Network - Revision history

Giovanni at 17:04, 26 June 2007

2007-06-26T17:04:00Z

←Older revision		Revision as of 17:04, 26 June 2007
Line 28:		Line 28:
	== Monitoring and management network services ==		== Monitoring and management network services ==

-	;Remote ~~computer~~ management~~: a service~~ to access and operate on ~~computer~~ reachable through the network; this kind of service is mostly dedicated to ~~servers machine~~ and is based on secure connection using ssh or https protocols~~: the first one~~ to obtain a shell ~~remotely end the second one~~ to ~~access~~ via web ~~all~~ the ~~management functionalities~~ of the ~~computers (see~~ the ~~[[Software\|webmin]] description)~~.	+	Remote management is used to access and operate on computers reachable through the network; this kind of service is mostly dedicated to server machines and is based on secure connection using ssh or https protocols to remotely obtain a shell and to operate management via web interfaces. Monitoring is used to continuously check the functionality of the network as well as of the various systems.
-	~~;Controllo di consistenza dei sistemi:text~~	+
-	~~;Monitoraggio della rete e dei servizi:text~~	+
-	~~;E’ garantito il controllo continuo di tutte le funzionalita’:text~~	+
-	~~;Funzionalita’ delle apparecchiature di rete:text~~	+
-	~~;Raggiungibilita’ delle varie aree:text~~	+
-	~~;Disponibilita’ dei vari servizi:text~~	+
	{{footer itservices\|next=user services}}		{{footer itservices\|next=user services}}

Giovanni at 17:28, 25 June 2007

2007-06-25T17:28:08Z

←Older revision		Revision as of 17:28, 25 June 2007
Line 1:		Line 1:
	[[Image:network.jpg\|right\|500px\|Network organization]]		[[Image:network.jpg\|right\|500px\|Network organization]]
		+

	All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:		All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:

Gianluca at 12:25, 20 June 2007

2007-06-20T12:25:06Z

←Older revision		Revision as of 12:25, 20 June 2007
Line 27:		Line 27:
	== Monitoring and management network services ==		== Monitoring and management network services ==

-	;Remote computer management: a service to access and operate on computer reachable through the network; this kind of service is mostly dedicated to servers machine and is based on secure connection using ssh or https protocols: the first one to obtain a shell remotely end the second one to access via web all the management functionalities of the computers (see the [[Software\|webmin]] ~~paragraph~~).	+	;Remote computer management: a service to access and operate on computer reachable through the network; this kind of service is mostly dedicated to servers machine and is based on secure connection using ssh or https protocols: the first one to obtain a shell remotely end the second one to access via web all the management functionalities of the computers (see the [[Software\|webmin]] description).
	;Controllo di consistenza dei sistemi:text		;Controllo di consistenza dei sistemi:text
	;Monitoraggio della rete e dei servizi:text		;Monitoraggio della rete e dei servizi:text

Gianluca at 12:24, 20 June 2007

2007-06-20T12:24:27Z

←Older revision		Revision as of 12:24, 20 June 2007
Line 27:		Line 27:
	== Monitoring and management network services ==		== Monitoring and management network services ==

-	;~~Amministrazione remota delle macchine~~:~~text~~	+	;Remote computer management: a service to access and operate on computer reachable through the network; this kind of service is mostly dedicated to servers machine and is based on secure connection using ssh or https protocols: the first one to obtain a shell remotely end the second one to access via web all the management functionalities of the computers (see the [[Software\|webmin]] paragraph).
	;Controllo di consistenza dei sistemi:text		;Controllo di consistenza dei sistemi:text
	;Monitoraggio della rete e dei servizi:text		;Monitoraggio della rete e dei servizi:text

Giovanni at 02:05, 20 June 2007

2007-06-20T02:05:25Z

←Older revision		Revision as of 02:05, 20 June 2007
Line 34:		Line 34:
	;Raggiungibilita’ delle varie aree:text		;Raggiungibilita’ delle varie aree:text
	;Disponibilita’ dei vari servizi:text		;Disponibilita’ dei vari servizi:text
-		+	{{footer itservices\|next=user services}}
-		+
-	~~----~~	+
-	~~<center>[[Hardware]] - [[Software]] - [[Network]] - [[User~~ services~~]]</center>~~	+

Gianluca at 15:24, 19 June 2007

2007-06-19T15:24:02Z

←Older revision		Revision as of 15:24, 19 June 2007
Line 7:		Line 7:
	*'''External connectivity''': the central network is also responsible for the external connectivity to the internet and is based on a connection hosted by the close Faculty of Medicine; from there, a direct connection to the central network of the University of Naples Federico II, allows access to the research network (GARR) through a fiber at 1Gbit/s.		*'''External connectivity''': the central network is also responsible for the external connectivity to the internet and is based on a connection hosted by the close Faculty of Medicine; from there, a direct connection to the central network of the University of Naples Federico II, allows access to the research network (GARR) through a fiber at 1Gbit/s.
	*'''Client connectivity''': finally the [[Hardware#Clients\|desktop clients]] can be connected to the network by using wired and wireless connection; in the first case the clients need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].		*'''Client connectivity''': finally the [[Hardware#Clients\|desktop clients]] can be connected to the network by using wired and wireless connection; in the first case the clients need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].
-	*'''[[Wireless\|Wireless network]]''': In case of wireless connection, the clients need to be equipped with a wireless interface and to be configured ~~properly~~ to ~~use this service~~. All the main areas are covered and the connection speed to the main network can reach 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.	+	*'''[[Wireless\|Wireless network]]''': In case of wireless connection, the clients need to be equipped with a wireless interface and to be configured to securely access the network, through authentication. All the main areas are covered and the connection speed to the main network can reach 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.

Gianluca at 15:19, 19 June 2007

2007-06-19T15:19:27Z

←Older revision		Revision as of 15:19, 19 June 2007
Line 5:		Line 5:
	*'''Central network''': One central network node provides connection to the peripheral nodes and connectivity to the internet; it is located in the server room where all the computing servers can connect redundantly to it by using ethernet connectivity up to 2 Gbit/s.		*'''Central network''': One central network node provides connection to the peripheral nodes and connectivity to the internet; it is located in the server room where all the computing servers can connect redundantly to it by using ethernet connectivity up to 2 Gbit/s.
	*'''Peripheral network''': the central network is distributed in all the main areas of the institute by other perpheral network devices, mounted in 12 racks providing ethernet connection to the clients; the phisical network is further divided in functional areas, using virtual LANs, allowing client grouping and low level isolation between groups of computers, for security and network manageability.		*'''Peripheral network''': the central network is distributed in all the main areas of the institute by other perpheral network devices, mounted in 12 racks providing ethernet connection to the clients; the phisical network is further divided in functional areas, using virtual LANs, allowing client grouping and low level isolation between groups of computers, for security and network manageability.
-	*'''External connectivity''': it is ~~realized by~~ a connection hosted by the close Faculty of Medicine, to the central network of the University of Naples Federico II, ~~that allow direct~~ access to the research network (GARR) through a fiber ~~uplink~~ at 1Gbit/s.	+	*'''External connectivity''': the central network is also responsible for the external connectivity to the internet and is based on a connection hosted by the close Faculty of Medicine; from there, a direct connection to the central network of the University of Naples Federico II, allows access to the research network (GARR) through a fiber at 1Gbit/s.
-	*'''Client connectivity''': the [[Hardware#Clients\|desktop clients]] need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].	+	*'''Client connectivity''': finally the [[Hardware#Clients\|desktop clients]] can be connected to the network by using wired and wireless connection; in the first case the clients need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].
-	*'''[[Wireless\|Wireless network]]''': All the main areas are covered ~~by wireless connection~~ and ~~allow access~~ to the ~~internet at~~ 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.	+	*'''[[Wireless\|Wireless network]]''': In case of wireless connection, the clients need to be equipped with a wireless interface and to be configured properly to use this service. All the main areas are covered and the connection speed to the main network can reach 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.


Line 18:		Line 18:
	== Base network services ==		== Base network services ==

-	;DNS: A local DNS service is available to resolve all the ceinge network addresses belonging to the ceinge domain (ceinge.unina.it). It acts as a master DNS, propagating its information to the internet through the unina DNS servers. ~~The service is reachable at the following addresses:~~	+	;DNS: A local DNS service is available to resolve all the ceinge network addresses belonging to the ceinge domain (ceinge.unina.it). It acts as a master DNS, propagating its information to the internet through the unina DNS servers.
-	*DNS server1: 143.225.151.32	+
-	*DNS server2: 143.225.151.25	+
	;DHCP: Most of the clients obtain the ip configuration dynamically by a dedicated static dhcp server working on all the networks configured in all the institute areas; it responds to the ip requests of the clients if its physical MAC address is registered; to request an IP address please use the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].		;DHCP: Most of the clients obtain the ip configuration dynamically by a dedicated static dhcp server working on all the networks configured in all the institute areas; it responds to the ip requests of the clients if its physical MAC address is registered; to request an IP address please use the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].
	;NAT: The clients very often doesn't require to be on the public internet; so, they often work by using private addresses translated by the NAT server to a unique public ip address. This way, less number of limited public ip addresses are occupied and more security is achieved thanks to the isolation between networks.		;NAT: The clients very often doesn't require to be on the public internet; so, they often work by using private addresses translated by the NAT server to a unique public ip address. This way, less number of limited public ip addresses are occupied and more security is achieved thanks to the isolation between networks.

Gianluca at 14:46, 19 June 2007

2007-06-19T14:46:43Z

←Older revision		Revision as of 14:46, 19 June 2007
Line 1:		Line 1:
-
	[[Image:network.jpg\|right\|500px\|Network organization]]		[[Image:network.jpg\|right\|500px\|Network organization]]

	All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:		All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:
-	*'''Central network''';
-	*'''Peripheral network''';
-	*'''External connectivity''';
-	*'''Client connectivity''';
-	*'''Wireless network'''.
-

	*'''Central network''': One central network node provides connection to the peripheral nodes and connectivity to the internet; it is located in the server room where all the computing servers can connect redundantly to it by using ethernet connectivity up to 2 Gbit/s.		*'''Central network''': One central network node provides connection to the peripheral nodes and connectivity to the internet; it is located in the server room where all the computing servers can connect redundantly to it by using ethernet connectivity up to 2 Gbit/s.
-	*'''Peripheral network''': 12 network ~~nodes are~~ distributed ~~homogeneously~~ in the ~~building and provides~~ ethernet connection to the clients; ~~each~~ network ~~node can be configured to offer different~~ virtual ~~LAN~~, allowing client grouping and low level isolation between groups of computers, for security and network manageability.	+	*'''Peripheral network''': the central network is distributed in all the main areas of the institute by other perpheral network devices, mounted in 12 racks providing ethernet connection to the clients; the phisical network is further divided in functional areas, using virtual LANs, allowing client grouping and low level isolation between groups of computers, for security and network manageability.
	*'''External connectivity''': it is realized by a connection hosted by the close Faculty of Medicine, to the central network of the University of Naples Federico II, that allow direct access to the research network (GARR) through a fiber uplink at 1Gbit/s.		*'''External connectivity''': it is realized by a connection hosted by the close Faculty of Medicine, to the central network of the University of Naples Federico II, that allow direct access to the research network (GARR) through a fiber uplink at 1Gbit/s.
	*'''Client connectivity''': the [[Hardware#Clients\|desktop clients]] need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].		*'''Client connectivity''': the [[Hardware#Clients\|desktop clients]] need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].

Gianluca at 14:36, 19 June 2007

2007-06-19T14:36:53Z

←Older revision		Revision as of 14:36, 19 June 2007
Line 1:		Line 1:
-	[[Image:~~ceinge_net_plan~~.jpg\|right\|~~Internal network distribution~~]]	+
		+	[[Image:network.jpg\|right\|500px\|Network organization]]

	All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:		All the CEINGE areas are provided with wired and wireless internet connectivity, allowing internet access to all laboratories, service areas and offices; the wired connectivity is distributed by using Gbit fibers from one central area of the building to all peripheral areas and can be summarized as follow:
Line 18:		Line 19:

	== Network services ==		== Network services ==
-
-	[[Image:network.jpg\|right\|500px\|Network organization]]

	Almost all network services work transparently to the user but are needed to guarantee the correct functionality of a complex network architecture, offering different services and reaching appropriate levels of security.		Almost all network services work transparently to the user but are needed to guarantee the correct functionality of a complex network architecture, offering different services and reaching appropriate levels of security.

Gianluca at 22:18, 16 June 2007

2007-06-16T22:18:44Z

←Older revision		Revision as of 22:18, 16 June 2007
Line 12:		Line 12:
	*'''Peripheral network''': 12 network nodes are distributed homogeneously in the building and provides ethernet connection to the clients; each network node can be configured to offer different virtual LAN, allowing client grouping and low level isolation between groups of computers, for security and network manageability.		*'''Peripheral network''': 12 network nodes are distributed homogeneously in the building and provides ethernet connection to the clients; each network node can be configured to offer different virtual LAN, allowing client grouping and low level isolation between groups of computers, for security and network manageability.
	*'''External connectivity''': it is realized by a connection hosted by the close Faculty of Medicine, to the central network of the University of Naples Federico II, that allow direct access to the research network (GARR) through a fiber uplink at 1Gbit/s.		*'''External connectivity''': it is realized by a connection hosted by the close Faculty of Medicine, to the central network of the University of Naples Federico II, that allow direct access to the research network (GARR) through a fiber uplink at 1Gbit/s.
-	*'''Client connectivity''': the [[Hardware#Clients\|desktop clients]] need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= ~~Helpdesk~~ form].	+	*'''Client connectivity''': the [[Hardware#Clients\|desktop clients]] need to be equipped with a fast ethernet card and properly configured by the system administrator according to the assigned VLAN. The IP configuration is managed by the system administrator and can be required by using the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].
	*'''[[Wireless\|Wireless network]]''': All the main areas are covered by wireless connection and allow access to the internet at 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.		*'''[[Wireless\|Wireless network]]''': All the main areas are covered by wireless connection and allow access to the internet at 54Mbit/s according to the 802.11g standard. See in detail how to [[Wireless\|configure]] it.

Line 26:		Line 26:
	== Base network services ==		== Base network services ==

-	;DNS: a local DNS service is available to resolve all the ceinge network addresses belonging to the ceinge domain (ceinge.unina.it). It acts as a master DNS, propagating its information to the internet through the unina DNS servers. The service is reachable at the following addresses:	+	;DNS: A local DNS service is available to resolve all the ceinge network addresses belonging to the ceinge domain (ceinge.unina.it). It acts as a master DNS, propagating its information to the internet through the unina DNS servers. The service is reachable at the following addresses:
	*DNS server1: 143.225.151.32		*DNS server1: 143.225.151.32
	*DNS server2: 143.225.151.25		*DNS server2: 143.225.151.25
-	;DHCP: ~~most~~ of the clients obtain the ip configuration dynamically by a dedicated static dhcp server working on all the networks configured in all the institute areas; it responds to the ip requests of the clients if its physical MAC address is registered; to request an IP address please ~~follow~~ [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= ~~this link~~].	+	;DHCP: Most of the clients obtain the ip configuration dynamically by a dedicated static dhcp server working on all the networks configured in all the institute areas; it responds to the ip requests of the clients if its physical MAC address is registered; to request an IP address please use the online [http://web.ceinge.unina.it/ceinge/admin/req_ip.php?action=new&displaymode=display&viewtype=form&language= form].
-	;NAT:~~text~~	+	;NAT: The clients very often doesn't require to be on the public internet; so, they often work by using private addresses translated by the NAT server to a unique public ip address. This way, less number of limited public ip addresses are occupied and more security is achieved thanks to the isolation between networks.
-	;VPN:~~text~~	+	;VPN: A service of Virtual Private Network is configurable to allow people to join the ceinge network from outside the internet and allowing to use the internal services as local.
-	;~~LDAP~~ : ~~Il servizio centralizzato di gestione utenti per l'autenticazione e' stato realizzato per mezzo del sistema~~ LDAP ~~ed e’ stata garantita la sua integrazione con il database degli utenti ed e' utilizzato da vari server~~, ~~in modo da permettere~~ all~~'utente di accedere a tutti i servizi per mezzo di un singolo account personale~~.	+	;RADIUS: It responds to the access requests to use network services, such as wireless; this way, it provides controlled access to the network services and allow monitoring of malicious connection attempts.
-		+	;LDAP: It is a directory service, used to manage user accounts centrally. It is used by all other IT services to guarantee authentication of the users and management of group of people.

	== Monitoring and management network services ==		== Monitoring and management network services ==