Physics Network Integration

1
Physics Network Integration
Chris Hunter
2
Physics network team

• Chris Hunter Network Manager
• David Newton Network Support Technician
• Room DWB 662
• Phone 73501
• Email network_at_physics.ox.ac.uk

3
Physics Network

• Available Switch ports 2290 Approx. 59.2 active
• 16 network concentration points (NCPs) in the
  Denys Wilkinson Building alone.
• Level 2 NCP hub of the Physics network with 1Gb
  fibre connections going to each of the Physics
  buildings.
• Firewall Juniper Netscreen ISG 1000

4
Physics Wireless Network

• Currently 18 x 802.11g wireless access points in
  the DWB
• Clients connected to the Physics_M wireless
  network are part of the 163.1.19.x subnet,
  currently WEP encryption only.
• Register for wireless network access with Physics
  Network credentials at http//www.physics.ox.ac.uk
  /it/account.

5
OUCS wireless network

• OWL-VISITOR and OWL-VPN also available, via the
  OWL ssid.
• Eduroam now also available, connect using your
  Remote Access Account, different from your SSO or
  Nexus account http//www.oucs.ox.ac.uk/network/wir
  eless/services/eduroam/
• Details about both OWL Eduroam at
  http//www.oucs.ox.ac.uk/network/wireless

6
Access to Physics Services from the un-trusted
subnet or remotely

• Virtual Private Network (VPN)
• vpn.physics.ox.ac.uk works with Microsoft, Linux
  and OSX clients, uses Physics authentication
  domain help at http//www.physics.ox.ac.uk/it/netw
  ork/vpn/
• Oxford University Computing Service (OUCS) have
  VPN service, does need specific client installed
  details at http//www.oucs.ox.ac.uk/network/vpn/

7
Network Security

• Connecting unmanaged systems to the Physics
  Network
• MAC address registration is needed before gaining
  any network connection for laptops please
  register at http//www.physics.ox.ac.uk/it/account
  /
• 172.17.x.x un-trusted subnet
• Is your laptop up to date?
• Anti Virus / spyware
• Fully patched OS
• Connecting from outside of Physics
• SMB blocked, no connection to windows files
• MAPI access to Exchange Server blocked
• SMTP blocked

8
Network Security

• Exchange Server protocols not blocked
• IMAP
• Authenticated SMTP is available using
  smtps.physics.ox.ac.uk, PHYSICS authentication
  domain credentials are needed to use the service
• Other protocols
• web access
• RPC over HTTPS

9
Network Security

• Sophos Anti Virus Software
• Updates, out of date AV is no use
• Download Sophos for personal laptops running-
• Sophos 7.6.12 for XP, Vista and Windows7 at
  http//www.physics.ox.ac.uk/sophos/
• Linux at http//www.oucs.ox.ac.uk/viruses/linux/
• Sophos v7.0.5 for MAC OSX 10.4/10.5/10.6 at
  http//www.physics.ox.ac.uk/sophos/
• Hoping to setup Network Access Control (NAC) onto
  our network

10
Network Backbone Connection

• Physics connection presently 1Gbps
• Campus connection to Super Janet currently at 2
  x 10Gbps.

11
Access to Physics Services from the un-trusted
subnet or remotely

• Winfe server
• exchange email web access (more functionality
  with IE)
• https//winfe.physics.ox.ac.uk/exchange
• HTTPS-RPC proxy service is available with Outlook
  2003 http//www.physics.ox.ac.uk/it/email/exchange
  /http-rpc.htm
• Webdav via browser or windows network places
• https//winfe.physics.ox.ac.uk/home/ltusernamegt
  connects to your windows H drive.
• (Windows Only) Open My Network Places and click
  on add a network place
• Sftp
• Ssh on windows clients also comes with sftp
• Other available clients
• winscp, see http//winscp.sourceforge.net
• putty (command line), see http//www.chiark.greene
  nd.org.uk/sgtatham/putty/
• http//www.physics.ox.ac.uk/it/windows/remote.htm

12
Access to Physics Services from the un-trusted
subnet or remotely

• Printing from a Windows Laptop not in the Physics
  domain.
• http//www.physics.ox.ac.uk/it/mswindows/windowspr
  inting.htm
• MAC Printing
• http//www.physics.ox.ac.uk/it/mac/macprinting.htm
  

13
Access to Physics Services from the un-trusted
subnet or remotely

• Windows terminal server Termservqc
• http//www.physics.ox.ac.uk/tsweb/ (IE Only)
• Remote Desktop Client (MS MAC OSX), possible to
  connect to local disks, printers and serial ports
  (not possible to connect serial ports in OSX).
• Rdesktop on Linux systems,
• rdesktop lttermservqcgt, more for people without
  Windows desktop
• Windows XP, Vista and Windows 7 will allow remote
  access via terminal services

14
Exchanging files between Windows Linux

• Use WinSCP under start/programs/

15

• FAQs http//www.physics.ox.ac.uk/it/mswindows/faq
  .htm

16
Questions?