REDDNet Site Requirements: Difference between revisions

From ReddNet
Jump to navigation Jump to search
No edit summary
No edit summary
Line 1: Line 1:
     * Power, network, KVM, PDU, IP addresses
     * Power, network, KVM, PDU, IP addresses
Each depot has two network interfaces, so if supported by your switch, we would
like to use both interfaces in 802.3ad bonding mode for increased performance. 
This requires two switch ports and two ethernet cables per depot.  If not
supported, then each depot only requires one port/cable.


=== Network Ports on your Switch ===
Each depot has two network interfaces, so if supported by your switch, we would like to use both interfaces in 802.3ad bonding mode for increased performance.  This requires two switch ports and two ethernet cables per depot. 
If not supported, then each depot only requires one port/cable.


=== IP Addresses ===
=== IP Addresses ===

Revision as of 14:37, 4 March 2010

   * Power, network, KVM, PDU, IP addresses

Network Ports on your Switch

Each depot has two network interfaces, so if supported by your switch, we would like to use both interfaces in 802.3ad bonding mode for increased performance. This requires two switch ports and two ethernet cables per depot.

If not supported, then each depot only requires one port/cable.

IP Addresses

We require one externally-visible IP address for each depot, PDU, or KVM.

Remote PDU

We provide an APC PDU unit for every 4 depots. This allows us to power-cycle a hard-locked machine and do other forms of maintenance that aren't possible using the KVM alone.

Each PDU requires a 110 V power connection and a network connection with either static or DHCP-issued IP address.

Remote KVM

We provide a KVM unit for every 8 depots to allow us to manage the depot remotely. The KVM requires a 110 V power connection (usually supplied by one of our PDU units) as well as a network connection with a externally-visible IP address.

Required Network Ports

These ports should be opened on your perimeter firewall (or firewalls if you have both organizational and departmental firewalls).

  • tcp/22 (ssh)  : from all local depots/PDUs to 129.59.197.60 and 129.59.197.90
  • tcp/5666 (nagios) : from all local depots to 129.59.197.60 and 129.59.197.90
  • tcp/6714 (ibp)  : from all local depots to world
  • tcp/4823 (bwctl)  : from 1st local depot to world
  • tcp/861 (owamp)  : from 2nd local depot to world
  • tcp/80 (http)  : from KVM and PDU's to 129.59/16
  • tcp/443 (https)  : from KVM to 129.59/16
  • tcp/21 (ftp)  : from PDU's to 129.59.197.90 (for firmware upgrades)
  • tcp/5900 (vnc)  : from KVM to 129.59/16
  • udp/123 (ntp)  : allow outbound from local depots
  • udp/161 (snmpv3) : from all to 129.59.197.60 and 129.59.197.90