≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:ethernet [09.03.2024 13:18] – fix english, parity with czech version Karel Kopeckýen:verejne:sit:ethernet [08.10.2024 11:28] (current) – [Security] cesnet blokuje udp 631 english Karel Kopecký
Line 1: Line 1:
-p{{indexmenu_n>12}}+{{indexmenu_n>12}}
  
 ====== Cable connection ====== ====== Cable connection ======
Line 14: Line 14:
 </note> </note>
  
-<note information>+<note important>
 WiFi registered devices are not automatically registered for Ethernet, as they are separate network interfaces with different MAC addresses! WiFi registered devices are not automatically registered for Ethernet, as they are separate network interfaces with different MAC addresses!
 </note> </note>
 +
 +Currently we only allow one Ethernet (cable-connected) device per user.
  
 Also, if you need a cable, come to the LAB during office hours; we have a couple of them to give. ;) Also, if you need a cable, come to the LAB during office hours; we have a couple of them to give. ;)
  
 ===== Security ===== ===== Security =====
 +
 +<note warning>
 +Your cable-connected device has a public IPv4 address,\\
 +__**always use a properly configured firewall!**__
 +</note>
 +
 +<note important>
 +CESNET has decided to centraly block inbound connections to the UDP port 631 with regard to a serious vulnerability in CUPSd (CVE-2024-47176).
 +</note>
 +
 All devices connected with an Ethernet cable get not only an IPv6 address, but a **public IPv4 address** as well, it is therefore necessary to **correctly configure the firewall** on such devices. Alas, people do not, so, unfortunately, we had to close some ports that people commonly leave open by mistake: All devices connected with an Ethernet cable get not only an IPv6 address, but a **public IPv4 address** as well, it is therefore necessary to **correctly configure the firewall** on such devices. Alas, people do not, so, unfortunately, we had to close some ports that people commonly leave open by mistake:
 ^ Service                                    ^ Protocol  ^ Port                     ^ ^ Service                                    ^ Protocol  ^ Port                     ^
Line 46: Line 58:
  
 If you need to have one of these ports open, please visit us during the office hours or send us an email. If you need to have one of these ports open, please visit us during the office hours or send us an email.
-===== Installation manuals =====+===== How to find a MAC address ===== 
 + 
 +A MAC address is an unique identifier of a network device. It is commonly written as a hexadecimal number, which may look for instance like this: 
 + 
 +''AB:CD:EF:12:A3:04'' or ''AB-CD-EF-12-A3-04''  
 + 
 +{{indexmenu>:en:verejne:sit:mac|tsort nsort}}
  
-{{indexmenu>:en:verejne:sit:ethernet|tsort nsort}}+If you are unable to find your device's MAC address, come visit us during office and bring your device with you, we are happy to help you. Sometimes, you may find it on the device itself, or it's packaging. On devices with menus, it's commonly found in sections called "Settings" or "About the device".