63 lines
1.6 KiB
Markdown
63 lines
1.6 KiB
Markdown
title: Advanced Networking
|
|
slug: docs/advanced-networking
|
|
status: hidden
|
|
|
|
## Static Networking
|
|
|
|
Information for the `MSO Intranet` networking:
|
|
|
|
Addresses are assigned from these ranges:
|
|
|
|
```
|
|
IPv4: 172.19.134.0/24
|
|
IPv6: 2620:101:f000:4903::/64
|
|
```
|
|
|
|
Network gateways:
|
|
|
|
```
|
|
IPv4 Gateway: 172.19.134.254 (NAT gateway)
|
|
Add routes to campus:
|
|
10.0.0.0/8 via 172.19.134.1
|
|
129.97.0.0/16 via 172.19.134.1
|
|
172.16.0.0/12 via 172.19.134.1
|
|
|
|
Please do not send on-campus traffic through the NAT gateway.
|
|
This may be blocked in the future.
|
|
|
|
IPv6 Gateway: 2620:101:f000:4903::1
|
|
```
|
|
|
|
## Firewall
|
|
|
|
### Campus Firewall
|
|
|
|
All machines in the CSC cloud are behind the Campus Firewall. The Campus
|
|
Firewall blocks all incoming traffic at the University border.
|
|
|
|
**We will not accept requests for exceptions to the campus firewall. All
|
|
inbound traffic originating from off-campus will be blocked.**
|
|
|
|
### OpenStack Security Groups
|
|
|
|
You can utilize OpenStack Security Groups to act as a firewall in front of your
|
|
host.
|
|
|
|
*More documentation about this will come at a later time.*
|
|
|
|
## Private Networking
|
|
|
|
See [OpenStack Horizon Documentation](https://docs.openstack.org/horizon/pike/user/create-networks.html) for
|
|
information about creating private networks.
|
|
|
|
### Disabling Port Security
|
|
|
|
Disabling port security is required if you are running a router on your network
|
|
(ie. traffic with source IPs different than your own).
|
|
|
|
*This cannot be done for the MSO Intranet network, however can be done for
|
|
private networks*.
|
|
|
|
This can only be done via the OpenStack command line and the API:
|
|
`openstack port set --disable-port-security --no-security-group [portid]`
|