Search ResNet

Search Housing:

Computer Use Policy and Connection Guidelines

Bringing the World to Your Room

October 26, 2011

 

UCI Policy on Student Use of Computing Resources

The University of California, Irvine (UCI) provides computing resources and worldwide network access to members of the UCI electronic community for legitimate academic and administrative pursuits to communicate, access knowledge, and retrieve and disseminate information. All members of the UCI community (faculty, staff, students, and authorized guests) sharing these resources also share the rights and responsibilities for their use.

Please visit http://www.policies.uci.edu/adm/pols/714-18.html to view UCI’s complete computing and Information Systems Policies.

Residential Network Acceptable Use Policy

and Connection Guidelines

General Guidelines

The UCI Computer Use Policy binds users of computing or communications resources at UC Irvine.  (http://www.policies.uci.edu/adm/pols/714-18.html).  The following information pertains to University of California, Irvine, Residential Network Services and establishes policies and guidelines specific and unique to residential computing. By connecting to the Residential Network and logging on with a valid UCINetID and password, each user understands and agrees to abide by these guidelines.

 

Every computer or network device on the Residential Network will be subject to the Cisco Network Admission Control (NAC) Appliance.  Please visit our website at http://resnet.uci.edu/cca.asp for details.

 

Policies

P.07-01 Responsibility

Users are responsible for all traffic originating from their computer, including user activity, regardless of whether or not:

 

• They generated it;
• They know what they are doing, and;
• They realize that they have violated any specific policies.

 It is REQUIRED that all computers on the Residential Network;

 

• Have the Cisco NAC client, Anti Virus Protection that is updated (McAfee will be provided by UCI free of charge) and the latest Microsoft security updates (Windows operating systems only);
• Is properly logged onto the network; and
• Has an IP Address assigned by Resnet.

 

Cisco NAC is about having "clean machines" on the network. If anyone masks any computer to look like a different operating system to bypass the Cisco NAC, the machine and user will immediately be banned from the network and disciplinary action pursued.

 

It is RECOMMENDED that all computers on the Residential Network that are running Windows operating systems have the following:

• An updated version of Microsoft’s free Anti Spyware program for the removal of spyware.
• Enable windows Personal Firewall to protect the computer.
• Change the Administrator Account to another name and use a strong password with both numbers and letters.
• Disable the Guest Account.

 

P.07-02  Registration

 

Registration is an automatic process where all users will be directed to a simple log on screen. Users must log onto the network using their usual UCINetID and Password. If you do not have a UCINetID, you must contact NACS to activate your account or obtain a guest account. For details on connecting gaming consoles, digital video recorders, voice-over-IP telephones and other non-browser devices, please visit http://resnet.uci.edu/registration.asp.

 

P.07-03 Use of IP Addresses

 

All IP addresses within Resnet are assigned through an automatic process. IP addresses are dynamic, and are subject to change without any prior notice. Residents should have no expectation that their IP address will remain the same for any length of time. Under no circumstances may computers be configured with a static IP address.  Using an IP address that you have not been assigned is grounds for losing your network privileges and immediate disconnection without notice.  Additionally, users may not mask the hardware address of their machines.  Any computer that is found with a masked hardware address, or consisting of all zeros will be disconnected until it is reconfigured.

 

P.07-04 Hacking and Port Scanning

Any unauthorized attempt to access another computer is considered hacking.  It doesn’t matter whether the computer being hacked into is on or off campus.  Any report received by the Office of Residential Network Services that a computer on the housing network attempted to hack into or scanned the ports of another will result in the immediate disabling of the network connection until the matter is resolved.  Port scanning is considered by the vast majority of network administrators to be a “hostile” act and a precursor to an actual hacking attempt.  In light of the recent rash of highly publicized incidents by the news media, it should be remembered that network administrators are tracking attempts to hack into their systems, and report those attempts immediately to the University when they occur. 

 

P.07-05  Security and Privacy

Network traffic is considered private; users are completely responsible for the security and integrity of their systems. In cases where a computer is "hacked into", it is recommended that the system be either shut down or be removed from the campus network as soon as possible in order to localize any potential damage and to stop the attack from spreading. In such cases, if the owner cannot be contacted in a reasonable time the network administrator reserves the right to disable the network connection. Once the owner is made aware of the situation and agrees to take reasonable steps to ensure that the computer is not compromised, network privileges may be restored.

 

Any computer with shared drives or directories that are passworded are considered private, even if others that do not own the computer know the password.  Accessing passworded directories without the express permission of the owner is considered hacking, and may result in permanent loss of network privileges.

 

P. 07-06  Server Services

UCI’s Residential Network is designed as a CLIENT network, and as such the use of servers will be carefully controlled.  Computers running any type of server that uses excessive bandwidth will either be disconnected from the network or have their bandwidth limited.  Examples of server services include, but are not limited to: Peer-to-Peer services (Ares, BitTorrent, Gnutella, Kazaa, DC++, Filetopia, etc) Web or IIS; FTP; Shoutcast; WAREZ; Chat; Gaming servers; and mIRC chat servers, including file servers.

 

From time to time it may be necessary to block or stop certain server services if they adversely affect the performance of the network, or if they become security threats.

 

Further, residents that are running any Peer to Peer program that is creating excessive connections on the network may be disconnected without notice. Excessive connections are defined as any computer within the Residential Network that has in excess of 500 connections at any given time to other computers off campus. Excessive connections cause problems on the network, degrades performance and efficiency of equipment, and causes slow-downs and lag for hundreds of residents.

 

P.07-07  Music, Movies, Software and other Copyrighted Files

"Sharing" copyright-protected material (e.g. music) over the Internet without the permission of the copyright owner is illegal and against University policy. Participating in such activity, for example via peer-to-peer networking, can result in suspension of network access, campus disciplinary action, civil liability, and even criminal proceedings. Copyright holders and their agents have been particularly vigilant with college and university campuses.

 

Intellectual property rights, including respect for copyright, are among the values strongly held by the University.  UCI diligently investigates any credible allegation of copyright infringement and cooperates with legal investigations. Please be aware that according to copyright law, you do not need to be making a profit to be prosecuted for distributing copyrighted materials.

 

P.07-08  Routers and DHCP Servers

If you would like to have wireless internet access in your residence, we recommend that you purchase a wireless access point, and secure it properly according to manufacturer specifications with WPA2 security. Similarly, if you wish to connect more than one device to the available Ethernet jack, we recommend that you purchase an Ethernet hub/switch. In either case, WE STRONGLY DISCOURAGE THE USE OF ROUTERS.

 

If you do still wish to use a router on campus, it will need to be reconfigured to function as an access point or hub. The use of network address translation (NAT) and DHCP is not permitted in any UCI housing community.

We offer a number of basic tutorials on our website that may aid you in the configuration of your device (http://resnet.uci.edu/routersetup.asp).

 

P.07-09  Network Traffic and Bandwidth

Residential connections to the campus network are provided to allow students to fully participate in the legitimate educational and research missions of the University of California, Irvine. In general, we encourage individuals to provide useful, interesting, and inventive content to the Internet community, so long as it remains feasible for us to do so.

 

It may not remain feasible to provide unlimited connectivity for systems that are not strictly serving the University's missions. Because of this possibility, we reserve the right to regulate the flow of traffic on the residential network to ensure that all users receive a fair and equitable use of bandwidth.  This may include Traffic Shaping, limiting or blocking certain types of network traffic. The University may also request that users reduce the amount of traffic being caused by their service, or where necessary, to remove such systems from the residential network. In all but extreme cases, we will contact the owner of the system before removing it from the network.

 

P.07-10  Misconfigured Services or Virus Infected Computers

 

There may be times when a computer is unintentionally misconfigured or infected with a virus that causes problems on the network. In order to preserve the best service possible for the majority of the users, every infected or misconfigured computer will be disconnected from the network immediately.  We will attempt to notify the owner of the system by electronic mail that the computer has been disconnected and why.

 

Computers will be allowed back onto the network after the owner notifies the Office of Residential Network Services that they have reconfigured the computer or removed the virus and resolved the problem. Any computer that is infected a second time may be disconnected for two weeks, and subsequent infections may result in being disconnected for a full quarter or permanently.

 

P.07-11  Accounts

Some operating systems, specifically UNIX operating systems, allow the system administrator to create accounts for other users. While this is not discouraged for computers connected to the residential network, there are some things that should be considered. All users must be accurately identifiable. The user name field for any given account should contain the user's real name.  There is no valid reason to allow a user to have a fictitious name for their account.  Off-campus users with no affiliation the University of California, Irvine are explicitly prohibited from having accounts on computers connected to the residential network.

 

P.07-12  Commercial Use

Under no circumstances will any individual be permitted to use their network connection or computing privileges for commercial purposes. You may not advertise any commercial products.  Any commercial use of University facilities is explicitly prohibited and is grounds for loss of residential network privileges.

Any computer that provides services for a commercial operation (e.g. a web site selling commercial products), provides services of a commercial nature (e.g. provides web services to Non-university users, whether or not a fee is charged), or has a domain name with a commercial designation (currently .COM or .NET) is explicitly prohibited from the campus network.  

 

P.07-13  Anonymous Mailers and Spam Zombies

All electronic communications at UC Irvine must accurately identify the sender. Anonymous mail forwarders are prohibited. Running an anonymous mail forwarding service is grounds for removal from the residential network. This includes computers that have been hacked into and are being used as spam zombies.

 

P.07-14  Intentional Abuse

 

Systems found to be intentionally running programs that disrupt network activity or attack specific computers on the network will be subject to immediate removal and disciplinary action.  The UCI Computer Use Policy further details this issue.  The full policy may be found at http://www.policies.uci.edu/adm/pols/714-18.html.

 

Configuring Your Computer

 

Resnet supports the following OS’s:

• Mac OS X
• Windows XP
• Windows Vista and 7

We do not offer official support for Linux, UNIX, or older versions of Windows.

 

This portion of the manual will provide you with information regarding the connection of your Macintosh system to the residential network. If you need assistance, you may contact ResNet at (949) 824-6375.  Please read the step-by-step directions thoroughly before calling. You will save yourself a lot of time.

 

Macintosh Network Configuration Procedure

Verifying Your IP Address

• Please be sure that you have your ethernet cable connected to the correct wall jack and your computer.
• Go to the Apple Menu and select System Preferences.
• From the System Preferences window, select Network.

 

• In the Network window, select Ethernet.
• Click on Advanced.

 

• Look for the line titled IPv4 Address.
• The IP should start with 169.234, NOT AN AUTO-ASSIGNED 169.254!

 

• If a different number appears on that line, click on Renew DHCP Lease.

 

 

Logging into Cisco Network Admission Control

•  Open up any form of Internet browser (Safari, FireFox, etc.).
• You should be redirected to the Residential Networking Login Page.
• After logging in with your UCINetID and password, you will be prompted to download and install the Cisco NAC client.

 

 

• Once the Cisco NAC client has been installed on your computer, you will again be prompted to log in with your UCINetID and password. Logging in to the client will properly authenticate your computer, and you will be able to access the Internet.

 

 

Windows 2000 and XP Network Configuration Procedure

Verifying Your IP Address

• Please be sure that you have your ethernet cable connected to the correct wall jack and your computer.
• To set your DHCP properties, go to the Start Menu and select Control Panel.
• Making sure that the Control Panel is displaying Classic View, select Network Connections.

 

 

• Right-click on the Local Area Connection, and choose Properties.
• When the next window opens, double click on the entry labeled Internet Protocol (TCP/IP).

 

• Make sure that you are set up to Obtain an IP address automatically and Obtain DNS server address automatically. Then click on OK buttons until the process is finished.

 

 

• Go to the Start Menu and select Run.
• In the Run dialog box, type cmd and click OK.

 

 

• In the command prompt, type ipconfig and press Enter.
• Look for the line titled IP Address.
• The IP should start with 169.234, NOT AN AUTO-ASSIGNED 169.254!

 

• If a different number appears on that line, type ipconfig –release.  Then type ipconfig –renew.

 

Logging into Cisco Network Admission Control

• Open up any form of Internet browser (FireFox, Internet Explorer, etc.).
• You should be redirected to the Residential Networking Login Page.
• After logging in with your UCINetID and password, you will be prompted to download and install the Cisco NAC client. (The client checks your computer to ensure that it is running all of the most recent Windows security fixes and that your virus scanner is up to date.)

 

 

• Once the Cisco NAC client has been installed on your computer, you will again be prompted to log in with your UCINetID and password.

 

• If the NAC client window does not pop up automatically, you can attempt to log in manually. To log in and log out of the NAC client, you can click on the appropriate icon in your computer’s system tray (next to the clock on the bottom right).
• When you log in to the Cisco NAC client, your computer will be assessed to insure that it meets the requirements necessary to be allowed on the network. If your computer is up to date and has the proper programs installed, you will be successfully logged in to the network.
• In the event that validation of your system fails, you will be given temporary quarantined access to the Internet. You will only be able to visit specific websites that will allow you to obtain the materials necessary to get achieve validation. Validation failure may result from one of four things:

• Microsoft Critical Updates Not Installed – Your PC does not have the necessary Windows patches and hotfixes installed. This can be corrected by running a scan at http://www.windowsupdate.com or manually installing updates at http://www.microsoft.com/downloads.
• Microsoft Automatic Updates Not Configured – Your PC is not set to download and install Windows updates automatically. Automatic Updates options are located in the computer’s System Properties (right-click on My Computer --> Properties --> Automatic Updates tab).

 

• Supported Anti-Virus Not Installed – Your PC does not have an anti-virus installed that is recognized by Cisco NAC. A free version of McAfee VirusScan is available through the ResNet website at http://www.resnet.uci.edu/security/virus.asp.
• Anti-Virus Definition Out of Date – Your PC’s anti-virus does not have the latest virus definition files installed. Virus definitions can be updated automatically through the anti-virus program, or new definitions can be manually installed from the website of your anti-virus manufacturer.
• Once you have obtained the materials necessary for validation, you can complete your authentication by logging into Cisco NAC client once again.

 

Windows Vista and 7 Network Configuration Procedure

Verifying Your IP Address

• Please be sure that you have your ethernet cable connected to the correct wall jack and your computer.

• To set your DHCP properties, go to the Start Menu and select Control Panel.

• Making sure that the Control Panel is displaying Classic View, select Network and Sharing Center.

 

 

• In the new window, click on the Manage Network Connections (Windows Vista) or the Change Adapter Settings (Windows 7) link on the left side.
• Right-click on the Local Area Connection, and choose Properties.
• Make certain that the checkbox for Internet Protocol Version 6 (TCP/IPv6) is unchecked.
• When the next window opens, double click on the entry labeled Internet Protocol Version 4 (TCP/IPv4).

 

• Make sure that you are set up to Obtain an IP address automatically and Obtain DNS server address automatically. Then click on OK buttons until the process is finished.

 

 

• Go to the Start Menu and in the Start Search dialog box, type cmd.

 

 

• Right-click on Command Prompt and select Run as Administrator

 

• In the command prompt, type ipconfig and press Enter.
• Look for the line titled IPv4 Address.
• The IP should start with 169.234, NOT AN AUTO-ASSIGNED 169.254!

 

• If a different number appears on that line, type ipconfig –release.  Then type ipconfig –renew.

 

Logging into Cisco Network Admission Control

• To log into Cisco NAC with Windows Vista, you should follow the instructions outlined above for Windows 2000 and XP.

 

 

FAQ’s (Frequently Asked Questions)

 

What does Residential Network Services provide?

The data connection in your room on campus gives you direct access to the Internet from your personal computer.  With it you can use electronic mail, Telnet, FTP (for file transfer among computers on the Internet), Usenet news, and the World-Wide Web via browsers such as FireFox and Internet Explorer.  We provide this access at speeds significantly faster than a modem, and there is no need to tie up a phone line.  Access is immediate; no additional Internet Service Provider (ISP) is needed.

In addition, ResNet also maintains the cable television services throughout UCI’s housing complexes.

 

Does the Residential Network require special software?

YES. Because of the thousands of virus infected computers we experienced in previous years, we will be requiring all users to authenticate before connecting to the network. Furthermore, we require all Windows machines to download and run our new Cisco Network Admission Control Appliance. This will help both the Resnet staff and the student to keep his/her computer clean and free of viruses, trojan horses and worms. If your computer is not up to date, you will be directed to the correct web site where you can download the necessary updates, including anti-virus software, updated virus definitions, and Windows security updates.

 

Assuming you meet the minimum support requirements for ResNet, then your operating system software, along with any software that might have come with your network card, will provide the drivers you need to connect to the Internet.  Beyond that, all you need is your choice of software to access the Internet.

 

Do I need a Virus Checking Program?

YES! Resnet provides a Windows version of McAfee free of charge to any resident that needs an Anti-Virus program. If you are running a Windows machine, it is required that you install, and keep updated, a reliable anti-virus program such as AVG or McAfee. The most common reason for students being disconnected is because they are not running an anti-virus program, and their computer gets infected. Once it is infected, then it will attempt to infect others, so we have no choice but to disconnect it. For information on various anti-virus programs, please visit http://resnet.uci.edu. Keeping your computer anti virus program updated will not only help you, but keep hundreds of other residents from being infected.

 

My computer got infected with some kind of virus or worm and it sends spam. Can you come to my room and fix it?

Unfortunately, no. It is the responsibility of each resident to keep their computer passworded, virus free, and up to date. If you require repair work, virus removal, software upgrades, or program installation, please contact our repair partner at the UCI Computer Store at (949) 824-7096. You may also e-mail them at tech@uci.edu, or visit their website at http://www.computerstore.uci.edu.

I noticed that the wall jack in my room is broken and hanging out of the wall. Can you come to my room and fix it?

Absolutely! Any part of our network that is broken we will fix. This means all our equipment and connections from the wall jack out. We can even test your Ethernet cord to see if it is working properly. We can check out your computer and help diagnose problems and help get you connected to the network.

 

How do I get set up for a network connection?

Follow these simple instructions in this handbook to configure your computer and establish the connection.  If you experience problems, we have a staff of Residential Network Consultants (RNC’s) that will be able to assist you.  Check out the listing at the end of this booklet for phone numbers and e-mail addresses to send your request.  We will be more than happy to assist you get on-line.

 

What is Windows Automatic Updates and why should I use it?

Windows Update is an important function that Microsoft provides to keep your Windows operating system and other programs updated. This feature must be turned ON, and whenever you are notified that an update is available, we ask that you immediately download and install the update. Our new Cisco NAC system will alert you when updates are available for both Windows and many anti-virus programs, so you will always have the most protected computer possible.

 

What is “BANDWIDTH” and why is it important?

Bandwidth refers to the amount of information that can flow up and down the network. The more bandwidth used, the larger the cost. Most residents use very little bandwidth as they browse the web, send e-mail and download an occasional file.  In the past, about 2% of the residents would use over 90% of the available bandwidth causing slowdowns and poor performance for everyone.

 

Is our bandwidth controlled now?

Yes. We installed two very sophisticated pieces of equipment that categorize all network traffic to and from the residential network.  We now prioritize network traffic to provide fair and equitable amount of bandwidth for all residents.  This means that a resident who wants to download music or movies will be severely limited so that the bandwidth for all others is not degraded.

 

Does this mean that you can tell what web sites I visit and read my e-mail?

NO!  We are concerned with network performance and which applications are running on the network, not the content of what residents are moving, reading or which web sites are visited.  Your privacy is one of our prime concerns, as is guaranteeing a fair and equitable amount of bandwidth for each of our 7,500 residents.

 

What does my network connection cost?

It’s included in your housing fees!  There are no additional charges for using this service.

Who can connect?

Every resident in Graduate or Undergraduate housing!  This includes family members living in Palo Verde, Verano Place, Gabrielino, Santiago and Las Lomas.  All you need is a valid UCINetID and an up-to-date computer!

 

Can two computers be connected in a Residence Hall room?
Yes! There are only one or two data jacks; residents are encouraged to bring their own switch or hub to connect more than one computer.

Is the Residential Network available off campus?
No.  Only the eight residential/apartment complexes are wired for this kind of access.  Residences and apartments off campus are not a part of the University, and thus are not connected to ResNet. Vista Del Campo and Vista Del Campo Norte are not part of the UCI Residential Network.

 

I notice that there are data jacks in study rooms and common areas.  Can I plug my laptop into these?
Yes.  We have installed many additional ethernet jacks in living rooms, study rooms and common areas.  Feel free to move your laptop around as you wish.  If you move your laptop to another building, you may have to release/renew your IP address to get a new address that is assigned to that building.

 

Once I am online, can I set up my computer as a WEB or FTP Server?
Yes.  Although the Residential Network is designed and configured as a “client” network, recent changes in our ability to manage bandwidth allows us to permit students to run servers so long as they do not consume an unfair amount of bandwidth or provide services that conflict with existing services.  See the Residential Networking Acceptable Use Policy at the beginning of this handbook.

 

I used a new phone cord to connect my computer to the ethernet jack on the wall, why can’t I get online?

Phone cords do not work!  You must have an ethernet cord.  They are available at the UCI Computer Store, or any commercial computer or office supply store.  An ethernet cord is wired differently than a phone cord.

 

Why won’t my new wireless laptop connect in the dorms?

ResNet does not offer wireless networking at this time. Plans are being made for future installations of wireless; however, no time frame is currently available. If you would like to have wireless internet access in your dormitory, we suggest that you purchase a wireless access point (NOT A ROUTER) and secure it properly according to manufacturer specifications with WPA, WPA2, and/or MAC filtering.

 

Does ResNet have an office that I can go to for network help?

Yes, ResNet has recently relocated to the south suite of 500 Housing Administrative Services, on the southeast corner of Pereira Drive and East Peltason Drive. Residents are encouraged to visit our office for additional assistance.

 

UCI Residential Network Services

Student Center G464

Phone: (949) 824-6375

E-mail: resnet@uci.edu

Web: http://resnet.uci.edu