Differences between revisions 1 and 2
⇤ ← Revision 1 as of 2006-01-25 15:53:54 →
Size: 5768
Editor: WaltrautNiepraschk
Comment:
← Revision 2 as of 2006-01-26 12:38:43 → ⇥
Size: 4914
Editor: WaltrautNiepraschk
Comment:
Deletions are marked like this. Additions are marked like this.
Line 21: Line 21:
    Der Netzwerkzugang ist vor allem für Gäste gedacht, die sich nur kurzfristig bei DESY aufhalten und erfolgt innerhalb weniger Minuten. Interne Dienste können nur sehr beschränkt genutzt werden (kein Login in Windows Domaine, kein AFS). Die Zugangsmöglichkeiten entsprechen im Wesentlichen dem anderer externer Rechner.
    ||<tablestyle="background-color:#FFE0DF;">Die [:mac address: MAC-Adressen] des Gerätes und die verantwortliche Person müssen dem Rechenzentrum bekanntgemacht werden.||
    Die Registrierung kann erfolgen
    * durch eine Mail an uco-zn@desy.de, Bearbeitung während der normalen Arbeitszeit, 		    The guest subnet is mainly provided for guests staying at DESY for a short time and is available during a few minutes. Internal services can only be used very limited nur sehr beschränkt genutzt werden (no Login in Windows Domain, kein AFS). Die Zugangsmöglichkeiten entsprechen im Wesentlichen dem anderer externer Rechner.
    ||<tablestyle="background-color:#FFE0DF;">The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.||
    The registration can be made
    * by an email to uco-zn@desy.de, processing during normal working hours,
Line 26: Line 26:
    Subject: Registrierung eines Notebooks     Subject: Registration of a Notebook
Line 29: Line 29:
    Ablaufdatum der Registrierung: (max. 1Jahr, Standard:7 Tage)     Expiration date of the registration: (max: 1 year, default: 7 days)
Line 31: Line 31:
    * über ein WEB-Formular [[BR]]     * by a WEB form [[BR]]
Line 33: Line 33:
    Es ist erreichbar innerhalb des LAN (außer vom Gästenetz) und kann von jedem Benutzer verwendet werden, der einen Account bei DESY hat. 15 Minuten nach der Registrierung sollte der Netzzugang möglich sein. Das Ablaufdatum der Registrierung ist auf 1 Jahr begrenzt, standardmäßig ist eine Woche eingestellt.     The URL is available inside the LAN (guest subnet excluded) and can used by every user, who has an account at DESY. 15 minutes after the registration the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.
Line 36: Line 36:
==== 1. Internal access ====
 a. via cable attached Ethernet interface for trusted devices (see [#Trusteddevice below])
 a. via wireless interface[[BR]]
 in addition to being trusted, the device has to use a special SSID and a WEP key. These are
 identical for the internal networks at DESY, both in Hamburg and Zeuthen.[[BR]]
 You will get the SSID and WEP key from uco-zn on request. If you do not use the WEP key your registered notebook will only get access to the guest subnet.
==== 2. External access (guest subnet, non trusted devices) ====
 cable based and wireless interface [[BR]]
        The network access to non trusted devices will be limited to the same services like other external hosts (no AFS).
     ||<tablestyle="background-color:#FFE0DF;">The [:mac address: MAC address] of the device and the responsible person must be made known to the computer center.||
        * For this purpose the Web form [[BR]]
  http://register.ifh.de/cgi-bin/register?conf=notebook [[BR]]
  must filled out inside the local area network. [[BR]]
        '''Everyone who has an account at DESY''' is authorised to fill the Web form '''from every PC (excluded guest subnet)'''.[[BR]]
        15 minutes after the registration the notebook should get access to the network. The maximum expiration time of registration is one year, the default 7 days.
        * From outside you can send a request to UCO Zeuthen, email uco-zn@desy.de, asking to register the mac addresses of your notebook. 		==== Internal Access for trusted Devices ====
 
===== trusted Devices =====
The DESY Computer Security Council (RSR) has determined in a statement the following rules:
   http://www.desy.de/rsr/intern/rsr-stat-2003-01-rules.html
With a sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen:
{{{
         eMail : uco-zn@desy.de
         Fax : +49 33762 77216
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen}}}
Line 53: Line 47:
[[Anchor(Trusteddevice)]] A device is classified as trusted device if the signature of the responsible person is existent. [[BR]]
For DESY Notebooks, which are in central support of DV Zeuthen, should only take attention:
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] und
   [http://dvinfo.ifh.de/NotebookSecurityLinux Notebook Security Linux ] [[BR]]
Line 55: Line 52:
=== How to register as a trusted device === ===== Cable based Network Access =====
 * Unfortunately at present it is not possible to transfer all cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.
 * The computing center Zeuthen are not able to register the cable Mac address in DESY, Hamburg for you. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, Hamburg to register the cable based interface.
Line 57: Line 56:
The DESY Computer Security Council (RSR) demands that the persons
responsible for a computer that should be connected to the internal DESY
network have to read
  http://www.desy.de/rsr/intern/rsr-stat-2003-01-rules.html
obey the rules and sign the form mentioned there. The form has to be
sent to uco Zeuthen:
     {{{
         email : uco-zn@desy.de
         fax : +49 33762 77216
         surface mail : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen}}}		 ===== Wireless Network Access =====
 * '''In the internal WLAN you have to use the special SSID and WEP-Key.'''
 * These are identical for the internal networks at DESY, both in Hamburg and Zeuthen.
 * You will get the SSID and WEP key from uco-zn automatically after the receipt of the signed form.
 * The wireless network interfaces of devices registered at DESY, Hamburg are considered as trusted devices in Zeuthen too.
 * If the notebook should also connected to the WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will communicate the information to the network group at DESY, Hamburg and initiate the registration.
Line 68: Line 63:
 * We denote a notebook for which a signature of the responsible person is available a '''trusted device '''.
 * For DESY notebooks centrally supported by DV Zeuthen you should only take attention:
   [http://dvinfo/NotebookSecurityWindows Notebook Security Windows] and
   [http://dvinfo/NotebookSecurityLinux Notebook Security Linux ] [[BR]]
   If you follow these instructions you meet the requirements given in the RSR statement.
 * Whereas the wireless network interfaces of devices registered at DESY in Hamburg are considered as trusted devices too,
 you have to register the cable based network interface in Zeuthen additionally.
 * All mobile devices for which the responsible person did not sign the document mentioned above are '''non trusted devices'''.
 * After the receipt of the signed form we will activate the internal network access for the notebook.
 * If you would like to connect your notebook to the internal DESY network in Hamburg too we will communicate the information to the network group in Hamburg and initiate the registration of the '''wireless''' interface if necessary. You have to contact the [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator] to register the '''cable''' interface.		 === The Availability of Network Facilities ===
==== The Cable based Access ====
 * Notebooks can be connected to sockets in public rooms which were marked with a green dot.
 * It is not allowed to disconnect the office PCs from the network and to replace by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.

==== WLAN Availability ====
 * At the moment access points are available in the area of the Foyer and in the seminar rooms 1-3.

NICHT FERTIG!!

Notebook Registration at DESY Zeuthen

TableOfContents

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

  • To connect a notebook or an other mobile device to the DESY Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
  • Two different network access methods exists, one to the internal network and the other one corresponds approximately to the one of an externel host.
  • The DESY Computer Security Council (RSR) demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.

In the following you can find some more information about the both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access ( guest subnet )

  • Für das Gästenetz existiert eine Kabel basierte und eine drahtlose Schnittstelle. BR The guest subnet is mainly provided for guests staying at DESY for a short time and is available during a few minutes. Internal services can only be used very limited nur sehr beschränkt genutzt werden (no Login in Windows Domain, kein AFS). Die Zugangsmöglichkeiten entsprechen im Wesentlichen dem anderer externer Rechner.

    The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.
    The registration can be made

  • by an email to uco-zn@desy.de, processing during normal working hours, 

    •     Subject: Registration of a Notebook
        
    Mac WLAN:  Mac Eth:
    Expiration date of the registration: (max: 1 year, default: 7 days)

  • by a WEB form BR

    The URL is available inside the LAN (guest subnet excluded) and can used by every user, who has an account at DESY. 15 minutes after the registration the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.

Internal Access for trusted Devices

trusted Devices

The DESY Computer Security Council (RSR) has determined in a statement the following rules:

With a sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen: 

         eMail : uco-zn@desy.de 
         Fax : +49 33762 77216 
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen

A device is classified as trusted device if the signature of the responsible person is existent. BR For DESY Notebooks, which are in central support of DV Zeuthen, should only take attention:

Cable based Network Access
  • Unfortunately at present it is not possible to transfer all cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.

  • The computing center Zeuthen are not able to register the cable Mac address in DESY, Hamburg for you. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, Hamburg to register the cable based interface.

Wireless Network Access

  • In the internal WLAN you have to use the special SSID and WEP-Key.

  • These are identical for the internal networks at DESY, both in Hamburg and Zeuthen.
  • You will get the SSID and WEP key from uco-zn automatically after the receipt of the signed form.
  • The wireless network interfaces of devices registered at DESY, Hamburg are considered as trusted devices in Zeuthen too.

  • If the notebook should also connected to the WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will communicate the information to the network group at DESY, Hamburg and initiate the registration.

The Availability of Network Facilities

The Cable based Access

  • Notebooks can be connected to sockets in public rooms which were marked with a green dot.

  • It is not allowed to disconnect the office PCs from the network and to replace by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.

WLAN Availability

  • At the moment access points are available in the area of the Foyer and in the seminar rooms 1-3.

NoteBook_Registration (last edited 2017-08-22 12:55:59 by ManuelaBrehmer)