ISG News has posted a new item, 'Advance information: network migration'
After a long (11 years) phase of stability in the D-PHYS network, we are preparing a pretty extensive network reorganization for 2018. This is mainly driven by ever-increasing information security requirements mandated by ETH. The D-PHYS network has traditionally been very open and we will try to keep it that way, but we need to implement some modifications. The basic premise is to partition our current /21 network (2048 IP addressess) into smaller groups that better represent the types of machines in those networks. This will then allow us to tailor each group's firewall rules to the services needed by those machines. The roadmap looks like this:
Rearrange hosts in current /21 net to align with future VLAN boundaries
Partition the /21 net into smaller VLANs
Migrate individual subnets from our DHCP server to that of ID. This will also allow us to assign IPv6 addresses
Migrate the subnets into different virtual private zones (VPZ)
Assign and fine tune firewall settings on the different VPZ
As usual, we'll try to implement these steps as smoothly as possible. However, a migration on this scale will not go entirely without issues. Step 1 will entail an IP address change for quite a number of hosts. We'll make sure that our dyndns host names (foobar.dhcp.phys.ethz.ch) will be in sync with the new addresses, but this only works for properly configured DHCP hosts. Here's how you can help: if you have any hosts in the 192.33.96.0/21 D-PHYS network that are statically configured (non-DHCP), please get in touch with us ASAP. The same is true if you're using hard-coded IP addresses from that range instead of host names. We'll need to deal with those hosts individually.
In the course of 2018 we'll keep you updated on project progress and announce specific dates when we implement changes.
You may view the latest post at
https://nic.phys.ethz.ch/news/2018/07/12/advance-information-network-migrat…
You received this e-mail because you asked to be notified when new updates are posted.
Best regards,
Christian Herzog
daduke(a)phys.ethz.ch