Differences between revisions 14 and 15
Revision 14 as of 2006-01-30 15:12:08
Size: 5161
Comment:
Revision 15 as of 2006-01-30 23:41:37
Size: 5721
Comment: noch ein paar winzige Änderungen...
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
 * To connect a notebook or other mobile devices to the DESY, Zeuthen network, the responsible person and the MAC addresses of the device have to be registered with the computer center.
 * Two different classes of network access exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs an account at DESY, the device will be classified as a trusted device.
 * To connect a notebook or other mobile device to the DESY Zeuthen network, the responsible person and the MAC address(es) of the device have to be registered with the computer center.
 * Two different classes of network access exist:
  * One with unlimited access to th
e to the internal network
  * The other one is mostt
y like that of anonymous hosts somewhere on the internet
 * The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] requires that a person who wants to attach a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs to be in possession of an account at DESY (AFS or Win2k), the device will be classified as a trusted device.
Line 19: Line 21:
    The guest subnet is mainly provided for guests staying at DESY for a short time and gaining access only takes a few minutes. Access to internal services is very limited (no Login into Windows Domain). The access rights basically correspond to those of external hosts.     The guest subnet is mainly provided for guests staying at DESY for a short time. Gaining access to it only takes a few minutes. Access to internal services is very limited (no Login into Windows Domain). The access rights basically correspond to those of anonymous external hosts.
Line 22: Line 24:
    * by an email to uco-zn@desy.de, processing during normal working hours,
                           {{{
    Subject: Registration of a Notebook
    * by sending an email to uco-zn@desy.de (processing by humans during normal working hours)
    {{{
Subject: Registration of a Notebook
Line 26: Line 28:
    Mac WLAN:  Mac Eth:
    Expiration date of the registration: (max: 1 year, default: 7 days)
                              }}}
    * by a WEB form, automatic processing 24x7 [[BR]]
Mac WLAN:
Mac Eth:
Requested expiration date for the registration: (max: 1 year, default: 7 days)
}}}
    * through a web form (automatic processing 24x7) [[BR]]
Line 31: Line 34:
    The URL is accessible from the '''internal''' network and can used by every user, who has an account at DESY. 15 minutes after the registration, the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.     The URL is accessible from the '''internal''' network and can used by any user who has an account at DESY. 15 minutes after submitting the form, the registered device should be able to access the guest subnet. The expiration date of the registration is limited to one year, the default is one week.
Line 36: Line 39:
The DESY Computer Security Council (RSR) issued a set of rules and recommendations: The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anoyone operating computers attached to the DESY internal network:
Line 38: Line 41:
By signing the form mentioned there you accept the rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen: By signing the form mentioned there, you acknowlodge and accept these rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:
Line 40: Line 43:
         eMail : uco-zn@desy.de
         Fax : +49 33762 77216
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen}}}
eMail : uco-zn@desy.de
Fax : +49 33762 77216
Address: DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen}}}
Line 44: Line 47:
For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention to
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] and
For DESY notebooks centrally supported by DV Zeuthen, you only need to turn your attention to
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] and/or
Line 47: Line 50:
and have to sign a special form when the notebook is claimed from the computing after installation. and sign a special form when the notebook is claimed from the computing after installation.
Line 50: Line 53:
 * It is not yet possible to transfer cable MAC addresses of notebooks registered at DESY, Hamburg to Zeuthen.
 * The computing center Zeuthen is not able to register your cable Mac address in DESY, Hamburg. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, if you need access to the cable based internal network in Hamburg.
 * It is not yet possible to transfer cable MAC addresses of notebooks alread registered at DESY Hamburg to Zeuthen.
 * The computing center in Zeuthen is not yet able to register your cable Mac address in DESY Hamburg.[[BR]]Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in Hamburg if you need access to the cable based internal network in there.
Line 55: Line 58:
 * These are identical for the internal networks at DESY in Hamburg and Zeuthen.
 * You will get the SSID and WEP key from UCO Zeuthen automatically after the receipt of the signed form.
 * The wireless network interfaces of devices registered at DESY, Hamburg are considered trusted devices in Zeuthen too.
 * If you also need to connect your notebook to the internal WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will forward your registration to the network group at DESY, Hamburg.
  * These are identical for the internal networks at DESY in Hamburg and Zeuthen.
  * You will receive the SSID and WEP key from UCO Zeuthen automatically after we received the signed form.
 * All wireless network interfaces of devices registered at DESY, Hamburg are considered trusted devices in Zeuthen.
 * If you also need to connect your notebook to the internal WLAN at DESY Hamburg, please email uco-zn@desy.de and
 ask us to forward your registration data to the network group
at DESY, Hamburg.
Line 63: Line 67:
 * Because there is no tool to evaluate the status of the network socket you have to contact the computing center to get information about it. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.
 * Disconnecting a PC and connecting your notebook instead will block the socket.
  * Alas, most sockets in offices actually lack that label.
  * Because there is no tool to evaluate the status of a network socket, if in doubt you must contact the computing center to find out wether a certain socket is suitable for connecting a mobile device (no matter whether it's registered for internal access or for guest access only). To request clearing a socket for mobile device use, please email uco-zn@desy.de. Please make sure to include the complete socket number.
 * Disconnecting a PC from any other network wall socket and connecting your notebook instead will block the socket.
 Please don't do this.
Line 67: Line 73:
 * At the moment access points are available in the Foyer, 3L area and in the seminar rooms 1-3.  * Access points are available in the Foyer area and in the seminar rooms 1-3 (all 3L). WLAN access in additional areas, floors, or even buildings may be possible but is not supported.

[http://dvinfo.ifh.de/NoteBook_Registrierung NoteBook Registrierung ] http://www-zeuthen.desy.de/icons/german.gif

Notebook Registration at DESY, Zeuthen

TableOfContents

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

  • To connect a notebook or other mobile device to the DESY Zeuthen network, the responsible person and the MAC address(es) of the device have to be registered with the computer center.
  • Two different classes of network access exist:
    • One with unlimited access to the to the internal network
    • The other one is mostty like that of anonymous hosts somewhere on the internet
  • The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] requires that a person who wants to attach a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs to be in possession of an account at DESY (AFS or Win2k), the device will be classified as a trusted device.

In the following you can find some more information about both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access ( guest subnet )

  • In the guest subnet, a cable based and a wireless network interface are provided. BR The guest subnet is mainly provided for guests staying at DESY for a short time. Gaining access to it only takes a few minutes. Access to internal services is very limited (no Login into Windows Domain). The access rights basically correspond to those of anonymous external hosts.

    The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.

    The registration can be done
  • by sending an email to uco-zn@desy.de (processing by humans during normal working hours)

    Subject: Registration of a Notebook
            
    Mac WLAN:
    Mac Eth:
    Requested expiration date for the registration: (max: 1 year, default: 7 days)      
  • through a web form (automatic processing 24x7) BR

    The URL is accessible from the internal network and can used by any user who has an account at DESY. 15 minutes after submitting the form, the registered device should be able to access the guest subnet. The expiration date of the registration is limited to one year, the default is one week.

Internal Access for Trusted Devices

Trusted Devices

The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anoyone operating computers attached to the DESY internal network:

By signing the form mentioned there, you acknowlodge and accept these rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:

eMail : uco-zn@desy.de 
Fax : +49 33762 77216 
Address: DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen

For DESY notebooks centrally supported by DV Zeuthen, you only need to turn your attention to

and sign a special form when the notebook is claimed from the computing after installation.

Cable Based Network Access
  • It is not yet possible to transfer cable MAC addresses of notebooks alread registered at DESY Hamburg to Zeuthen.
  • The computing center in Zeuthen is not yet able to register your cable Mac address in DESY Hamburg.BRPlease contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in Hamburg if you need access to the cable based internal network in there.

Wireless Network Access
  • In the internal WLAN you have to use the special SSID and WEP key.

    • These are identical for the internal networks at DESY in Hamburg and Zeuthen.
    • You will receive the SSID and WEP key from UCO Zeuthen automatically after we received the signed form.
  • All wireless network interfaces of devices registered at DESY, Hamburg are considered trusted devices in Zeuthen.
  • If you also need to connect your notebook to the internal WLAN at DESY Hamburg, please email uco-zn@desy.de and ask us to forward your registration data to the network group at DESY, Hamburg.

Availability of Network Facilities

Cable Based Access

  • Network wall sockets marked with a green label can be used to connect your notebook. These sockets are found in all public terminal rooms and many offices.
    • Alas, most sockets in offices actually lack that label.
    • Because there is no tool to evaluate the status of a network socket, if in doubt you must contact the computing center to find out wether a certain socket is suitable for connecting a mobile device (no matter whether it's registered for internal access or for guest access only). To request clearing a socket for mobile device use, please email uco-zn@desy.de. Please make sure to include the complete socket number.

  • Disconnecting a PC from any other network wall socket and connecting your notebook instead will block the socket. Please don't do this.

WLAN Availability

  • Access points are available in the Foyer area and in the seminar rooms 1-3 (all 3L). WLAN access in additional areas, floors, or even buildings may be possible but is not supported.

NoteBook_Registration (last edited 2017-08-22 12:55:59 by ManuelaBrehmer)