Primary IT Infrastructure: Difference between revisions

From HackRVA
Jump to navigation Jump to search
Line 41: Line 41:
#*General access to internet services only
#*General access to internet services only
#hackrva-lan  
#hackrva-lan  
#*(vlan-300)  
#*(vlan-30)  
#*This is used for member access to all services within Hackrva's internal network.
#*This is used for member access to all services within Hackrva's internal network.
#*If a peripheral device is connected to the Layer 3 network, and hence connected on vlan-300, then this device will only be accessible via wireless on hackrva-lan ssid.<br>
#*If a peripheral device is connected to the Layer 3 network, and hence connected on vlan-300, then this device will only be accessible via wireless on hackrva-lan ssid.<br>

Revision as of 04:22, 9 August 2014

Please check back with this page, as we are in the process of populating good information, relating to how to get the most out of your HackRVA data experience.


The primary network architecture

At HackRVA we utilize a switched network with vlans and VoIP support. We have a dedicated smart-switch, a router and a Virtulization Server which runs our web services, and groupware.

Network Topology

Network Diagram

HRVA topology.jpg


Layer 2 and Layer 3

VLANs (802.1q tags)

At HackRVA we have a segmented network using vlans for segregation of traffic.

VLAN-1
houses the management end-points for primary services.
VLAN-100
the voip vlan, specifically intended to have all voip traffic.
VLAN-200
the vlan for hackrva-wireless, and is the vlan which you will be assigned to, if access the hackrva-wireless ssid.
VLAN-30
the vlan for all wired network infrastructure, and is also the vlan for network services such as email, and dns, as well as network printers.

TCP/IP Layer and 802.1q label assignment

Address Space (IPv4)

At HackRVA we have subneting that is assigned to specific vlans.

VLAN-1
subnet 192.168.10.0/24
VLAN-100
subnet 192.168.100.0/24
VLAN-200
subnet 192.168.200.0/24
VLAN-30
subnet 192.168.30.0/24

Address Space (IPv6)

HackRVA does not currently utilize IPv6 address space.

Wireless SSID List

At Hackrva, we utilize three ssids for specific access to services, which is relevant for different types of users.

  1. hackrva-wireless
    • (vlan-200)
    • General access to internet services only
  2. hackrva-lan
    • (vlan-30)
    • This is used for member access to all services within Hackrva's internal network.
    • If a peripheral device is connected to the Layer 3 network, and hence connected on vlan-300, then this device will only be accessible via wireless on hackrva-lan ssid.
  3. hackrva-admin
    • (vlan-1)
    • Used for management purposes, when connecting via the wireless network layer.

Network Devices

The HackRVA network is comprised of four primary network infrastructure devices.

CPE devices

NetGear Business Gateway

HackRVA Labs, Inc. uses comcast business class service with static IPv4 provisioned
The device provided for this service is the NetGear CG300DCR business gateway.
The device provides a four port switch, for easy integration into our network architecture.
NetGear-CG3000DCR.png

Cisco RV180 VPN Router

The RV180 VLAN-enabled VPN SOHO router is the brains of the internal network architecture.
This device provides dhcp to clients on the internal LAN as well as NAT functionlaty for accessing the internet from behind the cable modem.
To understand what vlan capabilities are being used as the space, please reference the VLAN section, below.

RV180VPN Front-REAR.jpg

Ubiquiti Wireless AP

The wireless services are provided by a commerical-grade wireless access point.
The access point requires management software installed on a Windows computer, or Linux (with much more work).
Ubiquiti UniFi-AP.jpg
CAUTION

  • Do not plug IEEE standar PoE devices into the output of the supplied Ubiquiti PoE adaptor, or the converse.
  • The Unifi model that is in use does not comply with IEEE standards based PoE voltages.

NetGear 24-port smart-switch

This device is referenced by Netgear as the GS724T-300 smart-switch.
This device is capable of vlan tagged ports, as well as port trunking.
NetGear-GS724Tv2.jpg

NetGear 5-port smart-switch

This device is referenced by Netgear as the GS105v1 unmanaged switch.
This device is capable of 10/100/1000 Mbit/s speed on all five ports.
NetGear-GS105v1.jpg

Cisco 2651 Series Router

We have a Cisco 2651xm router which provides all major routing features that are configured on the HackRVA network.
Cisco-2651.jpg

Network Services

Domain Name Services (dns)

HackRVA currently hosts its own domain name services, or "DNS."
Authoritative dns services are supplied to the following domains.

hackrva.org

  • lists - hosted offsite, at this time.
  • mail
  • www
  • imap
  • ftp
  • listserver
  • mobilsync
  • smtp
  • testweb
  • zmail
  • zmailserver

hackrva.net

(Not currently hosted on our dns servers, however this should change soon.)

hackrva.us

  • list
  • mail
  • www
  • imap
  • ftp
  • listserver
  • mobilsync
  • smtp
  • testweb
  • zmail
  • zmailserver

hackrva.info

  • list
  • mail
  • www
  • imap
  • ftp
  • listserver
  • mobilsync
  • smtp
  • testweb
  • zmail
  • zmailserver

Dynamic Host Control Protocol (dhcp)

The dhcp services are managed by the RV180 VPN router.

Network Time Protocol (ntp)

File Transfer Protocol (ftp)

VoIP

www

EMail

VPN

Servers and Workstations

Power Management

Battery Backup Devices

We have been supporting our network infrastructure, and servers with an entry-level server UPS from CyberPower since August 2013.

CyberPower OR700LCDRM1U

The CyberPower Smart App LCD 700VA Line-Interactive UPS with AVR, provides line conditioning, and other features which allow HackRVA to maintain a good uptime, in leu of power outages.
Cyberpower 700VA-400W UPS Accessories View.jpg


Key Information

CyberPower-OR700LCDRM1U UPS INFO View.jpg
CyberPower-OR700LCDRM1U-UPS-Rear-View.jpg

Power Distributors

Racks and Cabinets

At HackRVA Labs, Inc. we have two racks, or "cabinets" in use.
One is a 36U full depth data server cabinet.

Enclosures

NORCO Rack

We current use a Norco W-609 wallmount cabinet.
Norco-9u-enclosure.jpg

HackRVALabs-Wallmount-Rack.jpg

Computer Lab Systems

Historical Reference