Differences between revisions 4 and 5
Revision 4 as of 2006-01-26 13:36:20
Size: 4913
Comment:
Revision 5 as of 2006-01-30 12:27:17
Size: 5017
Comment: Stephan's Hinweise
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
 * To connect a notebook or an other mobile devices to the DESY, Zeuthen network the responsible person and the MAC addresses of the device have to made known with the computer center.
 * Two different network access methods exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network, feels also responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.
 * To connect a notebook or other mobile devices to the DESY, Zeuthen network, the responsible person and the MAC addresses of the device have to be registered with the computer center.
 * Two different classes of network access exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
 * The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.
Line 13: Line 13:
In the following you can find some more information about the both network access classes, WLAN and also cable attached access. In the following you can find some more information about both network access classes, WLAN and also cable attached access.
Line 18: Line 18:
    In the guest subnet a cable based and a wireless network interface are provided. [[BR]]
    The guest subnet is mainly provided for guests staying at DESY for a short time and the access is available during a few minutes. Internal services can only be used very limited (no Login into Windows Domain, limited AFS access). The access rights basically correspond to them of the external hosts.
    In the guest subnet, a cable based and a wireless network interface are provided. [[BR]]
    The guest subnet is mainly provided for guests staying at DESY for a short time and gaining access only takes a few minutes. Access to internal services is very limited (no Login into Windows Domain). The access rights basically correspond to those of external hosts.
Line 21: Line 21:
    The registration can be made     The registration can be done
Line 29: Line 29:
    * by a WEB form [[BR]]     * by a WEB form, automatic processing 24x7 [[BR]]
Line 31: Line 31:
    The URL is available inside the LAN (guest subnet excluded) and can used by every user, who has an account at DESY. 15 minutes after the registration the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.     The URL is accessible from the '''internal''' network and can used by every user, who has an account at DESY. 15 minutes after the registration, the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.
Line 33: Line 33:
==== Internal Access for trusted Devices ==== ==== Internal Access for Trusted Devices ====
Line 35: Line 35:
===== trusted Devices =====
The DESY Computer Security Council (RSR) has determined in a statement the following rules:
===== Trusted Devices =====
The DESY Computer Security Council (RSR) issued a set of rules and recommendations:
Line 38: Line 38:
With the sign of the form mentioned there you accept the rules. The form has to be sent to uco Zeuthen: By signing the form mentioned there you accept the rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:
Line 44: Line 44:
A device is classified as a trusted device if the signature of the responsible person is existent. [[BR]]
For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention :
For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention:
Line 48: Line 47:
and you have to sign a special form during the handing over of the notebook from the computing center.
Line 49: Line 49:
===== Cable based Network Access =====
 * Unfortunately at present it is not possible to transfer all registered cable MAC addesses of notebooks in DESY, Hamburg to Zeuthen.
 * The computing center Zeuthen are not able to register the cable Mac address in DESY, Hamburg for you. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, Hamburg to register the cable based interface.
===== Cable Based Network Access =====
 * It is not yet possible to transfer cable MAC addresses of notebooks registered at DESY, Hamburg to Zeuthen.
 * The computing center Zeuthen is not able to register your cable Mac address in DESY, Hamburg. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, if you need access to the cable based internal network in Hamburg.
Line 55: Line 55:
 * These are identical for the internal networks at DESY, both in Hamburg and Zeuthen.
 * You will get the SSID and WEP key from uco-zn automatically after the receipt of the signed form.
 * The wireless network interfaces of devices registered at DESY, Hamburg are considered as trusted devices in Zeuthen too.
 * If the notebook should also connected to the WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will communicate the information to the network group at DESY, Hamburg and initiate the registration.
 * These are identical for the internal networks at DESY in Hamburg and Zeuthen.
 * You will get the SSID and WEP key from UCO Zeuthen automatically after the receipt of the signed form.
 * The wireless network interfaces of devices registered at DESY, Hamburg are considered trusted devices in Zeuthen too.
 * If you also need to connect your notebook to the internal WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will forward your registration to the network group at DESY, Hamburg.
Line 60: Line 60:
=== The Availability of Network Facilities ===
==== The Cable based Access ====
 * Notebooks can be connected to sockets in public rooms which were marked with a green dot.
 * It is not allowed to disconnect the office PCs from the network and to replace it by a notebook. The sockets will be blocked afterwards because of the switched on port security. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.
=== Availability of Network Facilities ===
==== Cable Based Access ====
 * Network wall sockets marked with a green label can be used to connect your notebook. These sockets are found in all public terminal rooms and many offices.
 * Because there is no tool to evaluate the status of the network socket you have to contact the computing center to get information about it. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.
 * Disconnecting a PC and connecting your notebook instead will block the socket.
Line 66: Line 67:
 * At the moment access points are available in the area of the Foyer and in the seminar rooms 1-3.  * At the moment access points are available in the Foyer, 3L area and in the seminar rooms 1-3.

Notebook Registration at DESY, Zeuthen

TableOfContents

Notebook and Mobile Devices (Internet) Network Access @ DESY Zeuthen

  • To connect a notebook or other mobile devices to the DESY, Zeuthen network, the responsible person and the MAC addresses of the device have to be registered with the computer center.
  • Two different classes of network access exist, one to the internal network and the other one corresponds approximately to the one of an externel host.
  • The [http://www.desy.de/rsr DESY Computer Security Council (RSR)] demands that the person who wants to use a computer in the internal DESY network signs responsible for the computer security of this device. After the confirmation of the user the device will be classified as a trusted device.

In the following you can find some more information about both network access classes, WLAN and also cable attached access.

Network Access - 2 classes

Limited Access ( guest subnet )

  • In the guest subnet, a cable based and a wireless network interface are provided. BR The guest subnet is mainly provided for guests staying at DESY for a short time and gaining access only takes a few minutes. Access to internal services is very limited (no Login into Windows Domain). The access rights basically correspond to those of external hosts.

    The [:mac address: MAC addresses] of the device and the responsible person must be made known to the computer center.

    The registration can be done
  • by an email to uco-zn@desy.de, processing during normal working hours,

    •     Subject: Registration of a Notebook
              
          Mac WLAN:  Mac Eth:
          Expiration date of the registration: (max: 1 year, default: 7 days)      
  • by a WEB form, automatic processing 24x7 BR

    The URL is accessible from the internal network and can used by every user, who has an account at DESY. 15 minutes after the registration, the network access should be possible. The expiration date of the registration is limited to one year, the default is one week.

Internal Access for Trusted Devices

Trusted Devices

The DESY Computer Security Council (RSR) issued a set of rules and recommendations:

By signing the form mentioned there you accept the rules. A device is classified as trusted if the form signed by the responsible person has been filed with UCO Zeuthen:

         eMail : uco-zn@desy.de 
         Fax : +49 33762 77216 
         Adresse : DESY Zeuthen, UCO, Platanenallee 6, 15738 Zeuthen

For DESY Notebooks, which are in central support of DV Zeuthen, you should only take attention:

and you have to sign a special form during the handing over of the notebook from the computing center.

Cable Based Network Access
  • It is not yet possible to transfer cable MAC addresses of notebooks registered at DESY, Hamburg to Zeuthen.
  • The computing center Zeuthen is not able to register your cable Mac address in DESY, Hamburg. Please contact the corresponding [http://www-it.desy.de/network/intranet/services/dns/beauftragte.html network segment administrator ] in DESY, if you need access to the cable based internal network in Hamburg.

Wireless Network Access
  • In the internal WLAN you have to use the special SSID and WEP key.

  • These are identical for the internal networks at DESY in Hamburg and Zeuthen.
  • You will get the SSID and WEP key from UCO Zeuthen automatically after the receipt of the signed form.
  • The wireless network interfaces of devices registered at DESY, Hamburg are considered trusted devices in Zeuthen too.
  • If you also need to connect your notebook to the internal WLAN at DESY, Hamburg, send an email to uco-zn@desy.de. We will forward your registration to the network group at DESY, Hamburg.

Availability of Network Facilities

Cable Based Access

  • Network wall sockets marked with a green label can be used to connect your notebook. These sockets are found in all public terminal rooms and many offices.
  • Because there is no tool to evaluate the status of the network socket you have to contact the computing center to get information about it. Please send an email to uco-zn@desy.de and request the clearing of the corresponding network socket.

  • Disconnecting a PC and connecting your notebook instead will block the socket.

WLAN Availability

  • At the moment access points are available in the Foyer, 3L area and in the seminar rooms 1-3.

NoteBook_Registration (last edited 2017-08-22 12:55:59 by ManuelaBrehmer)