SOHO router changes

Research areas had private VLAN addresses. The default (initiated with Baker Lab's network upgrade) is that each system will instead have a public IP, within a VLAN shared by all Chemistry research units.

Consideration	Pros/ Cons to changing	Old: SOHO router	New: Public IP
Detection of compromise, and resolution	Pro	CIT could only "see" to the private VLAN level. Sometimes entire lab's VLAN would be turned off until problem resolved	Problem will be identified to specific compromised device.
Scope of exposure, if there is a compromised machine	Con	Scope limited to research group's machines.	Scope potentially expanded to all Chemistry research group's systems.
Complexity	Pro	Additional components of
Configurability	Pro	Could easily only allow one system to be "seen" from outside the VLAN directly, such as for SSH or RDP. Technically possible to do otherwise, but difficult to set up and hard to maintain.

Space shortcuts

Child pages