[H-ADMIN] [H-GEN] UQ room bookings have hit a snag

[Aguido Davis]

On 11 January 2016 at 18:47, Russell Stuart <russell-humbug at stuart.id.au>
wrote:

> Thanks.  You are a life saver.
>
> We are effectively a staff member, with a staff login and password.  So
> if the port is mapped to whatever VLAN allows us to login, it will work.
>
> How are we meant to use humbug-router.business.uq.edu.au ?  Our router
> currently uses DHCP to get it's external IPv4 address.


relevant excerpt from our dhcpd.conf:

# humbug-router-LAN
host humbug-router {
        fixed-address 192.168.229.33;
        hardware ethernet 00:18:F8:36:80:7b;
        }
# humbug-router-WAN
host humbug-router-ext {
        hardware ethernet 00:18:F8:36:80:7c;
        fixed-address 192.168.229.34;
        }

...if those MAC addresses are still correct, your router should pick up a
valid IP (=> ARP) from the school's DHCP service. the hostname is just to
remind us what that IP is allocated for.

the room's ports should all be on a VLAN which routes to the rest of UQ
(and therefore AARNET) (when in doubt, use the ones in the floor which
definitely are). the first HTTP connection to the outside world will be
intercepted and redirected to login.uq.edu.au as you'd expect, where you
can log in using the UQ credentials you have. subsequently connections to
the outside world will go through.

note they've, um, improved how this authentication service is implemented
so that HTTPS connection attempts to the outside world fail uninformatively
before you've logged in from a given IP.

cheers,

horatio
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.humbug.org.au/pipermail/admin/attachments/20160111/f0ae2eff/attachment.html>