Infrastruttura Wireless presso le Strutture CNR Piemonte (The Wireless infrastructure at Piedmont CNR network)

RT 26; The increasing popularity of laptop computer and the work on mobility requirement are the main reasons to deploy a wireless network infrastructure providing a secure internet connection for local and external users. Wireless network has a lot of benefits but it is necessary take special care with security to prevent intrusions and illegal use of the network. Central administered wireless infrastructure is a good solution for security and it allows an easy maintenance of the access point configuration. The Sonicwall Network Security Appliance NSA-5500 is the core of Piedmont CNR Network Infrastructure and its options regarding wireless LAN allow us to deploy a wireless infrastructure meeting all requirements. The main features of our deployment are: multiple SSID announcement, 802.1x protocol support, captive portal authentication, radius and ldap integration, cross-authentication with local and national organizations

Accesso Wireless Federato presso l'Infrastruttura di Rete CNR Piemonte (Federated Wireless Network Authentication at Piedmont CNR network Infrastructure)

RT 34; The CNR Ceris IT Office was an active subject in the designing phase of IDEM (federated IDEntity Management for service access), the GARR project of the Italian Federation for network authentication and authorization, and has acquired a wide experience in federated services and in the SAML platform. IDEM has now reached a stable production level and the services accessed through our IdP are appreciated by Piedmont CNR users (for example, electronic publications or videoconferencing reservations). To improve our network services we have extended wireless access with federated authentication to simplify user login and mobility among GARR research and educational institutions. The new feature has been developed by Shibboleth open-source software installed on a Linux Ubuntu server and some code in the PHP language, integrated with the Guest Services of the Sonicwall Network Security Appliance NSA-5500 by secure communication over HTTPS and digitally signed messages

KVM: an open-source framework for virtualization

RT 44; This report analyses the configuration steps of the open-source hypervisor component KVM, (Kernelbased Virtual Machine). KVM solution is used for digiBESS (open-source project of digital archive) and all network services as web and application servers, user backup, long term archive and e-mail

Step by step installation guide of a digital preservation infrastructure

The Ceris-CNR project of digital preservation infrastructure has been committed by Bess (Social Science Electronic Library of Piemonte) for years 2011-2012 sponsored by Compagnia di San Paolo of Turin. Ceris-CNR role is to handle all the post-scan of the digitalization, for this purpose it has deployed the software and server platforms of the repository and also the web portal for the presentation, research and consulting. This report is a guide of step by step followed to build the digital archive infrastructure

Storage in HA: manutenzione ordinaria e straordinaria

Ceris-CNR IT Office manages the CNR Piedmont network infrastructure and provides network services for about 420 users. The development of a large and reliable storage system is the answer to two needs: one from users, who must deal with ever more larger digital objects for personal and research use, and one from need to have a space system engineering to store virtual machines and backup copies. To contain expenditure and without detracting from the reliability of the system, we choose to concentrate financial commitment on quality hardware and realize the whole project with open-source software, specifically the main components are: Linux, DRBD (Distributed Replicated Block Device), Corosync and Pacemaker

Repository e front-end open-source per la conservazione di opere digitali

Ceris-CNR IT Office and Ceris-CNR Library are involved in a digitization project promoted by Bess (Electronic Library of Economic and Social Sciences in Piedmont Area) and commissioned to handle all the post-scan of the digitization. This technical report analyzes the strategies adopted and the main open-source software used. Ceris-CNR had to provide for the management of large volumes of data with the availability of space storage for the digitized works with characteristics of stability, versatility and dynamism. Ceris-CNR has deployed the software and server platforms of the repository, in a virtualized and redundant infrastructure. Ceris–CNR also take care of the design, development and management of the web portal (front-end) for the presentation, research and consulting data of the digitalized item

Storage in HA: Cluster attivo/passivo open-source

Ceris-CNR IT Office manages the CNR Piedmont network infrastructure and provides network services for about 420 users. The development of a large and reliable storage system is the answer to two needs: one from users, who must deal with ever more larger digital objects for personal and research use, and one from need to have a space system engineering to store virtual machines and backup copies. To contain expenditure and without detracting from the reliability of the system, we choose to concentrate financial commitment on quality hardware and realize the whole project with open-source software, specifically the main components are: Linux, DRBD (Distributed Replicated Block Device), Corosync and Pacemaker

Infrastruttura Wireless presso le Strutture CNR Piemonte (The Wireless infrastructure at Piedmont CNR network)

RT 026; The increasing popularity of laptop computer and the work on mobility requirement are the main reasons to deploy a wireless network infrastructure providing a secure internet connection for local and external users. Wireless network has a lot of benefits but it is necessary take special care with security to prevent intrusions and illegal use of the network. Central administered wireless infrastructure is a good solution for security and it allows an easy maintenance of the access point configuration. The Sonicwall Network Security Appliance NSA-5500 is the core of Piedmont CNR Network Infrastructure and its options regarding wireless LAN allow us to deploy a wireless infrastructure meeting all requirements. The main features of our deployment are: multiple SSID announcement, 802.1x protocol support, captive portal authentication, radius and ldap integration, cross-authentication with local and national organizations

Accesso Wireless Federato presso l'Infrastruttura di Rete CNR Piemonte (Federated Wireless Network Authentication at Piedmont CNR network Infrastructure)

RT 034; The CNR Ceris IT Office was an active subject in the designing phase of IDEM (federated IDEntity Management for service access), the GARR project of the Italian Federation for network authentication and authorization, and has acquired a wide experience in federated services and in the SAML platform. IDEM has now reached a stable production level and the services accessed through our IdP are appreciated by Piedmont CNR users (for example, electronic publications or videoconferencing reservations). To improve our network services we have extended wireless access with federated authentication to simplify user login and mobility among GARR research and educational institutions. The new feature has been developed by Shibboleth open-source software installed on a Linux Ubuntu server and some code in the PHP language, integrated with the Guest Services of the Sonicwall Network Security Appliance NSA-5500 by secure communication over HTTPS and digitally signed messages

Il protocollo IPv6 presso l'Infrastruttura di rete CNR del Piemonte

RT 025; The Internet Protocol Version 6 ('IPv6') is the "next generation" protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 ('IPv4'). The IPv6 fixes a number of problems in IPv4, such as the limited number of available IPv4 addresses. It also adds many improvements to IPv4 in areas such as routing and network autoconfiguration. Recent availability of IPv6 in the GARR network and the reasons above give us the input to start IPv6 deployment for network and services of CNR Piedmont Infrastructure. First step for the IPv6 deployment was enable IPv6 for network equipments and servers in the DMZ zone. To test the system function properly we enabled IPv6 for some clients in the LAN zone to connect local and remote Internet services by IPv6 protocol