BNL PAS Group Computing

Wireless access

Connect info for the PAS area:

              GATEWAY ROUTER = 130.199.20.24    [OSIRIS.S20.BNL.GOV]
        IP BROADCAST ADDRESS = 130.199.21.255
              IP SUBNET MASK = 255.255.254.0

     SITE DNS SERVER ADDRESS = 130.199.1.1      [NS1.BNL.GOV]
     SITE DNS SERVER ADDRESS = 130.199.128.31   [NAMESERVER.BNL.GOV]

    SITE WINS SERVER ADDRESS = 130.199.128.32   [BNLWINSA.BNL.GOV]
    SITE WINS SERVER ADDRESS = 130.199.1.2      [BNLWINSB.BNL.GOV]

    OUTBOUND SMTP SERVER     = bnl.gov

DHCP is supported.

Printers

HP 1320n B/W duplex printer in Room 1-226: PASHP1320N.PHY.BNL.GOV, IP address 130.199.20.27
HP 4550dn color duplex printer in Room 1-226: See product details
Xerox DC230 B&W duplex printer in Room 1-81: use the 'lp' queue at atlasdc.phy.bnl.gov. Printer is on the web at atlasdc.phy.bnl.gov.

Computer security

BNL has enacted proxies for many network services. How to deal with them is described briefly below. See the BNL cybersecurity page and the Physics Dept cybersecurity page for official info.

Web browsers: Outbound HTTP proxy is required. Set the automatic proxy configuration URL in your browser to http://security.bnl.gov/proxy/cfg.pac or set the hardwired proxy URL to http://squid.sec.bnl.local:3128
Under Linux set the http_proxy and https_proxy environment variables to http://squid.sec.bnl.local:3128 (if they aren't set already)
ftp: A mandatory ftp proxy for outbound ftp is in place. You have to ftp to ftpgw.sec.bnl.local and then connect from there to your destination (enter 'quote site sitename', 'user username'). You must use non-kerberos ftp or the session will hang at the proxy. On my Red Hat box the default ftp on the path is /usr/kerberos/bin/ftp. This will not work. You must use normal ftp, typically /usr/bin/ftp. Some ftp based services (such as Perl CPAN) look at the ftp_proxy environment variable and will deal with the proxy (which is good or they would cease working altogether). You may want to set in your login
setenv ftp_proxy http://squid.sec.bnl.local:3128 setenv FTP_FIREWALL ftpgw.sec.bnl.local
ssh: There's useful info on configuring ssh-agent (and many other things) on the Theory Group software page. You may want to look into keychain as well (google on 'keychain ssh')