The following is a list of networks used by the University of California at Berkeley Campus and some offsite locations. This list is for informative purposes and does not attempt to document all networks in use by Cal Berkeley as some are not managed or provided by Berkeley IT Network Services.
This list can be used to restrict access from specific networks, but be aware that network address are unreliable as a method of data protection.
Full List of Campus Networks
This is the list of networks used by Cal Berkeley and managed by the Berkeley IT Network Services group.
In the bSecure firewall service this with the exception of the Berkeley-Visitor guest Wi-Fi network is represented by the Object Group UCB-networks_no_visitor
| Network | Use |
| 128.32.0.0/16 | UCB Campus and Some Remote Sites |
| 136.152.0.0/16 | UCB Campus and Some Remote Sites |
| 169.229.0.0/16 | UCB Campus and Some Remote Sites |
| 192.31.95.0/241 | UCB at San Diego Super Computer Center |
| 192.31.105.0/241 | UCB Campus and Some Remote Sites |
| 192.31.161.0/241 | UCB at San Diego Super Computer Center |
| 192.58.221.0/241 | UCB at San Diego Super Computer Center |
| 192.101.42.0/241 | UCB at San Diego Super Computer Center |
| 192.107.102.0/241 | UCB at San Diego Super Computer Center |
| 192.195.74.0/241 | UCB at San Diego Super Computer Center |
| 10.0.0.0/82 | Non-Internet Routable RFC 1918 Address Space |
| 2607:f140::/322 | UCB IPv6 Allocation at Campus, Some Remote Sites, and San Diego Super Computer Center |
Campus Wireless Networks
In the bSecure firewall service eduroam and Berkeley-IoT are represented by the Object Group UCB-eduroam-berkeley-iot and Berkeley-Visistor is represented by the Object Group UCB-berkeley-visitor.
| Network | Use |
|
eduroam and Berkeley-IoT Authenticated Wireless Networks |
|
| 10.142.0.0/15 | Legacy Authenticated Network |
| 10.40.0.0/13 | New Authenticated Network |
| 136.152.64.0/193 | Authenticated Direct Assignment Network3 |
| 136.152.142.0/23 | Legacy Authenticated Internet Access Network (NAT Pool) |
| 136.152.214.0/23 | New Authenticated Internet Access Network (NAT Pool) |
| 2607:f140:400::/48 | Authenticated IPv6 Public Network |
|
Berkeley-Visitor Open Wireless Network |
|
| 10.105.128.0/171 | Legacy Visitor IPv4 Network |
| 10.56.0.0/131 | New Visitor IPv4 Network |
| 192.31.105.0/241 |
Legacy Visitor Internet Access Network (NAT Pool) |
| 136.152.209.0/241 |
New Visitor Internet Access Network (NAT Pool) |
| 2607:f140:6000::/481 | Visitor IPv6 Public Networks |
Campus Remote Access VPN Networks (bSecure Remote Access Services with GlobalProtect)
| bSecure Remote Access VPN Client Networks bSecure Firewall Object "UCB-bSecure-Remote-Access" |
|||
| IPv4 Network | IPv6 Network | Use | |
| 10.136.128.0/18 | 2607:f140:800:3::/64 | Split Tunnel Client Networks | |
| 136.152.16.0/20 | 2607:f140:800:1::/64 | Full, Library, and Auto Tunnel Networks | |
| 136.152.210.0/23 | 2607:f140:800:2::/64 | Restricted Tunnel Networks | |
Notes:
* Access to library resources is estimated only and provided as a guide
1 This network or address range does not have access to Library resources
2 Some address ranges within the network do not have access to Library resources
3 The direct access network is an opt-in service for Wi-Fi devices to receive IPv4 addresses directly accessible from the Internet