Upgrading our Network Infrastructure Migrating from Agave to

Upgrading our Network Infrastructure Migrating from Agave to Ptolemy and Anasazi

Agave: present and future Current uses n NFS-exported /usr/local/databases • I. II. Login server • I. • persephone pythia Access to local resources from the outside world User homes Future uses n • NFS-exported /usr/local/databases I. II. persephone pythia

Ptolemy: Our New Fileserver ptolemy. pcbi. upenn. edu/165. 123. 89. 45 Dual 2 Ghz Processors 2 GB RAM External Tape Library Approximately 500 GB Storage Capacity n n n • RAID 1 (with failover drive) I. II. • Operating System Filesharing Partition RAID 5 (with failover drive) I. II. 100 GB Home partition Approx. 300 GB unallocated

Ptolemy: Uses n NFS-mounted /home for Linux workstations • n NFS-mounted /home for OS X workstations • n ptolemy: /home/arselden will appear as localhost: /home/arselden ptolemy: /home/arselden will appear as /automount/private/mnt/arselden Samba-mounted network drive for Windows workstations • ptolemy: /home/arselden will appear as Z:

Ptolemy: Uses (continued) File sharing n • Lab-specific file space I. III. 1. Cbil Diana Bioinfocore Center-wide public file space Nightly Tape Backups n • • • Monday - Thursday incremental; Friday full Workstation backups Off-site storage

NFS and Samba: Preliminaries Global User ID’s n Joined Center after Aug. 1, 2002 • I. Already assigned unique and global UID Joined Center prior to Aug. 1, 2002 1. I. Must reconcile differences a) b) c) OS X users 1) Change UID and GID in Netinfo Manager 2) % find / -user 501 -exec chown uname: gid {} ; Linux users 1) Edit /etc/passwd 2) chown -R username /home/username Windows users 1) No change needed

NFS and Samba: Preliminaries (continued) Time synchronization (timeserver 1. upenn. edu) n • • n n Linux/OS X use ntpd Windows modify control panel settings Setting Linux account passwords Setting Samba passwords

Anasazi: Our New Login Server n anasazi. pcbi. upenn. edu/165. 123. 89. 46 • Alias: login. pcbi. upenn. edu

Anasazi: Uses n n Gateway for remote access to Local Area Network Incoming SSH access from anywhere • n From home: ssh arselden@login. pcbi. upenn. edu Outgoing SSH to LAN and DMZ • • From login server to Linux/OS X workstation: ssh andrew From login server to DMZ network: ssh snowball ssh ptolemy

Upcoming Network Enhancements n New Firewall Machine • • n n More Stringent Packet Filtering TCP-session Tracking New Webserver Upgrade DMZ Network Infrastructure • • • Larger IP Address Space (128. 91. 62. 0/28) Faster Switch (100/1000 Mbps full duplex) Replacement for Snowball

Unresolved Issues n Date of Availability • n Wed, Nov. 13? Ptolemy’s Unallocated Disk Space • • Approximately 300 GB What to use for?