Difference between revisions of "Network/Trusted LAN"

From Makers Local 256
Jump to: navigation, search
(Made some updates to the network)
(Logical: remove devices that are known-gone or likely to change, zoneminder is canonical source of information about cameras)
 
(14 intermediate revisions by 6 users not shown)
Line 1: Line 1:
= Architecture =
+
<big>THIS PAGE IS PAINFULLY OUT OF DATE IN BOTH USAGE AND ENUMERATION OF DEVICES.</big>
  
==Goals==
+
This is the main LAN at the shop and it's what the makers will use to connect. This network is able to talk to all the workstations and servers on the network so ''only members should be able to use this'' (this isn't a rule but it's an important guideline).
# Facilitate members' access to information easily for the member
+
# Keep maintenance simple
+
# Promote collaboration between members
+
# Prevent abuse of the network that would interfere with the above and any 3rd party legal agreements
+
  
==Logical Map==
+
== Logical ==
Last Updated: [[User:Jimshoe|Jimshoe]] ([[User talk:Jimshoe|talk]]) 10:05, 14 November 2013 (CST)
+
This IP space is 10.56.1.0/24 (10.56.1.*).
<graphviz caption='Logical Map' alt='Logical Map' format='png'>
+
{| class="wikitable sortable"
graph LogicalMap {
+
|-
  graph [rankdir=TB]
+
! IP !! Hostname !! Description
  node [shape="box"]
+
|-
  { node [shape="oval"]
+
| 10.56.1.1 || router || Default router for machines in this LAN
      "The Internet" "wired clients" "wireless clients" "vpn clients"
+
|-
  }
+
| 10.56.1.5 || biglaser || 100W Laser
  "The Internet" -- gateway_eth0
+
|-
  subgraph cluster_gateway {
+
| 10.56.1.10 || ap || The UBNT AP located in the office
      label = "Gateway/Zabbix\n10.56.0.1"
+
|-
      URL = "Network/Gateway"
+
| 10.56.1.25 || makersPBS || Proxmox Backup Server
      gateway_eth0 [label="eth0\n74.95.48.249"]
+
|-
      gateway_eth1 [label="eth1\n10.56.0.1"]
+
| 10.56.1.99 || copier || Carol the Canon
      gateway_eth2 [label="eth2\n10.56.1.1"]
+
|-
      gateway_eth3 [label="eth3\n10.56.2.1"]
+
| 10.56.1.179 || printer || ancient laser printer
      gateway_tun0 [label="tun0\n10.56.3.1"]
+
|-
  }
+
| 10.56.1.214 || simplysnap || snap controller
  gateway_eth2 -- "wired clients"
+
|}
  gateway_eth3 -- "wireless clients"
+
  gateway_tun0 -- "vpn clients"
+
  
  subgraph cluster_kratos {
+
== Physical ==
      label = "VM Host"
+
Just about any port you plug into at the shop will put you on this network (probably). Wirelessly, this network is available as the "Makers Local 256" ESSID, which is WPA2 encrypted.
      URL = "Network/Kratos"
+
      kratos_eth0 [shape="box", label="eth0\n10.56.0.2"]
+
  }
+
  gateway_eth1 -- kratos_eth0
+
 
+
  subgraph cluster_web {
+
      label = "Web"
+
      URL = "Network/Web"
+
      web_eth0 [shape="box", label="eth0\n10.56.0.3"]
+
  }
+
  gateway_eth1 -- web_eth0
+
 
+
  subgraph cluster_mail {
+
      label = "Mail"
+
      URL = "Network/Mail"
+
      mail_eth0 [shape="box", label="eth0\n10.56.0.4"]
+
  }
+
  gateway_eth1 -- mail_eth0
+
 
+
  subgraph cluster_backup {
+
      label = "Backup"
+
      URL = "Network/Backup"
+
      backup_eth0 [shape="box", label="eth0\n10.56.0.7"]
+
  }
+
  gateway_eth1 -- backup_eth0
+
 
+
  subgraph cluster_zimbra {
+
      label = "Zimbra"
+
      URL = "Network/Zimbra"
+
      zimbra_eth0 [shape="box", label="eth0\n10.56.0.8"]
+
  }
+
  gateway_eth1 -- zimbra_eth0
+
 
+
  subgraph cluster_asterisk {
+
      label = "Asterisk"
+
      URL = "Network/Asterisk"
+
      zimbra_eth0 [shape="box", label="eth0\n10.56.0.9"]
+
  }
+
  gateway_eth1 -- zimbra_eth0
+
 
+
  subgraph cluster_lobby_webcam {
+
      label = "Lobby Cam"
+
      lcam_eth0 [shape="box", label="10.56.1.2"]
+
  }
+
  gateway_eth2 -- lcam_eth0
+
 
+
  subgraph cluster_fdoor_webcam {
+
      label = "FDoor Cam"
+
      fcam_eth0 [shape="box", label="10.56.1.4"]
+
  }
+
  gateway_eth2 -- fcam_eth0
+
 
+
  subgraph cluster_Door {
+
      label = "Door"
+
      URL = "USB_Auth"
+
      door_eth0 [shape="box", label="10.56.1.5"]
+
  }
+
  gateway_eth2 -- door_eth0
+
 
+
  subgraph cluster_optra {
+
      label = "Printer"
+
      URL = "Make_Shop_Printer"
+
      optra_eth0 [shape="box", label="10.56.1.6"]
+
  }
+
  gateway_eth2 -- optra_eth0
+
 
+
  subgraph cluster_Change {
+
      label = "Change Machine"
+
      URL = "Cash-Caching_Automaton"
+
      change_eth0 [shape="box", label="10.56.1.51"]
+
  }
+
  gateway_eth2 -- change_eth0
+
}
+
 
+
</graphviz>
+
 
+
==Physical Map==
+
<graphviz caption='Physical Map' alt='Physical Map' format='png'>
+
graph PhysicalMap {
+
        graph [rankdir = "LR"];
+
 
+
        switch    [shape=box, label="Cisco Switch 2950XL"];
+
        xenhost    [shape=box, label="Whitebox xen host"];
+
        fon        [shape=box, label="La Fonera AP"];
+
        modem      [shape=box, label="Comcast Cable Modem"];
+
        library    [shape=box, label="Library"];
+
        webcambox  [shape=box, label="Webcam box"];
+
        roma      [shape=box, label="Door laptop"];
+
        webcam    [shape=box, label="Linksys Webcam"];
+
        cisco      [shape=box, label="Cisco 2950"];
+
        aa50      [shape=box, label="Asterisk Appliance 50"];
+
        optracolor [shape=box, label="Lexmark Optracolor 1200"];
+
 
+
        switch -- xenhost    [label="port 1"];
+
        switch -- fon        [label="port 2"];
+
        switch -- modem      [label="port 3"];
+
        switch -- library    [label="port 4"];
+
        switch -- webcambox  [label="port 5"];
+
        switch -- roma      [label="port 6"];
+
        switch -- webcam    [label="port 7"];
+
        switch -- cisco      [label="port 8"];
+
        switch -- aa50      [label="port 9"];
+
        switch -- optracolor [label="port 10"];
+
}
+
</graphviz>
+
 
+
==Troubleshooting==
+
<graphviz caption='Troubleshooting' alt='Troubleshooting' format='png'>
+
digraph NetworkTroubleshooting {
+
overlap=false
+
label="Internet Troubleshooting Flowchart\nPrinted on 2010-03-17"
+
fontsize=14;
+
 
+
node1 [shape=box,      label="The wifi is broken."];
+
node2 [shape=diamond,  label="Does the website work\nexternally?"];
+
node3 [shape=diamond,  label="Is the xen host on?"];
+
node4 [shape=box,      label="Unplug the AP for 30 seconds."];
+
node5 [shape=box,       label="Disconnect the cable modem's\nPSU from the wall for 2 minutes."];
+
node6 [shape=box,      label="Notify Matt(brimstone)."];
+
node7 [shape=box,       label="Turn on the xen host."];
+
node1->node2;
+
node2->node3 [ label = "no" ];
+
node2->node4 [ label = "yes" ];
+
node3->node5 [ label = "yes" ];
+
node3->node7 [ label = "no" ];
+
node4->node6 [ label = "still broken" ];
+
node5->node6 [ label = "still broken" ];
+
node7->node6 [ label = "still broken" ];
+
 
+
}
+
</graphviz>
+

Latest revision as of 12:24, 2 November 2022

THIS PAGE IS PAINFULLY OUT OF DATE IN BOTH USAGE AND ENUMERATION OF DEVICES.

This is the main LAN at the shop and it's what the makers will use to connect. This network is able to talk to all the workstations and servers on the network so only members should be able to use this (this isn't a rule but it's an important guideline).

Logical

This IP space is 10.56.1.0/24 (10.56.1.*).

IP Hostname Description
10.56.1.1 router Default router for machines in this LAN
10.56.1.5 biglaser 100W Laser
10.56.1.10 ap The UBNT AP located in the office
10.56.1.25 makersPBS Proxmox Backup Server
10.56.1.99 copier Carol the Canon
10.56.1.179 printer ancient laser printer
10.56.1.214 simplysnap snap controller

Physical

Just about any port you plug into at the shop will put you on this network (probably). Wirelessly, this network is available as the "Makers Local 256" ESSID, which is WPA2 encrypted.