Internet Service Providers and Infrastructure
Our commodity internet bandwidth (currently 400Mbit as of September 26, 2014; to be 1GBit within a few weeks) is purchased through Windstream, while our academic and administrative bandwidth is purchased through UMass. Connectivity between colleges is provided by the 10-gigabit Five College fiber-optic network, linking all five campuses in a ring with a single run out of that ring to 1 Federal Street in Springfield. Should that connection fail, we also have connectivity north from UMass through Keene, NH and then to Portsmouth. Each campus has a redundant connection to this ring. At Hampshire, we have one connection in the basement of Cole, and one in ASH.
Hampshire's network is a star topology, centered in the basement of Cole. In general, buildings are connected to the core with gigabit or ten-gigabit fiber, and have a layer 3 OSPF networking device with an associated VLAN and subnet. This is to increase resiliency, keep traffic local as much as possible, and reduce the size of the broadcast domains on campus. For security and IP conservation reasons, all of these addresses are RFC1918's that get translated at the edge of our network into a /21 of globally-valid addresses. All connections made concurrently by a single IP inside our network are mapped to the same IP outside, and your translation is reserved for 30 minutes.
We have a gigabit physical connection to each of the other four institutions in the Five College Consortium, through the Five College Fiber Network. Any connection initiated from on campus to any of the other four colleges will get routed over this link, meaning we get gigabit speeds between the institutions on the Five College Network. We have firewalls at the edges of our network, one on each link, that perform firewall and NAT functions. These units are currently Cisco ASA5520's.
The bandwidth shaper on the Paetec link is a NetEqualizer NE3000. It shares bandwidth equally among IP's currently asking for it by delaying top users' packets in units of 1/1000 of a second when link utilization nears saturation. It also limits the number of concurrent connections each IP can use.
Hampshire's wireless network is powered primarily by H3C 2620/2620E (a/b/g/n) Access Points at various locations around the campus, ensuring connectivity in all public areas of the campus, as well as all of the dorm areas. Merrill has Ubiquiti 802.11ac access points, and FPH has Aerohive 802.11n units. Academic areas have three separate networks:
- Hampguest (public) – This network does not require a login and has an entirely separate connection to the Internet. In this way, it is like sitting in an internet cafe - you are not really on Hampshire's network while using this wireless network, and as such cannot access anything that is on-campus only, and on-campus services will be slower than when using wallace or the dorm networks. This network is only available in the public areas of campus. Students should register their guests' computers under their names if they have guests that need access in the dorms. In this way, you are taking responsiblity for the actions of your guests on our network.
- Wallace (private) – This network requires a Hampnet login, and provides full, direct access to on-campus services for faculty and staff.
- Gromit (private) - This network requires a Hampnet login, and provides direct access to on-campus services for students. The only difference between wallace and gromit is who can log in, and there are a few services that students cannot get to.
In the dorms, the network name matches the housing area, and requires a Hampnet login, like wallace. For instance, in Merrill, the network name is "merrill".
Hampshire College's public-facing IP ranges are as follows:
- 18.104.22.168/20 (Various)
- 22.214.171.124/22 (Commodity Internet through Windstream)
- 126.96.36.199/22 (Commodity Internet through Windstream)
- 188.8.131.52/24 (IT Servers)
- 184.108.40.206/24 (Academic Servers)
Internally, we use RFC1918 addresses for all end-user devices.
- Full 10 gigabit backbone (in process)
- eduroam (ETA Spring 2015)
- 802.11ac everywhere (in process)
- IPv6 Deployment