Latest OxCIN IT news

The core networking and firewall for FMRIB and the Annexe will be replaced on Monday 13th April - this will result in several changes to day-to-day use of the ethernet (cabled) and VPN connections.

Ethernet connections

The layout and authentication options are changing, both to improve the security/auditability of your connections and to enable to switch to Multi-Factor Authentication in the future.

We will no longer need you to register ethernet dongle MAC (hardware) addresses with us - the rise of USB-ethernet devices and in-display adaptors mean that registering an address to an individual no longer makes sense.

On connecting, your device will be put onto the University's 'OWL Visitor' network. This will not allow any network access so you will need to authenticate your device to be able to be able to use the ethernet. Guests can be allocated OWL Visitor credentials as required, although we expect most people to prefer Wi-Fi.

By using your computer's '802.1x' support, after some configuration steps, you will be able to authenticate to the network using your University of Oxford Remote Access credentials (the username/password you use for Eduroam). Your computer will then be put onto a laptop or desktop network in a similar fashion to before if you have an OxCIN computer account. If you don't have an account, your device will end up on the Eduroam network, similar to the Wi-Fi service.

Configuration

Orchard managed Apple devices should already have the necessary configuration installed - you will connect with the configuration 'FMRIB and Annexe Ethernet' - you may select the box to store your network login details, as the remote access credential does not include a time-dependent component.

Windows devices can install our configuration profile.

Linux devices - details to follow 

VPN connections

The replacement firewall no longer supports the 'SSL-VPN' mechanism we have been using to date for remote-access into our network and so we will be changing back to using 'IPSEC'. Unfortunately, IPSEC requires configuration at the client end (SSL-VPN got all it's configuration when it connected), but we will be offering configuration files that simplify access.

In all cases you will need to be running the very latest FortiClient VPN only client - version 7.4.3.4323 or newer. How you get this will depend on your device type.

Orchard managed

Apple laptops managed by Ourchard can update by visiting the Self Service application and using the FortiClient installer there - this will import the new configuration automatically.

Connecting

The new configuration is called 'FMRIBUsers' - select this from the list before entering your OxCIN computer username/password.

We are actively investigating the possibility of using University SSO for authentication, this may be available on Monday...