IST Home > IST Services > Technical > Campus Networks and Product Access Control

Campus Networks and Product Access Control

Introduction

This document contains network numbers for controlling access to licensed products and services at the University of California at Berkeley.

Note: The campus is moving away from using network numbers for access control. For more, see: Campus applications rapidly adopt the CalNet System and the CalNet Identity Management web site.

Affiliation with the University of California, Berkeley, and one or more static IP addresses is required for registration as part of the UC Berkeley network for purposes of product access. The static IP addresses can be for any type of connection to the campus network or the Internet. The IP addresses may be dynamically assigned locally provided they are in a static range of IP addresses restricted to UC Berkeley users and the local department maintains a log of dynamic address assignments to permit tracing use to the end user.

Library resources are available via www.lib.berkeley.edu. Access to some library resources is limited by restrictions imposed by the publisher. For example, the publisher might limit the number of network address blocks that can have access to a online journal to three or less. In such cases, access to these library resources may be limited to access via workstations in a branch library or via the UC Berkeley Library Proxy Server Service. For information about access limitations to a particular online journal contact the controlling branch library.

UC Berkeley Networks

Except as noted below, for purposes of access control to licensed products and services the following are consider to be University at California at Berkeley networks:

Network	IP Address Range		Comment
	From:	To:
128.3.60.0/22	128.3.60.0	128.3.63.255	UCB 717 Potter Street Labs, Berkeley: Arkin, and Keasling
128.32.0.0/16	128.32.0.0	128.32.255.255	UCB Local Area Networks *
136.152.0.0/16	136.152.0.0	136.152.255.255	UCB Local Area Networks and Home IP Service #
169.229.0.0/16	169.229.0.0	169.229.255.255	UCB Local Area Networks
131.243.52.0/24	131.243.52.0	131.243.52.255	UCB Melvin Calvin Lab. building
192.101.42.0/24	192.101.42.0	192.101.42.255	UCB Local Area Networks
199.133.139.0/24	199.133.139.0	199.133.139.255	USDA/UCB Joint Local Area Network (expires 1 May 2008)
199.133.211.0	199.133.211.0	199.133.223.255	USDA/UCB Joint Local Area Networks
various	see below	see below	UC Berkeley Employees on Other UC Managed Networks
various	see below	see below	UC Berkeley Employees at Satellite Sites

# 1/16th of the 136.152.0.0/16 class B network (136.152.192.0/20, range 136.152.192.0 - 136.152.207.255) is reserved for the UCB Home IP Service. The rest of this network is allocated for general campus network use.

* Online product contracts may be divided into two groups, ones for the library which include all library patrons and those for faculty, staff and students only. Thus there are two tables for the 128.32.0.0/16 block of ip addresses:

128.32.0.0/16 UC Berkeley and University Library Patrons

The following table of ip address ranges includes University Library patron ports, and excludes other non-UC Berkeley access. The following table of ranges is recommended as a replacement for 128.32.0.0/16 for controlling access to library licensed products. (For a list of ip addresses for UC Berkeley students, faculty, staff and University Library patrons see the Library Patron Product Access Control web page. .)

Network	IP Address Range		Comment
	From:	To:
128.32.0.0/16	128.32.0.0	128.32.5.138	UCB Local Area Networks
128.32.0.0/16	128.32.5.145	128.32.159.17	UCB Local Area Networks
128.32.0.0/16	128.32.159.19	128.32.220.255	UCB Local Area Networks
128.32.0.0/16	128.32.222.0	128.32.255.255	UCB Local Area Networks

128.32.0.0/16 Faculty, Staff and Students

The following table excludes Doe Library patron ports, and other non-UC Berkeley access.
It includes Doe Library LIPS service for faculty, staff and students.
This 128.32.0.0/16 table is recommended for controlling access to UC Berkeley site licensed software.

Network	IP Address Range		Comment
	From:	To:
128.32.0.0/16	128.32.0.0	128.32.4.63	UCB Local Area Networks
128.32.0.0/16	128.32.4.66	128.32.4.66	UCB Local Area Networks
128.32.0.0/16	128.32.4.254	128.32.5.3	UCB Local Area Networks
128.32.0.0/16	128.32.5.15	128.32.5.66	UCB Local Area Networks
128.32.0.0/16	128.32.5.69	128.32.5.130	UCB Local Area Networks
128.32.0.0/16	128.32.6.0	128.32.6.49	UCB Local Area Networks
128.32.0.0/16	128.32.6.52	128.32.6.155	UCB Local Area Networks
128.32.0.0/16	128.32.8.0	128.32.159.17	UCB Local Area Networks
128.32.0.0/16	128.32.159.19	128.32.220.255	UCB Local Area Networks
128.32.0.0/16	128.32.222.0	128.32.255.255	UCB Local Area Networks

Note: Due to changes in Internet Service Provider contracts, UC Berkeley abandoned use of nets in the 208.1.64.0/19 block of addresses (that were allocated to UC Berkeley by SprintLink) about 11/31/98.

UC Berkeley Employees on Other UC Managed Networks

IP Address	Description
169.228.93.193 thru 169.228.93.195 169.228.93.197 169.228.93.199 169.228.93.213 thru 169.228.93.215 169.228.93.218 169.228.93.220 169.228.93.222 thru 169.228.93.230	UC Berkeley employees at the Hopland Research and Extension Center on an University of California network connected via the UC Division of Agriculture and Natural Resources. These IP address numbers are in ucnet.net domain. (Oct 1998, Feb 2001)

UC Berkeley Satellite Sites

IP Address	Description
69.35.18.206	Blodgett Forest Research Station, UC Berkeley Center for Forestry (property history) via a Direcway satellite link.
202.3.226.52	Richard B. Gump South Pacific Research Station (ucb.sl.mana.pf) in Mo'orea, French Polynesia.

UC Berkeley Units on US Government Managed Networks

The joint university/government unit on the following network has agreed to restrict access to campus computing resources to UC Berkeley faculty, staff and students.

Network	IP Address Range		Comment
	From:	To:
199.133.139.0/24	199.133.139.0	199.133.139.255	UCB/USDA Plant Gene Expression Center (expires 1 April 2008)
199.133.211.0/24	199.133.211.0	199.133.211.255	UCB/USDA Plant Gene Expression Center
199.133.212.0/22	199.133.212.0	199.133.215.255	UCB/USDA Plant Gene Expression Center
199.133.216.0/21	199.133.216.0	199.133.223.255	UCB/USDA Plant Gene Expression Center

The following University of California at Berkeley units uses a US Government network to access National Laboratory online resources and the Internet. Access is restricted to UC Berkeley faculty, staff and students.

Network	IP Address Range		Comment
	From:	To:
128.3.60.0/22	128.3.60.0	128.3.63.255	UCB 717 Potter Street Labs, Berkeley: Arkin, and Keasling
131.243.52.0/24	131.243.52.0	131.243.52.255	UCB Melvin Calvin Laboratory (on campus)

Note: National laboratories (eg. LBL.GOV) managed by the University of California are U.S. Government sites and are not normally considered to be part of the University of California at Berkeley for purposes of access to network resources controlled by site licenses.

Comments and corrections to this UC Berkeley network section should be sent to wcwells@berkeley.edu.

Public Access

This section contains network addresses which should be blocked as required by the language of licenses.

The following allow persons who are not faculty, staff or students, to have access to the campus network:

Network	IP Address Range		Comment
	From:	To:
169.229.50.0/27	169.229.50.0	169.229.50.31	Computer Sciences - PlanetLab proxy servers
192.58.221.0/24	192.58.221.0	192.58.221.255	Associated Students of U.C.

TranSend Proxy Servers restriction (128.32.44.66-.69) removed 18 May 2007. ASUC net 208.1.87.0/24 was moved to 192.58.221.0/24 on 24 Nov 1998.

The following services are accessible by the public via the dialup modem services operated by Communication and Network Services at UC Berkeley:

IP Address	Comment
128.32.159.18	"ucb-library" terminal server

Comments and corrections to this public access section should be sent to wcwells@berkeley.edu.

Software Access

Some site software licenses limit use to certain types of students. The following networks provide access to extension students that are not registered as regular students:

Network	IP Address Range		Comment
	From:	To:
169.229.20.0/25	169.229.20.0	169.229.20.127	UC Extension
169.229.22.0/24	169.229.22.0	169.229.22.255	UC Extension
169.229.23.0/24	169.229.23.0	169.229.23.255	UC Extension
169.229.25.128/25	169.229.25.128	169.229.25.255	UC Extension

Distributors of licensed software have the option of limiting licensed software to IP address numbers used by individual U.C. Berkeley faculty, staff and students as required by software licenses.

Note: The IST WSS software.Berkeley.EDU web site SAFE software download now uses CalNet ID.

Comments and corrections to this software access section should be sent to wcwells@berkeley.edu.

More Local Network Information

A list of University of California at Berkeley local networks may be found at

ftp://ftp.net.berkeley.edu/pub/networks.local

---