NoteBook Registrierung

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

• To connect a notebook or other mobile device to the DESY Zeuthen network, the responsible person and the MAC address(es) of the device have to be registered with the computer center.
• Two different classes of network access exist:
  • One with access to the to the internal network
  • The other one is mostly like that of anonymous hosts somewhere on the internet

• The DESY Computer Security Council (RSR) requires that a person who wants to attach a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user, who needs to be in possession of an account at DESY, the device will be classified as a trusted device.

In the following you can find some more information about both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access ( DESY-guest )

In the DESY-guest network, a cable based and a wireless network interface are provided.
The DESY-guest subnet is mainly provided for guests staying at DESY for a limited time. Gaining access to it only takes a few minutes. Access to internal services is limited (no Login into Windows Domain). The access rights basically correspond to those of anonymous external hosts, but some services (email, printing, AFS, ntp, web) are available.

The registration can be done

• by sending an email to <uco-zn AT desy DOT de> (processed by humans during normal working hours)

  Subject: Registration of a Notebook
          
  Mac WLAN:
  Mac Eth:
  Requested expiration date for the registration: (max: 1 year, default: 7 days)      

• or through a web form (automatic processing 24x7)
  https://regmacs.zeuthen.desy.de/
  The URL is accessible from the internal network and can used by any user who has an account at DESY. 15 minutes after submitting the form, the registered device should be able to access the guest subnet. The expiration date of the registration is limited to one year, the default is one week.

Limited Access ( eduroam )

The wireless network eduroam is another WLAN guest network which is provided. It can be used without any further registration by guests whose institutes offer service eduroam. The data transfer is encrypted with WPA/WPA2 algorithm.

Internal Access for Trusted Devices

Trusted Devices

The DESY Computer Security Council (RSR) issued a set of rules and recommendations to be followed by anoyone operating computers attached to the DESY internal network:

• http://rechnersicherheit.desy.de/e8/e84/e351/index_eng.html

By signing the form mentioned there, you acknowledge and accept these rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:

For DESY notebooks centrally supported by DV Zeuthen, you only need to turn your attention to Notebook Security Windows
and sign a special form when the notebook is claimed from the computing after installation.

Cable Based Network Access

• It is not yet possible to transfer cable MAC addresses of notebooks already registered at DESY Hamburg to Zeuthen.

• The computing center in Zeuthen is not yet able to register your cable Mac address in DESY Hamburg.
  Please contact the corresponding network segment administrator in Hamburg if you need access to the cable based internal network in there.

Wireless Network Access

To use one of the internal wireless networks a registration (MAC address, user name, institute, email address) is necessary. You will receive the access parameter from UCO. The registration is valid in Hamburg and Zeuthen.

Availability of Network Facilities

• Network wall sockets marked with a green label can be used to connect your notebook. These sockets are found in all public terminal rooms and many offices.
  • Alas, most sockets in offices actually lack that label.

  • Because there is no tool to evaluate the status of a network socket, if in doubt you must contact the computing center to find out wether a certain socket is suitable for connecting a mobile device (no matter whether it's registered for internal access or for guest access only). To request clearing a socket for mobile device use, please email <uco-zn AT desy DOT de> . Please make sure to include the complete socket number.

• Disconnecting a PC from any other network wall socket and connecting your notebook instead will block the socket. Please don't do this.