Networking

General Network Services

Office computers used by faculty and staff, as well as public, lab and shared computers, are connected to the University network by a 100-Mbps Ethernet connection. Newer buildings and locations offer 1-Gbps connections. The datacenters managed by UTS offer additional capacity for network communications.

Firewalls and Intrusion Detection Systems are in place throughout the University network to provide enhanced security features and to ensure safety for all network clients. All external connectivity is handled by dual 10-Gbps connections to the Internet and Internet2 via the Merit Network. Oakland University is a member of Internet2.

Unusual university activities may need require advance planning. For example, sending large files to off-site locations may require advance capacity planning.

June 2019

Wireless Network Connectivity

Wireless Network Access for Students, Faculty and Staff

Wireless Network Access for Visitors and Guests

Network Access for Visitors and Guests

What is Network Access?

Network Access is the ability to use the wired and wireless networks provided by Oakland University. Network Access includes the ability to use a browser (i.e., Internet Explorer, Safari, Firefox, Chrome, etc.) to browse web sites or otherwise access the Internet.

Who can obtain Network Access?

Students, Faculty, and Staff of Oakland University may use Network Access by registering their device at https://clearpass.oakland.edu and logging in with their assigned NetID and password. Employees (Faculty and Staff) are provided Network Access in order to successfully complete their work at Oakland University. Students are provided Network Access as a service with costs covered by tuition.

Who are Visitors and Guests?

Visitors are those people who visit the campus for short periods of time and their identity is not authenticated. Visitors may attend events in designated locations. Guests visit for defined periods of time and the identity of a guest is authenticated by showing and recording a picture ID or through event registration.

Can Visitors obtain Network Access, particularly wireless Network Access?

Visitors may be registered by accompanied students, faculty, and staff. Students, faculty, and staff interacting with visitors may provide short-term network access through the network registration process for registering computers. The network registration process is located at https://clearpass.oakland.edu. Visitors may obtain Network Access in affiliated Oakland University areas, such as the Golf and Learning Center special facilities, special events in the Oakland Center, special events in Meadow Brook Hall, or other designated event locations. Those sponsoring access should maintain name lists for those for whom they provide access. All network uses are required to comply with university policy #890 Use of University Information Technology Resources.

Can Guests obtain Network Access, particularly wireless Network Access?

Short-term Guests participating in an event in the Oakland Center or Meadow Brook Hall, or visiting Kresge Library, may obtain Network Access. For events in the Oakland Center or Meadow Brook Hall, event organizers need to arrange for Network Access should at the time the event is planned. Event attendees should check with the event organizer about network access. Event attendees are responsible for compliance with the Digital Millennium Copyright Act and university policies and should note that network access activities are tracked and subject to legal action.

Short-term Guests using Kresge Library desktop computers may arrange for wired network access on those machines by requesting a guest account at the Service Desk in the lobby of the library. Guests must present a valid photo ID card (Driver's license or state ID). Wireless access is not available in the Library for short-term Guests.

Long-term Guests are those who need Network Access for longer than one day. Long-term Guests must be sponsored by a department. The form NetID - Guest Account Request Form must be completed and submitted for long-term Guest Network Access. Access must be sponsored by a department. Oakland University does not sell or lease access. Guests are responsible for compliance with the Digital Millennium Copyright Act and university policies and should note that network access activities are tracked and subject to legal action.

Oakland University also allows guests from eduroam participating institutions to connect automatically through the wireless SSID eduroam.

Network Access for Events

Can a university department arrange Event Guest network access during an event in the Oakland Center, Meadow Brook Hall, Kresge Library, or other location?

In some locations and with advance planning, temporary network access can be arranged for an official university event. The sponsoring department should contact University Technology Services at uts@oakland.edu. Event planning details are needed as early as possible before the event date. UTS will analyze the request and provide a response about possibilities and costs. Please note that most campus locations are not ready to have large numbers of visitors access the wireless network. Special event planners wishing to offer Guest Network Access for large groups, groups involving minors, or groups in areas that are not standard event facilities must contact University Technology Services for planning, review, and approval prior to the event. To initiate the review process, please complete the following steps by sending this information to uts@oakland.edu:

Number of attendees.
Location of the event, including building, room, or general area of coverage.
Reason for internet access (e.g., general web surfing, gaming event, instructional activity, etc.).
Provide the email identity and name of the OU employee responsible for the event. If the event is organized by a Student Organization, provide the name and email identity for the Faculty Advisor.
Start and end date of the event.
Internet access for youth (under the age of 18) requires special provisioning. Review all materials posted at the Youth Protection web site. Implement a waiver form that must be signed by participants; send a copy of the blank form. The event sponsor should retain completed waiver forms. To request the waiver form, email uts@oakland.edu.

After reviewing and approving the submission, UTS will provide login credentials and access for the duration of the event. Please plan for a minimum of two weeks for the review process. UTS cannot guarantee wireless performance during the event, or can UTS assist with connectivity issues.

Network Policies and Security

Network Registration System - ClearPass

Network Standards

Contractors performing authorized work, as well as vendors soliciting responses for Request for Proposals (RFPs) must abide by the Network Physical Plant Standards when submitting proposals for, performing changes on, or installing network infrastructure.

The following items should also be taken into account when designing systems that connect to the Oakland University network.

All device-to-device network communications must use IPv4 over Ethernet. Legacy protocols such as IPX/SPX and NetBEUI are prohibited.
All network-connected devices should be IPv6-capable. If not, the vendor should have an IPv6 roadmap and/or migration strategy.
All device-to-device network communications must allow for connectivity between subnets. Direct layer 2 connectivity between devices cannot be guaranteed and must not be required by this system.
All network-connected devices must support standards-compliant DHCP including periodic lease renewal prior to expiration.
All network-connected devices must present only a single MAC address to its directly-connected switch. All network-connected devices must never act as bridges or attempt to participate in spanning tree. Filtering transit BPDUs is prohibited.
All required network communications must be documented and diagrammed, including: source/destination device, IP protocols, and UDP/TCP port numbers.
If IPsec is used to secure device-to-device communications, NAT-Traversal/Transparency must be supported.
All network-connected devices must only send (and be able to receive) IP packets that are less than or equal to 1500 bytes in size including the IP header.
Primary remote vendor support must be conducted via the university-provided VPN. Remote support provided via dial-in modem may be provided as a secondary method.
All new cabling installed for this system must be performed under the supervision of UTS and follow existing university standards.
If name resolution is required, all network-connected devices must use DNS. WINS must not be required for name resolution.
"Universal Plug and Play" (UPnP) must not be required for system functionality.
All network-connected devices should support 802.1x.
All network-connected devices requiring PoE (Power over Ethernet) must be compatible with standards based IEEE 802.3af or 802.3at specifications. Note that prior to purchasing a device a ticket should be opened with Network Communications to ensure the location is PoE capable.