Physics Network Integration - PowerPoint Presentation

Slide1

Physics Network Integration

Chris HunterSlide2

Physics network team

Chris Hunter : Network Manager

David Newton : Network Support Technician

Room DWB

663

Phone 73501

Email network@physics.ox.ac.ukSlide3

Network Sockets & Concentration Points

16 network concentration points (NCP’s) in the Denys Wilkinson Building alone.

Available Switch ports 2290 Approx. 59.2% active

Level 2 NCP hub of the Physics network with

2 x 10Gb

fibre connections going to each of the Physics buildings.Slide4
Slide5

Edge Switch Upgrades

48 x 1Gb/s + 2 x 10Gb/s SFP+ Ports

Switch stacking up to 8 switches via HDMI cables at speeds of >

10.2

Gbit

/sPort Based Authentication, 802.1x and Mac Address Bypass (MAB)Port based Access Control Lists (ACL’s)Slide6

Physics Firewall

Firewall Juniper

Netscreen

ISG

1000Slide7
Slide8

Physics Wireless Network

Currently

19

x 802.11g

56Mbps wireless

access points in the DWB plus a couple of 802.11n 300MbpsAnyone with a Physics network account can connect.Clients connected to the

Physics_S wireless network are part of the 10.7.0.0/16 subnet, with 802.1x authentication.Help on connecting to Physics_S can be found at http://www2.physics.ox.ac.uk/it-services/categories/wirelessSlide9

OUCS wireless network

OWL-VISITOR and OWL-VPN also available, via the OWL ssid.

Eduroam now also available, connect using your Remote Access Account, different from your SSO or Nexus account

http://www.oucs.ox.ac.uk/network/wireless/services/eduroam/

Details about both OWL & Eduroam at

http://www.oucs.ox.ac.uk/network/wirelessSlide10

Access to Physics Services from the un-trusted subnet or remotely

Virtual Private Network (VPN)

vpn.physics.ox.ac.uk works with Microsoft, Linux and OSX clients, uses Physics authentication domain help at

http://

www2.physics.ox.ac.uk/it-services/categories/vpn

Best to setup Windows client with Automatic as the VPN type, the client will then try a number of VPN types, our VPN server supports PPTP and SSTP, PPTP often gets blocked a the client end because the required GRE protocol is blocked.

OSX will work with SSTP although I don’t think we have the instructions on the web yet.Oxford University IT Services have VPN service, does need specific client installed details at http://www.oucs.ox.ac.uk/network/vpn/Slide11
Slide12

Network Security

Connecting unmanaged systems to the Physics Network

MAC address registration is needed before gaining any network connection for

laptops on the wired network,

please register at

http://www.physics.ox.ac.uk/it/account/

172.17.x.x un-trusted subnetIs your laptop up to date?Anti Virus / spywareFully patched OSBe carful when opening emails, look out for phishing

emails

Connecting from outside of Physics

SMB blocked, no connection to windows files

MAPI access to Exchange Server blocked

SMTP blockedSlide13

Network Security

Exchange Server protocols not blocked

IMAP

Authenticated SMTP is available using

mail.physics.ox.ac.uk

, PHYSICS authentication domain credentials are needed to use the serviceOther protocolsweb access, some pages within Oxford will require an Oxford IP address, therefore VPN will be needed from outside.

RPC over HTTPSSlide14

Network Security

Sophos Anti Virus Software

Updates, out of date AV is no use

Download Sophos for personal laptops running:-

Sophos

10.0 for XP, Vista, Windows7 and 8 at http://www.physics.ox.ac.uk/sophos/

Linux at http://www.oucs.ox.ac.uk/viruses/linux/Sophos v8.0.6 for MAC OSX 10.4/10.5/10.6 at http://www.physics.ox.ac.uk/sophos/Slide15

Network Backbone Connection

Physics connection presently 1Gbps

Campus connection to Super Janet currently at 2 x 10Gbps.Slide16

Access to Physics Services from the un-trusted subnet or remotely

Exchange

email web

access

https://mail.physics.ox.ac.uk

, Outlook ConfigurationIf using Outlook 2007 or 2010, then you can use the `autodiscover` feature. Basically, all it needs to know is your email address (which it will already know if you are logged into the domain) and it will look up all the other information it needs. Further details can be found at http://www.physics.ox.ac.uk/it/email/exchange/2010/Outlook.htm

Webdav

via browser or windows network locations

https

://winfe.physics.ox.ac.uk/home/<username>

connects to your windows ‘H’ drive.

(Windows

7) Right click on ‘Computer’ within the file explorer, click ‘Add a network location’, type the address above into the ‘Internet or network address field’, click next, authenticate with you Physics credentials, type a name in for the network location, click finish.

Sftp

+ SSH

Winscp

available on self service

http://

www.physics.ox.ac.uk/it/mswindows/remote.htmSlide17

Access to Physics Services from the un-trusted subnet or remotely

Printing from a Windows Laptop not in the Physics domain.

http://www.physics.ox.ac.uk/it/mswindows/windowsprinting.htm

MAC Printing

http://www.physics.ox.ac.uk/it/mac/macprinting.htmSlide18

Access to Physics Services from the un-trusted subnet or remotely

Windows terminal

Servers

A list of servers can

be found at

http://www2.physics.ox.ac.uk/it-services/remote-desktop-and-terminal-servicesRemote Desktop Client (MS & MAC OSX), possible to connect to local disks, printers and serial ports (not possible to connect serial ports in OSX).

Rdesktop on Linux systems, rdesktop <termservqc>, more for people without Windows desktopWindows XP, Vista, Windows

7

and 8 will

allow remote access via terminal

services, to connect to your Window desktop from outside the department connect through rdp-gateway.physics.ox.ac.uk, details can found on the address above.Slide19

Physics self service

Under Programs\Physics Self ServiceSlide20

FAQ’s

http://www.physics.ox.ac.uk/it/mswindows/faq.htmSlide21

Questions?