Differences between revisions 3 and 4
Revision 3 as of 2006-01-26 13:14:30
Size: 4869
Comment:
Revision 4 as of 2006-01-26 13:36:20
Size: 4913
Comment:
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
NICHT FERTIG!!

== Notebook Registration at DESY Zeuthen ==
== Notebook Registration at DESY, Zeuthen ==
Line 11: Line 9:
 * To connect a notebook or an other mobile device to the DESY Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
 * Two different network access methods exists, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The DESY Computer Security Council (RSR) demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.
 * To connect a notebook or an other mobile devices to the DESY, Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
 * Two different network access methods exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.
Line 21: Line 19:
    The guest subnet is mainly provided for guests staying at DESY for a short time and is available during a few minutes. Internal services can only be used very limited (no Login in Windows Domain, limited AFS access). The access rights basically correspond to them of the external hosts.     The guest subnet is mainly provided for guests staying at DESY for a short time and the access is available during a few minutes. Internal services can only be used very limited (no Login into Windows Domain, limited AFS access). The access rights basically correspond to them of the external hosts.
Line 40: Line 38:
With a sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen: With the sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen:
Line 46: Line 44:
A device is classified as trusted device if the signature of the responsible person is existent. [[BR]]
For DESY Notebooks, which are in central support of DV Zeuthen, should only take attention:
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] und
A device is classified as a trusted device if the signature of the responsible person is existent. [[BR]]
For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention :
   [http://dvinfo.ifh.de/NotebookSecurityWindows Notebook Security Windows] and
Line 52: Line 50:
 * Unfortunately at present it is not possible to transfer all cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.  * Unfortunately at present it is not possible to transfer all registered cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.
Line 56: Line 54:
 * '''In the internal WLAN you have to use the special SSID and WEP-Key.'''  * '''In the internal WLAN you have to use the special SSID and WEP key.'''
Line 65: Line 63:
 * It is not allowed to disconnect the office PCs from the network and to replace by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.  * It is not allowed to disconnect the office PCs from the network and to replace it by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.

Notebook Registration at DESY, Zeuthen

TableOfContents

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

  • To connect a notebook or an other mobile devices to the DESY, Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
  • Two different network access methods exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
  • The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.

In the following you can find some more information about the both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access ( guest subnet )

  • In the guest subnet a cable based and a wireless network interface are provided. BR The guest subnet is mainly provided for guests staying at DESY for a short time and the access is available during a few minutes. Internal services can only be used very limited (no Login into Windows Domain, limited AFS access). The access rights basically correspond to them of the external hosts.

    The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.

    The registration can be made
  • by an email to uco-zn@desy.de, processing during normal working hours,

    •     Subject: Registration of a Notebook
              
          Mac WLAN:  Mac Eth:
          Expiration date of the registration: (max: 1 year, default: 7 days)      
  • by a WEB form BR

    The URL is available inside the LAN (guest subnet excluded) and can used by every user, who has an account at DESY. 15 minutes after the registration the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.

Internal Access for trusted Devices

trusted Devices

The DESY Computer Security Council (RSR) has determined in a statement the following rules:

With the sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen:

         eMail : uco-zn@desy.de 
         Fax : +49 33762 77216 
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen

A device is classified as a trusted device if the signature of the responsible person is existent. BR For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention :

Cable based Network Access
  • Unfortunately at present it is not possible to transfer all registered cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.
  • The computing center Zeuthen are not able to register the cable Mac address in DESY, Hamburg for you. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, Hamburg to register the cable based interface.

Wireless Network Access
  • In the internal WLAN you have to use the special SSID and WEP key.

  • These are identical for the internal networks at DESY, both in Hamburg and Zeuthen.
  • You will get the SSID and WEP key from uco-zn automatically after the receipt of the signed form.
  • The wireless network interfaces of devices registered at DESY, Hamburg are considered as trusted devices in Zeuthen too.
  • If the notebook should also connected to the WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will communicate the information to the network group at DESY, Hamburg and initiate the registration.

The Availability of Network Facilities

The Cable based Access

  • Notebooks can be connected to sockets in public rooms which were marked with a green dot.
  • It is not allowed to disconnect the office PCs from the network and to replace it by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.

WLAN Availability

  • At the moment access points are available in the area of the Foyer and in the seminar rooms 1-3.

NoteBook_Registration (last edited 2017-08-22 12:55:59 by ManuelaBrehmer)