DaqVlanConfig: Difference between revisions

From DaqWiki
Jump to navigation Jump to search
No edit summary
 
(15 intermediate revisions by the same user not shown)
Line 5: Line 5:
Extra Information:
Extra Information:


* VLAN number is how CCN identifies this VLAN
* VLAN ID is how CCN identifies this VLAN
* [[Adding Hosts to a VLAN with Infoblox|This page]] explains how to add a host to the VLAN using infoblox
* [[Adding Hosts to a VLAN with Infoblox|This page]] explains how to add a host to the VLAN using infoblox
* [https://www.triumf.info/wiki/DAQwiki/images/4/4a/Psd_vlan_proposal.pdf This document] <span style="color:#FF0000"> (this link is broken!)</span> lists the original proposal for moving PSD experimental areas to new VLANs.  Some of the implementation details may no longer be correct, but the document explains the motivation for the change.  
 
== UCN ==
{| class="wikitable"
* UCN 
|+ DAQ managed VLANs
* VLAN number = 68   
|-
* IP range = 142.90.151.0/24  
! VLAN Name !! VLAN ID !! IP range  !! gateway !! subnet !! DHCP server !! NIS server !! External Firewall
* subnet = *.ucn.triumf.ca  
|-
* gateway = 142.90.151.254
| UCN || 68 || 142.90.151.0/24 || 142.90.151.254 || *.ucn.triumf.ca || IS&T || daq00.triumf.ca || All offsite access blocked
* switch ports: VLAN68 is available on ports XX and YY of switch ZZ
|-
* [https://ccn.triumf.ca/sysadmin/network/firewalls/security-policies/internal#from-zone-triumf-lan-to-zone-ucn firewall rules]: Blocking all traffic from off-site other than http, https, ssh
| CMMS || 56 || 142.90.154.0/24 || 142.90.154.254 || *.cmms.triumf.ca || ?? || ?? || All offsite access blocked
|-
| GRSI || 72 || 142.90.156.0/22 || 142.90.159.254 || *.grsi.triumf.ca || ?? || ?? || All offsite access blocked
|-
| TITAN || 87 ||  10.90.87.0/24 ||  10.90.87.254 || *.titan.triumf.ca || IS&T || ?? || Unroutable from offsite
|-
| ISACEXP || 88 || 10.90.88.0/24 || 10.90.88.254 || *.isacexp.triumf.ca || IS&T and iris00 || isda00 || Unroutable from offsite
|-
| DAQ || 89 || 10.90.89.0/24 || 10.90.89.254 || *.daq.triumf.ca || IS&T || daq00.triumf.ca ||Unroutable from offsite
|-
| MI || 90 || 10.90.90.0/24 || 10.90.90.254 || *.mi.triumf.ca || IS&T || daq00.triumf.ca ||Unroutable from offsite
|-
| SPAA || 91 || 10.90.91.0/24 || 10.90.91.254 || *.spaa.triumf.ca || IS&T || daq00.triumf.ca ||Unroutable from offsite
|}
 
 
= Details =
 
 
== ISACEXP organization ==
Propose to divide the ISACEXP VLAN as follows:
* 10.90.88.1-10.90.88.30 : IRIS
* 10.90.88.31-10.90.88.60 : TRINAT
* 10.90.88.61-10.90.88.90 : DRAGON
* 10.90.88.91-10.90.88.100 : TACTIC
* 10.90.88.101-10.90.88.120 : use random one-off hosts
* 10.90.88.121-10.90.88.150 : unassigned; for future major experiment
* 10.90.88.151-10.90.88.180 : unassigned; for future major experiment
* 10.90.88.181-10.90.88.210 : for counting room computers
* 10.90.88.211-10.90.88.240 : use for random one-off or tiny experiments


== CMMS ==  
== CMMS ==  
* CMMS
* VLAN number = 56   
* IP range = 142.90.154.0/24
* prefix = 24
* netmask = 255.255.255.0
* subnet = *.triumf.ca
* gateway = 142.90.154.254
* DAQ DHCP server: midm15, midm9a
* DNS server: 142.90.100.19 (for now)
* switch ports: VLAN56 is available on  
* switch ports: VLAN56 is available on  
** ports 25-44 of switch bay13  
** ports 25-44 of switch bay13  
** ports 0-23 of switch JUN63  
** ports 0-23 of switch JUN63  
** outlet 243-8 in the DAQ lab.
** outlet 243-8 in the DAQ lab.
* [https://ccn.triumf.ca/sysadmin/network/firewalls/security-policies/internal#from-zone-triumf-lan-to-zone-cmms firewall rules]: none yet.
* migration of IP addresses: [[MUSR_Cluster#CMMS_VLAN_migration]]
* migration of IP addresses: [[MUSR_Cluster#CMMS_VLAN_migration]]


== GRSI ==  
== GRSI ==  
* Griffin/Tigress/EMMA
 
* VLAN number = 72   
* IP range = 142.90.156.0 – 142.90.159.255
* IP range = 142.90.156.0 – 142.90.159.255
* prefix = 22
* netmask = 142.90.252.0
* netmask = 142.90.252.0
* broadcast = 142.90.159.255
* broadcast = 142.90.159.255
* subnet = *.triumf.ca  (I think this should be *.grsi.triumf.ca - TL)
* gateway = 142.90.159.254
* switch ports:  ports 1-3 of bay42 in TIGRESS
* switch ports:  ports 1-3 of bay42 in TIGRESS
* firewall rules: none
== GRIFFIN/TIGRESS (OLD, eventually to be retired)==
* Griffin/Tigress
* VLAN number = 70   
* IP range = 142.90.153.0/24
* subnet = *.triumf.ca
* gateway = 142.90.153.254
* switch ports:  bay02 switch3 port 35 patch cable LE-lA
* firewall rules: ???

Latest revision as of 04:14, 5 November 2026

The following is the list of VLANs associated with the DAQ and DAQ-managed experimental areas.

The master list of TRIUMF VLANs is available on CCN VLAN list.

Extra Information:

  • VLAN ID is how CCN identifies this VLAN
  • This page explains how to add a host to the VLAN using infoblox
DAQ managed VLANs
VLAN Name VLAN ID IP range gateway subnet DHCP server NIS server External Firewall
UCN 68 142.90.151.0/24 142.90.151.254 *.ucn.triumf.ca IS&T daq00.triumf.ca All offsite access blocked
CMMS 56 142.90.154.0/24 142.90.154.254 *.cmms.triumf.ca ?? ?? All offsite access blocked
GRSI 72 142.90.156.0/22 142.90.159.254 *.grsi.triumf.ca ?? ?? All offsite access blocked
TITAN 87 10.90.87.0/24 10.90.87.254 *.titan.triumf.ca IS&T ?? Unroutable from offsite
ISACEXP 88 10.90.88.0/24 10.90.88.254 *.isacexp.triumf.ca IS&T and iris00 isda00 Unroutable from offsite
DAQ 89 10.90.89.0/24 10.90.89.254 *.daq.triumf.ca IS&T daq00.triumf.ca Unroutable from offsite
MI 90 10.90.90.0/24 10.90.90.254 *.mi.triumf.ca IS&T daq00.triumf.ca Unroutable from offsite
SPAA 91 10.90.91.0/24 10.90.91.254 *.spaa.triumf.ca IS&T daq00.triumf.ca Unroutable from offsite


Details

ISACEXP organization

Propose to divide the ISACEXP VLAN as follows:

  • 10.90.88.1-10.90.88.30 : IRIS
  • 10.90.88.31-10.90.88.60 : TRINAT
  • 10.90.88.61-10.90.88.90 : DRAGON
  • 10.90.88.91-10.90.88.100 : TACTIC
  • 10.90.88.101-10.90.88.120 : use random one-off hosts
  • 10.90.88.121-10.90.88.150 : unassigned; for future major experiment
  • 10.90.88.151-10.90.88.180 : unassigned; for future major experiment
  • 10.90.88.181-10.90.88.210 : for counting room computers
  • 10.90.88.211-10.90.88.240 : use for random one-off or tiny experiments

CMMS

  • switch ports: VLAN56 is available on
    • ports 25-44 of switch bay13
    • ports 0-23 of switch JUN63
    • outlet 243-8 in the DAQ lab.
  • migration of IP addresses: MUSR_Cluster#CMMS_VLAN_migration

GRSI

  • IP range = 142.90.156.0 – 142.90.159.255
  • netmask = 142.90.252.0
  • broadcast = 142.90.159.255
  • switch ports: ports 1-3 of bay42 in TIGRESS
Retrieved from "https://daq00.triumf.ca/DaqWiki/index.php?title=DaqVlanConfig&oldid=9314"