We are sending this message to a broad audience to ensure full transparency and coverage across One IT. If you don’t manage networking/firewall rules for a system, you can ignore this message. As part of an ongoing project to enhance Campus Wi-Fi performance and stability, we will be moving Wi-Fi services to new, upgraded infrastructure. This work is being performed on an accelerated schedule to alleviate potential issues experienced since the start of the fall semester. The first move to this new infrastructure is tentatively scheduled to occur on Tuesday, Sept. 19, 2023. In preparation for this change, we are asking administrators of systems that implement firewall policies and controls based on IPv4 addresses to review their configurations and update them as necessary prior to Tuesday, Sept. 19, 2023. This is explained in further detail below.
Why are we making this change?
The planned change will greatly expand the capacity, performance, and resilience of the infrastructure necessary to support our complex Wi-Fi environment. This positions UC Berkeley Wi-Fi for the future as the demands on our wireless network continue to grow.
What are the impacts of this change?
Part of this change will require us to deploy new IPv4 Address ranges for Wi-Fi clients. Of particular importance will be the change to Berkeley-Visitor IP address ranges, since users on this service are typically not members of the campus community. If you manage a system that filters or firewalls access based on IP addresses related to Wi-Fi services, you may need to review and update your configuration.
New IP Ranges
New IPv4 ranges will be deployed as follows:
Berkely-Visitor
-
10.56.0.0/13 - Visitor Network
-
136.152.209.0/24 - Visitor Internet Access Network (NAT Pool)
eduroam and Berkeley-IoT
-
10.40.0.0/13 - Authenticated Network
-
136.152.214.0/23 - Authenticated Internet Access Network (NAT Pool)
IPv6 Address ranges assigned to these services are unchanged.
Recommended Action
Prior to Tuesday, Sept. 19, 2023 administrators of systems that implement firewall policies and controls based on IPv4 addresses should review their configurations and update them as necessary to include these networks.
Administrators of bSecure Firewall Services can utilize the following pre-existing object groups in their policies. These objects will always be updated with the current appropriate address ranges.
-
Berkely-Visitor: UCB-berkeley-visitor
-
Eduroam & Berkeley-Iot: UCB-eduroam-berkeley-iot
-
All Berkeley Networks (excludes guests and visitors): UCB-networks_no_visitor
View this reference for all UC Berkeley IP address ranges and their uses
Contact
If you have questions regarding this project, please reach out to Isaac Orr (iorr@berkeley.edu). If you experience issues with Wi-Fi or need other technical help contact our IT support team
Thank you for your attention to this matter as we continuously work to improve the network user experience across campus.
Network Services Team
Berkeley IT | Campus IT Infrastructure
Related Links: Wi-Fi Options & Access | System Status