Wireless Network: VLAN Ranges and Rules (ETS Internal)

Summary

This article contains lists of Network IP (Internet Protocol) ranges for the VLAN (Virtual Local Area Network) segments planned at USNH, arranged by campus. The Enterprise VLAN is already in place.

This article also includes USNH guest network traffic rules and limitations. These new Wireless Guest VLAN network segments are being implemented on February 17, 2026. 

New Staff, Student, and IoT VLAN network segments will be implemented next month on March 17, 2026. These networks will have no particular limitations except regarding accessing each other. Limitations downstream (like getting into other networks) are still in place just like they are for current wifi.

From Bryan Scovill's email (Monday, February 16, 2026):
  • We are firing up the new wireless guest network segments tomorrow (Feb. 17, 2026).  We wanted to pass along the rules for your internal documentation.
  • Guest network users will get an IP in the 10.(178|179|180).96.0/20 network.  That is 10.x.96-111.x.   
  • The full vlan list is at the end of this[email], with Enterprise and Guest being the ones that are live [as of 2.17.2026] and the other three [Staff, Student, IoT] going live on March 17th.

Important: When a user connects to eduroam with their username in an improper format (like ad\<username>@<campus>.edu or ad\<username>), they end up being treated as a guest. They authenticate, but do not authorize. This is highlighted in the NAC portal, but the impact is not obvious. 

  • Correct username format to connect to eduroam is:  <username>@usnh.edu

 

Guest Network Traffic Rules

Note: These Wireless Guest VLAN network segments are being implemented on February 17, 2026.

To the Internet

  • Web Traffic: General TCP port 80/443 only excepting traffic types that are blocked for everyone (like QUIC.)
  • Network Time Protocol (NTP): UDP 123
  • Teredo: UDP 3544
  • Windows Delivery Optimization : TCP 7680
  • IM Talk: TCP 16384–16403 
  • Email:
    • SMTP Submission : TCP/UDP
    • IMAPS : TCP 993
  •  Third party VPN clients (IPsec/IKE) : UDP 500 & 4500

 

To USNH Networks

Web traffic to the following:

  • PSU Reverse Proxy (158.136.1.77)
  • Vortex (158.136.4.33)
  • USNH Web Presense Network (aka Red) (132.177.132.0/23)
  • USNH Enterprise DMZ (aka Pink) (132.177.164.0/22)
  • USNH Network Services:
    • Registration: 158.136.1.100, 158.65.2.40, 132.177.128.30, (10.20.248.30 in Durham)
    • Cloudpath: 132.177.239.220, (10.20.248.220 in Durham)
    • Notification: 132.177.102.27
  • All DNS and DHCP related IPs.

Two notable items that are explicitly not included in the access list:

  • Papercut
  • USNH VPNs

 

Full VLAN List of IP Ranges

Note: Enterprise and Guest VLANs effective as of Feb. 17, 2026. Staff, Student, and IoT VLANs effective as of March 17, 2026.

KSC

VLAN Network IP Range
3305 KSC_Wireless_Enterprise 10.178.0.0 through 10.178.15.255
3306 KSC_Wireless_Staff 10.178.64.0 through 10.178.95.255
3307 KSC_Wireless_Student 10.181.0.0 through 10.181.127.255
3308 KSC_Wireless_Guest 10.178.96.0 through 10.178.111.255
3309 KSC_Wireless_IoT 10.178.112.0 through 10.178.127.255

 

PSU

VLAN Network IP Range
3405 PSU_Wireless_Enterprise 10.179.0.0 through 10.179.15.255
3406 PSU_Wireless_Staff 10.179.64.0 through 10.179.95.255
3407 PSU_Wireless_Student 10.182.0.0 through 10.182.127.255
3408 PSU_Wireless_Guest 10.179.96.0 through 10.179.111.255
3409 PSU_Wireless_IoT 10.179.112.0 through 10.179.127.255

 

UNH

VLAN Network IP Range
3505 UNH_Wireless_Enterprise 10.180.0.0 through 10.180.15.255
3506 UNH_Wireless_Staff 10.180.64.0 through 10.180.95.255
3507 UNH_Wireless_Student 10.183.0.0 through 10.183.127.255
3508 UNH_Wireless_Guest 10.180.96.0 through 10.180.111.255
3509 UNH_Wireless_IoT 10.180.112.0 through 10.180.127.255

 

Need additional help?

The Group: ET&S - Wireless Network owns the wireless service at USNH.

If you have questions or need additional help with these topics, please reach out to your Team Lead or supervisor for assistance.