Physics Network Integration

1
Physics Network Integration
Chris Hunter
2
Network Security

• Connecting unmanaged systems to the Physics
  Network
• MAC address registration is needed before gaining
  any network connection for laptops
• 10.10.93.x un-trusted subnet
• Is your laptop patched?
• Connecting from outside of Physics
• SMB blocked, no connection to windows files
• MAPI access to Exchange Server blocked
• SMTP blocked
• Xwindows blocked

3
Network Security

• Exchange Server protocols not blocked
• POP
• IMAP
• Authenticated SMTP is available using
  exchng2.physics.ox.ac.uk, PHYSICS authentication
  domain credentials are needed to use the service
• Other protocols
• web access
• RPC over HTTPS

4
Network Security

• Sophos Anti Virus Software
• Updates
• OUCS shop
• Central Installation
• Remote Update
• www.physics.ox.ac.uk/sophos
• Central Reporting

5
Access to Physics Services from the un-trusted
subnet or remotely

• Virtual Private Network (VPN)
• Oxford University Computing Service (OUCS) have
  VPN service, does need specific client installed
• vpn.physics.ox.ac.uk works Microsoft, Linux and
  OSX clients, uses Physics authentication domain

6
Access to Physics Services from the un-trusted
subnet or remotely

• Winfe server
• exchange email web access (more functionality
  with IE)
• https//winfe.physics.ox.ac.uk/exchange
• HTTPS-RPC proxy service is available with Outlook
  2003
• Webdav via browser or windows network places
• https//winfe.physics.ox.ac.uk/home/ltusernamegt
• (Windows Only) Open My Network Places and click
  on add a network place
• Sftp (ftp no longer available internal or
  extranal to physics)
• Ssh on windows clients also comes with sftp
• Other available clients
• winscp, see http//winscp.sourceforge.net
• putty (command line), see http//www.chiark.greene
  nd.org.uk/sgtatham/putty/
• Connect to winfe for access to your h drive
• http//www.physics.ox.ac.uk/it/windows/remote.htm

7
Access to Physics Services from the un-trusted
subnet or remotely

• Web Printing
• http//ppnt183.physics.ox.ac.uk/printers
• Printing from wireless
• Fully qualify print server name when connecting
  to printers

8
Access to Physics Services from the un-trusted
subnet or remotely

• Tunnelling Xwindows over SSH
• Start Exceed in Passive Mode
• Make sure that your SSH connection profile is set
  to Tunnel X 11 connections
• Open an SSH connection to the Linux server you
  wish to connect to using a ssh client.
• At the command prompt type
• xterm, starts xterm within Exceed window
• mwm, starts a window manager
• Exceed supports X11 over SSH with an Exceed
  security pack installed, connects directly no
  need to go through the rigmarole above.

9
Access to Physics Services from the un-trusted
subnet or remotely

• Windows terminal server
• http//www.physics.ox.ac.uk/tsweb/ (IE Only)
• Remote Desktop Client (MS OS Only), possible to
  connect to local disks, printers and serial
  ports.
• Rdesktop on Linux systems,
• rdesktop lttermservmpgt, more for people without
  Windows desktop
• Windows XP will allow remote access via terminal
  services

10
Physics Wireless Network

• Wireless is currently installed
• DWB Beecroft Institute
• DWB Video Conference Room
• DWB Common Room
• Dennis Sciama Lecture Theatre
• Martin Wood Lecture Theatre
• Theoretical Physics Townsend top floor
• Clients connected to the wireless network are
  part of the 163.1.19.x subnet.
• http//www.physics.ox.ac.uk/it/network/wireless/

11
Exchanging files between Windows Linux

• Connecting to Linux files in Windows
• Y\NFS\particle\userdisk
• Connecting to Windows files from Linux
• cd /windows/users/particle/ltusernamegt

12
Network Backbone Connection

• Physics connection presently 1Gbps
• Campus connection to Super Janet currently at
  10Gbps.