Dear IT Pros,
The Campus Networks team would like to let you know about some changes coming to wireless over the next few weeks.
First, IU Secure’s retirement is postponed, meaning it will not cease to exist at the end of 2021. It’s still a good idea to move your clients over to eduroam, but IU Secure will still be around in the new year.
Additionally, all network devices at IU have been historically assigned a public IP address for internet access. As you may be aware, address space for IPv4 has become limited over the years as the number of networked devices continues to increase. On the Bloomington campus, this has resulted in high DHCP utilization for wireless—and adding more public IP address space is no longer an option.
To solve this issue, Campus Networks will deploy NAT IPv4 space [1] for IUB wireless over the coming weeks in three phases:
- Phase one: Moving smart TVs on IUB wireless to NAT. This will also address the duplicate IP issue seen on other devices, which has been caused by the smart TVs not releasing IP addresses correctly. This move is scheduled for early Monday morning 11/22.
- Phase two: Moving wireless devices in the residence halls that are on eduroam to NAT.
- Phase three: Moving wireless devices in academic and administrative buildings that are on eduroamand IU Secure to NAT.
Once we finalize dates for the second and third phases, we’ll send a follow-up note to this list.
When devices are moved to NAT, they will be assigned an IP from the 10.20.0.0/15 address space [2], with a NAT source IP address using the 129.79.197.0/24 address space.
This will be added to the host group IUB_Wireless_Secure for the Data Center Firewalls. If your firewall policies use that host group or All_IU_Networks, no changes should be needed. However, you may want to review your firewall policies and consider any host-based firewall rules/ACLs in place that might need to be adjusted with this change.
If you have questions about eduroam, IU Secure, or the NAT implementation, please email noc@iu.edu.
–IT Community Partnerships on behalf of Campus Networks
[1] https://en.wikipedia.org/wiki/Network_address_translation
[2] IP addresses at IU (Login Required): https://kb.iu.edu/d/ayft
~~~~~ Today’s IT Pro Tip ~~~~~
Missed a recent ITCP announcement or event invite? All mailings are available and searchable on the ITCP Blog: https://blogs.iu.edu/itcp/