SCHED OUTAGE campus-wide; Tue 30 Sep 2008; 0252 – 0600
Equipment: Campus/Law/EECS VPN
Location: campus-wide;
Date: Tue 30 Sep 2008; Start: 0252 End: 0600
Description:
On Tuesday 30 September 2008, between 2:52am and 6:00am, the Campus VPN service will be migrating to a pair of load-balanced VPN concentrators. The window begins with our standard nightly campus DNS reload, and extends forward from there as clients pick up the replacement IP address for the new VPN service. By 6am, it is expected that no clients will still be attempting to use the former VPN service for new connections, though existing connections should still
operate as expected until they close.
The cutover should actually be outage-free for all VPN users of the ucbfull, ucbsplit, and Law VPN profiles. However, because the EECS VPN profile involves a specific network configuration that will need to be migrated live, users of the EECS VPN profile will not be functional until towards the end of the outage window.
System and network administrators that operate host- or network-based firewalls should note that the general-use client IP address range of the new VPN service is different. Any firewall
rules that reference the old client subnet of 136.152.208.0/24 should be updated to reference 136.152.208.0/22 instead, which will encompass the union of the old and new VPN services’ client IP addresses. (The EECS VPN will retain its existing client subnet.)
No VPN client changes should be necessary in this migration.
David Paul Zimmerman
IST