Systems Info

From Ilab internal

1 ILab
2 FogLab
- 2.1 IP Allocation

[edit]

ILab

[edit]

IP Allocation

Important lab IP addresses:

mask: 255.255.255.192
gateway: 128.111.28.65
cs switch: 128.111.28.66
firewall: 128.111.28.67
ilab switch: 128.111.28.68
ilab printer: 128.111.28.69
VPN server: 128.111.28.70
ilabqueen (main file server): 128.111.28.71
ilabking (remote desktop server): 128.111.28.72
majuro (linux server): 128.111.28.77

[edit]

Lab Physical Layout

There is a tag on the top of each computer in Ilab. The tag has the information about IP address, Windows serial numbers and computer names.

[edit]

Machine List

Room A:

A1: jaluit, 128.111.28.78; majuro, 128.111.28.77
A2
A3: ilabking, 128.111.28.72
A4: turtle, 128.111.28.95
A5
A6: hawk, 128.111.28.97 (defective - video card problem?)
printer: 128.111.28.69
ilabqueen: 128.111.28.70

Room B:

B1: dragon, 128.111.28.79
B2: ???, ???
B3: hainan, 128.111.28.98

Room C:

C1: sylt, 128.111.28.82
C2
C3

[edit]

Firewall

The lab firewall is housed in building 936 rm 101 (across the walkway from the ilab), in the closet. The setup is a little unusual, so if you want to change it, read this carefully.

To connect to the firewall, you must be physically at the machine, and log in as root with the password "F,olf4TS." (from the sentence, "Finally, our lab firewall four TOTAL SAFETY.").

The machine has no hard drive. It runs Devil Linux 1.2.4, booted off a live-cd. The configuration is stored on a floppy disk, which just has the contents of /etc/ and /root/ stored in a single file called etc.tar.bz2 (a backup of the current configuration is here Media:etc.tar.bz2). To modify the configuration, log on to the machine, make your changes, and then _save_ the configuration to the floppy disk, like this:

cd /shm/
tar cj etc/ root/ > /tmp/etc.tar.bz2
mount /floppy
cp /tmp/etc.tar.bz2 /floppy/
umount /floppy

Note that you will need to eject the floppy first, set it to writeable (by moving the little plastic tab), and then reinsert it. Once you've unmounted the disk, remove it, reset it to write-protected, and put it back in.

The important files for the configuration are /etc/sysconfig/nic/* and /etc/init.d/firewall.rules. In /etc/sysconfig/nic/ you'll find ifcfg-eth0, ifcfg-eth1, and ifcfg-br0. -eth0 and -eth1 are the configuration for the two network cards: eth0 is the top card and used for the internal connection, and eth1 is on bottom for the external connection. The only important part of these files is the specified drivers - if new cards are used, that may need to be changed. -br0 sets up the ethernet bridge, which is what pipes traffic from one network card to the other, as well as the networking information for the firewall itself. Currently, its IP address is set to 128.111.28.67, and the gateway is 128.111.28.65 - if these ever change for the lab, they'll need to be updated here.

The firewall configuration is in /etc/init.d/firewall.rules. This script sets up iptables rules - read up on it if you don't know what that is. Currently, incoming SSH is allowed to any IP, VPN is allowed to ilabqueen, and that's it. In general, only secure protocols on secure machines, that cannot be used over the VPN should be configured into the firewall.

The machine itself is set up in the BIOS to automatically restart on power loss, and also to turn itself on every day at 5am if it's not on already. Hopefully this will reduce downtime for the lab network. For the future, replacing the CD / floppy disk combo with a USB thumb drive would be preferrable, to reduce the number of moving parts. Also, using a fanless CPU would be good. Upgrading to a newer version of Devil Linux would also be appropriate.

[edit]

Software Installation

Frequently used software is available from \\ilabqueen\software. You can download some Microsoft software, including Windows XP and Visual Studio, from the CS Department's Microsoft Academic Alliance (MSAA) at https://msdn07.e-academy.com/ucsb_cs/ for FREE!

[edit]