Table of contents

See also

• CU Exchange's tools, for techs
• Cornell's email forwarding service, LDAP
• Michael Hint's useful links, in SharePoint
• Chemistry's Computer Exception Form and related networks
• Networks
• Non-Cornell domain names

Managed Firewall

• https://managed-firewall-service.security.cornell.edu/ (DUO required)
• Managed Firewall Service (IT Sec's docs)
• Change request of V1310 (EMC2's subnet), a non-A&S subnet:
  • Email <bio-it@cornell.edu> if you need any changes or go directly to ITSO in an emergency (per James VanEe, 5/6/16).
  •  View-only ADOMs are Roger, Oliver, and Lulu. (Michael is not since he is an admin-ADOM for A&S.)

Wireless testing of CIT's wireless

• https://ratemywifi.cit.cornell.edu/

DNS DB

Documented page

• http://dnsdb.cit.cornell.edu/
  • Resolves to <http://www.it.cornell.edu/services/netreg/howto/>
• See the links there for:
  • Host list <= Usually the one to use
  • Subnet list
  • Domain list

DNS names managed within Chemistry IT and Physics IT

Enable DNS naming authority to IT staff as appropriate. For example, including <ad.cornell.edu>. One can look through current staff's to see which may be appropriate.

• https://dnsdb.cit.cornell.edu/
• Data-point: On 1/2/2018, Oliver could admin these 9:
  
  • acert.cornell.edu    
  • ad.cornell.edu    
  • chem.cornell.edu    
  • cmi.cornell.edu    
  • efrc.cornell.edu    
  • emc2.cornell.edu    
  • emcc.cornell.edu    
  • physics.cornell.edu    
  • trp.cornell.edu

DNSDB batch

The DNSDB batch interface is great if you want to do large amounts of DNS changes and it is always needed if you are working with a IP address that isn’t yours to own ( for example, Amazon ).

The DNSDB batch language help page:

• https://dnsdb.cit.cornell.edu/dnsdb-cgi/help.pl

The DNSDB batch interface:

• https://dnsdb.cit.cornell.edu/dnsdb-cgi/batch.pl

Example two sets of commands used by Michael Hint Oct. 2016, each of which can be run all at once. The first:

delcname nmr.chem.cornell.edu

delcname nmrscheduler.chem.cornell.edu

addcname nmr.chem.cornell.edu nmr-prod.us-east-1.elasticbeanstalk.com

addcname nmrscheduler.chem.cornell.edu nmr-prod.us-east-1.elasticbeanstalk.com

chgcnamettl nmr.chem.cornell.edu 300

chgcnamettl nmrscheduler.chem.cornell.edu 300

NOTE: Make sure to check at the bottom the boxes for verbose and for allow things to point to subnets we don’t own.

The second: The following commands should be run with the DNSDB Batch Processor at least 24 hours after we know everything is moved. They can be run all at once, too.

delhost nmrschedulerold.chem.cornell.edu

delcname nmrschedulertest.chem.cornell.edu

Aggregated XP Report

• https://aclviewer.cit.cornell.edu/cgi-bin/xptrack.pl?VLAN=411
  • replace VLAN number with appropriate one

Many, many tools located under the DNSDB page:

• https://dnsdb.cit.cornell.edu/dnsdb.html
• MAC address look-ups, "DHCP logs":
  
  • https://dnsdb.cit.cornell.edu/dnsdb-cgi/dhcplog_full.cgi

CIT IP to jack tool

IP to active jack switch port lookup:

• http://nettrac.cit.cornell.edu/tracking/

Source:

• http://nettrac.cit.cornell.edu/
  • http://nettrac.cit.cornell.edu/cgi-bin/welcome.cgi

List of active jack switch ports:

• http://mrtg.cit.cornell.edu/vlan/

The first resource's top-level page is called, "CIT Network Traffic Analysis Center". It contains two services/ tools at the top level:

• Usage statistics for individual IP addresses
  • Offers both an interactive form, or via a shortcut to get the usage statistics for the computer currently being used.
• IP/MAC/jack address tracking tools

IP range pools

Cornell core service IP addresses:

• https://aclviewer.cit.cornell.edu/edgeacltemplates/cornellservice.txt

. Useful info for ACL and other permission-settings. Includes large VDI pool, from March 2015.

DNS/CNAME/AREC tool

• http://dnsdb.cit.cornell.edu/dnsdb-cgi/list_domain.pl

Selection from CIT's FAQ

• What is an A record and why do I need one?
• What is a CNAME?

• How to Create CNAMEs without Owning the Target Domain:

  • http://www.it.cornell.edu/services/managed_servers/howto/cname.cfm

And CIT's domain name glossary.

New NUBB (Network Usage Billing) website, summer 2015.

CIT now has page showing your usage broken down to day and device:

• http://nubb.cornell.edu

NOTES: Only shows your wireless devices. Charges only apply to students.

• Could be useful in supporting graduate/undergraduate student laptops/phones.

No longer usable, retained here for historical reasons

DNS DB: "Hidden" page, for IT support providers

• http://www.cit.cornell.edu/computer/support/hostreg/dnsdb.html (no longer valid, as of 8/7/14)