|
|
| (3 intermediate revisions by 2 users not shown) |
| Line 1: |
Line 1: |
| − | The network switch has a VLAN setup with ports 23 and 24 "special" to the outside world. No systems should be plugged into these ports.
| + | #REDIRECT[[Network#Networking_for_the_FARM]] |
| − | | |
| − | The Red Hat/initscripts ifup and ifdown commands should take care of configuring the VLAN on a node. Unfortunately, they, like far too many tools, assume a set naming scheme for ethernet family devices. (I might file a bug report if I get around to it:[[Aaron]]).
| |
| − | | |
| − | The farm switch is set up as follows:
| |
| − | Standard NPG auth scheme + "sw" (it's switch.farm.physics.unh.edu).
| |
| − | Ports 1-22 members of VLAN id 1, the private farm network.
| |
| − | All 24 ports members of VLAN id 2, the unh network.
| |
| − | Normal, "untagged" ethernet frames into the switch will go into a default VLAN and exiting the switch, ethernet frames of that same default VLAN come out normal, "untagged".
| |
| − | The "default" VLAN for ports 1-22 is id 1, the farm network.
| |
| − | The "default" VLAN for ports 23 & 24 is id 2, the UNH network.
| |
| − | Thus port 24 should be connected to a wall jack, port 23 may be used as a spare UNH port, just as if it were a two port switch plugged into a wall jack. All other hosts using the farm switch will see only the farm, unless they are configured for VLAN, in which case they see UNH as VLAN id 2. All this just makes one physical network segment appear as several, with all the security benefits thereof. (When properly implemented.)
| |
| − | | |
| − | Currently, the only special port being used is port 24, hooked up to the UNH network wall jack.
| |
| − | | |
| − | One more thing: our Netgear "Smart Switch", doesn't live up to it's name. The VLAN configuration for ports 23 and 24 must match. This may be because 23 and 24 are the GBIC fiber modules, but it may be that other sets have this odd, undocumented requirement. The thing works perfectly in operation, but gets easily confused during configuration. Reconfigure at your peril.
| |
