Differences

This shows you the differences between two versions of the page.

--- userdoc:find_nw_info [2016/10/13 15:21] – prall
+++ userdoc:find_nw_info [2021/06/10 10:28] (current) – prall
@@ Line 65: / Line 65: @@
 There are also separate firewalls in front of the two subnets that have been designated for “Tier 2” self-supported systems, namely 128.100.23.0/24 and 128.100.241.0/24. These subnets are protected from the outside world, but they are topologically “outside” the main firewalls protecting the Tier 1 subnets. This means users on a Tier 2 subnet do not have unlimited access to computers on Tier 1. The connections available are limited to those accessible from outside, plus a small number of exceptions, described below.
 ===== ECE-VPN (ECE Virtual Private Network) =====
-Departmental firewalls will permit access to some Tier-1 resources if connections are made via a Virtual Private Network connection, where an external computer connects securely to a VPN server within our Tier-1 network. (This requires a separate VPN login/password combination; please contact ECEhelp to request a VPN account.)  When your VPN account is set up, you may connect to it by following [[http://www.comm.utoronto.ca/~jli| the VPN instructions specific to your O/S version]]
+ECE operates our own departmental firewall between our network and the main UofT backbone network. This blocks all inbound connections with specific exceptions for access to web servers, email, and a limited number of hosts open for SSH or other specific connection types.
+We also operate our own Virtual Private Network to give access across our firewall from outside. Note that this is a separate VPN than the UTORvpn service operated centrally for all of UofT. Use of UTORvpn gives you access to library and journal subscription resources but does not give access past the ECE departmental firewall -- only our ECE VPN does that.
+Any research user with current affiliation with ECE may request a login on the ECE VPN - email ecehelp at ece.utoronto.ca and let us know your status and the name of your supervisor.
+When your VPN account is set up, you may connect to it by following [[http://www.comm.utoronto.ca/~jli| the VPN instructions specific to your O/S version]].  Note that this requires knowledge of a pre-shared secret, which is accessible by faculty and staff on our internal website.  Grad students can ask their supervisor's administrative coordinator to check on their behalf, at [[https://internal.ece.utoronto.ca/it-services/wireless-network-connections/|the ECE internal website]]
@@ Line 88: / Line 97: @@
   * Begin by connecting to the ECE-VPN, then
   * Start the Remote Desktop connection and specify your university PC's IP address as the host name to connect to.
 ===== SSH servers accessible from outside of ECE =====
@@ Line 103: / Line 113: @@
   * anubis.eecg.toronto.edu
   * bastet.eecg.toronto.edu
-  * halfdome.eecg.toronto.edu
-  * isis.eecg.toronto.edu
   * ra.eecg.toronto.edu
   * seth.eecg.toronto.edu
-  * zeep.eecg.toronto.edu
 === ENERGY ===
   * energy.ele.utoronto.ca