 192.168.0.38 Greyfin A2 Laser Cutter A2 Laser RFID (1C:E3:0D:02:6A:53)
3 192.168.0.128/25 (129-254) Queen Docker instrumentation network pool

(coming soon...)

VLAN 6

Direct network between Unimatrix and Locutus used for HDD replication
These are all statically assigned.

VLAN IP DNS Name Notes
6 192.168.6.1 Unimatrix
6 192.168.6.2 Locutus

VLAN 7

Direct network between Unimatrix and Queen used for VM Backups
These are all statically assigned.

VLAN IP DNS Name Notes
7 192.168.7.1 Unimatrix
7 192.168.7.3 Queen

VLAN 8

Direct network between Locutus and Queen used for VM Backups
These are all statically assigned.

VLAN IP DNS Name Notes
8 192.168.8.2 Locutus
8 192.168.8.3 Queen

External Port Routing

Service External Port Internal Port Internal IP Notes
HTTP 80 80 10.0.0.14 Webserver on Holly
HTTPS 443 443 10.0.0.14 HMS SSL Webserver on Holly
SSH 1922 22 10.0.0.18 SSH on Unimatrix (lspace.nottinghack.org.uk)
SSH 3000 22 10.0.0.4 SSH on JARVIS (jarvis.nottinghack.org.uk)
RTP 10000-20000 10000-20000 10.0.0.27 Asterisk/RTP on PBX
SIP 5060 5060 10.0.0.27 Asterisk/SIP on PBX

Switch port assignments

1of9 ProCurve 2824 (J4903A)

Located in the upstairs members storage, this is the core switch that all others connect to

Port VLAN Comments
g1 1u Management access
g2 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (A25) - FS728TS / ws-switch
g3 5u Instrumentation test
g4 4u Modem (Able)
g5 2u Main hackspace network (kryten SG-1100)
g6 2u Main hackspace network (Queeg)
g7 2u Main hackspace network
g8 3u Instrumentation (Queeg)
g9 2u Main hackspace network
g10 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Trunk (Queeg)
g11 2u Main hackspace network
g12 1t, 2u (dorian)
g13 1u, 2t WiFi (POE > A34)
g14 1u 1of3 UPS
g15 1u, 2t, 3t, 4t, 5t, 8t Server (Unimatrix)
g16 1u, 2t, 3t, 4t, 5t Server (Queen)
g17 1u, 2t, 3t, 4t, 5t Server (Locutus)
g18 6t Unimatrix<->Locutus direct network
g19 7u Queen<->Unimatrix direct network (temp virgin to blue room switch on B15-7t)
g20 8u Queen<->Locutus direct network (temp virgin to kryton-uni)
g21 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (2of9)
g22 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (3of9)
g23 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (4of9)
g24 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (5of9)

2of9 ProCurve 2650-48 (J4899B)

Located in the CNC room cabinet, this switch servers the Blue room, CNC room and Team storage

Port VLAN Comments
e1-e32 2u Main hackspace network
e33-e40 3u Instrumentation
e41-e42 1u, 2t Wifi
e43 3u Instrumentation
e44 4u Modem
e45 5u Instrumentation test
e46 6t Unimatrix<->Locutus direct network
e47 7t Queen<->Unimatrix direct network
e48 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (4of9, backup)
g49 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (1of9)
g50 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Server trunk

3of9 ProCurve 2650-48 (J4899B)

Located in upstairs members storage, this switch serves the Comfy area, Studio, Craft Room and Kitchen

Port VLAN Comments
e1-e9 2u Main hackspace network
e10 3u Instrumentation (Can Vend)
e11 2u Main hackspace network
e12 3u Instrumentation (Snack Vend)
e13 2u Main hackspace network
e14 3u Instrumentation (Gatekeeper)
e15 2u Main hackspace network
e16 3u Instrumentation (MatrixMQTT)
e17 2u Main hackspace network
e18 3u Instrumentation (miniMatrix)
e19-e24 2u Main hackspace network
e25 2u Main hackspace network (auto-10)
e26-e29 2u Main hackspace network
e30 3u Instrumentation (Coin Acceptor)
e31-32 2u Main hackspace network
e33 3u Instrumentation (Embroidery Machine)
e34-37 2u Main hackspace network
e38 3u Instrumentation (Note Acceptor)
e39-41 2u Main hackspace network
e42 3u Instrumentation (A2 Laser RFID)
e43-48 2u Main hackspace network
g49 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (1of9)
g50 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Server trunk

4of9 ProCurve 2650-48 (J4899C)

Port VLAN Comments
e1-e32 2u Main hackspace network
e33-e40 3u Instrumentation
e41-e42 1u, 2t Wifi
e43 3u Instrumentation
e44 4u Modem
e45 5u Instrumentation test
e46 6t Unimatrix<->Locutus direct network
e47 7t Queen<->Unimatrix direct network
e48 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (2of9, backup)
g49 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (1of9)
g50 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Downlink trunk (5of9)

5of9 ProCurve 2650-48 (J4899B)

Port VLAN Comments
e1-e5 2u Main hackspace network
e6 1u, 2t Wifi
e7-e48 2u Main hackspace network
g49 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Uplink trunk (4of9)
g50 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Server trunk

ws-switch Netgear FS728TS

Located in the workshop.

Port VLAN Comments
e1-e6 3u Instrumentation
e7 4u Do not use.
e8 1u, 2t, 3t, 5t Lore/Wifi AP
e9-e10 5u Instrumentation test
e11-e24 2u Main hackspace network
g1 1u, 2t, 3t, 4t, 5t (spare)
g2 1u, 2t, 3t, 4t, 5t Uplink trunk (1of9)

Patch Panels

Name Location Area served
Network/Patch_Panel_A Upstairs Member Storage Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage
Network/Patch_Panel_B CNC Room Cabinet Down stairs: Blue Room, CNC room, CNC corridor, Team Storage
Network/Patch_Panel_C Upstairs Member Storage Upstairs: Comfy Area, Studio, Blue Room, Kitchen, Members Storage
Network/Patch_Panel_D Downstairs Member Storage Down stairs: Class Room, Metalworking room, Corridor, Members Storage
Network/Patch_Panel_E Downstairs Member Storage Down stairs: Class Room, Metalworking room, Corridor, Members Storage

Patch cable colour coding

Colour Vlan Tagging Notes
Purple 2u Main hackspace network
Green 3u Instrumentation
Blue 1u, 2t Wifi
Red Mixed Warning check wiki for actual config details
Black
Pink 4u Modem
Yellow 5u Instrumentation test
White 1u, 2t, 3t, 4t , 5t, 6t, 7t, 8t Trunk
Orange 1u, 2t, 3t, 4t, 5t Server
Brown 6u | 7u | 8u Server direct links

Server Naming

See here for our naming convention

UPS Power

The important infrastructure runs off 3 UPS's, each one is an APC Dell Smart UPS 5000 DL5000RMI5U.

Name Management IP Location Equipment served Notes
One of Three 192.168.1.13
00:C0:B7:74:D5:55		 Upstairs Member Storage Unimatrix, Queen (temporary), Locutus (temporary), Queeg, Dorian
1of9, 3of9, Lal, Able,
HS2.0 Gatekeeper, MatrixMQTT, Mini-matrix, CoinAcceptor,		 In service since ~03/13
Batteries replaced 4/12/14
Cacti Graphs
Two of Three 192.168.1.23
00:C0:B7:66:65:99		 Team Storage Queen (Once relocated), VIKI
2of9, 4of9 (temporary), 5of9 (temporary), B-4
CNCRoom lighting automation, CNC corridor Gatekeeper, Blue room Gatekeeper, Team storage Gatekeeper		 In service since 24/11/17
New Batteries fitted 24/11/17
Relay Fault as of 09/26/2018
Cacti Graphs
Three of Three 192.168.1.33
00:C0:B7:D5:89:A3
 Downstairs Members Storage Locutus (Once relocated),
4of9 (Once relocated), 5of9 (Once relocated), Data (Once relocated)
Corridor lighting automation, Metalworking lighting automation, Corridor Gatekeeper, Front door Gatekeeper, Members storage Gatekeeper		 Not yet in service
New Batteries fitted xx/xx/xx
Cacti Graphs

Network Devices

Able

Able is Kryten's brother the BT Openreach VDSL VirginMedia modem that talks to the outside world.

Kryten

Kryten is a VM on Unimatrix Netgate SG-1100 running pfSense, it handles all our DHCP, local DNS and routing from the external world.
It is connected to VLAN 4 for access to Able, and VLAN 2 for the main hackspace network.

The Nottinghack VLAN has access to local resources - e.g. a samba file-share on JARVIS, a future local dropbox server for projects & collaborations, a backup of all Web / Wiki files (to allow a remote restore in the event of moving hosts / outage of services) and anything else we don't want to be web facing.

The VPN (when enabled) would allow remote management of the VLANS, which could come in handy in the event of issues with the client WiFi access point.

Router management username & password for Authorised members only. If there something you need changing ask on the google group or speak to 'RepRap' Matt or Daniel directly

Usual rules apply, as to any tool - if you don't know how to use it / don't do anything :)

OpenVPN

Not currently running and not for member access
Kryten runs our openVPN server for access to the hackspace network from the outside world.

For more details see the VPN page

WiFi

There are three WiFi networks:

HSNOTTS

WiFi for Hackspace SSID: HSNOTTS passcode uses WPA2 protocol AES encryption. Members only, passcode on request, changes to the passcode will be emailed to members only.

HSNOTTS_GUEST

WiFi for guests is setup as HSNOTTS_GUEST and passcode can be provided and this will (possibly at some point) run on a separate VLAN.

spacenet

Cross-hackspace wireless network, using WPA2 Enterprise. Login using:
Username: <HMS-username>@nottinghack.org.uk
Password: <HMS-password>

For more details, see spacenet.

Servers

The Collective

These are 3 HP N40L MicroServers that run the VMs within the space and act as our database cluster
See Collective

Unimatrix

Primary VM host
Hosts Kryten, Holly and Gibson

Kryten

Netgate SG-1100 PfSense as Internet gateway and DHCP/DNS server

Holly

Our main workhorse vm, runs HMS and all the instrumentation programs
See Holly

Gibson

Our password store

Locutus

Secondary VM host
Hosts JARVIS and Rommie

JARVIS

Provides Samba file server, CUPS print server and member shell accounts
See JARVIS

Rommie

Staging server for HMS code dev

Queen

Backup Server
Does not host any VM's
Hosts Docker services nh-lighting and nh-nodered


Queeg

Fail over Monowall PC, its not much but it can keep GateKeeper running in a pinch

Dorian

RPi3 running our UniFi controller

Andromeda

This is our offsite server, hosted at Linode it run the main website, wiki, talk, and emails.
See Andromeda

OS Versions

Debian is our preferred OS for servers

Server Version Code Name
Andromeda 9.x Stretch
Unimatrix 10.x Buster
Locutus 10.x Buster
Queen 10.x Buster
Holly 9.x Stretch
Gibson 10.x Buster
JARVIS 7.x Wheezy
JARVIS-stretch 9.x Stretch
Rommie 10.x Buster
Ziggy 10.x Buster
Dorian 9.x Stretch (raspbian)
Viki 9.x Stretch (raspbian)

Genral Use PC

Quorra

A workstation with dual heads, Quorra is available for all members to use.

Fey

General-use windows PC in the blue room,aimed at CAD work and anything else requiring a reasonably beefy GPU.

WOPR

Another general-use PC in the blue room, by the window

Printers

For more details, see Printers.

Bender

The HP Color Laserjet HP5550 is set up on 10.0.0.95 as Bender.
The printer feeds A4 paper from tray 2 and A3 paper from tray 3.
A duplexer is installed enabling double-sided printing.
Bender is shared on JARVIS, so should be auto-detected by Linux machines.

Rosey

Rosey is an Epson WF-7610DWF printer/scanner set up on 10.0.0.94. The scanner/printer should be auto-detected by most Linux/Mac machines, and is known to work from Quorra using Xsane.

Plotter

The HP DesignJet 600 plotter is called Plotter. It is connected to the network at 10.0.0.97. Network operation is unconfirmed.

Websites

See also: Website

DNS record looked after by 'RepRap' Matt

Nottinghack.org.uk

The main Nottinghack websites are run form Andromeda.

This hosts the Wordpress blog, this wiki, the Nottinghack Planet

The Twitterbot for @HSNOTTS is also hosted on on this server.

lspace.nottinghack.org.uk

Hosted locally at the space on Holly

Includes:

  • Graph showing connected network device count

Hackspace Management System

The Hackspace Management System
Hosted locally at the space on Holly
see HMS

cacti.nottinghack.org.uk

Also hosted locally on Holly this provides graphing of various stats and info (mostly temperature graphs) from the hackspace instrumentation

https://holly/

Our intranet, only accessible from the hackspace network

HackSpace Instrumentation

The Network and Holly provide the backbone to our HackSpace Instrumentation projects.

Domains

The hackspace maintains a number of domain name tho .org.uk is our most used, almost all our sites can be access via the other TLD's

Domain Registrar Description
nottinghack.org.uk LCN
nottinghack.org LCN
nottinghack.co.uk LCN
nottinghack.uk LCN
nottinghack.space WHUK

DNS records for all are hosted by ClouDNS

Other Info

Extra Equipment

See here for a list of our other network gear

Retrieved from "https://wiki.nottinghack.org.uk/index.php?title=Network&oldid=25344"