Cyber Security II. Netzplan: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(17 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
 
=Übersicht=
 
=Übersicht=
−
<!---
 
 
{{#drawio:cybersec-2.1-plan}}
 
{{#drawio:cybersec-2.1-plan}}
−
--->
+
==Logischer Netzplan==
 
{{#drawio:cybersec-2.2-plan}}
 
{{#drawio:cybersec-2.2-plan}}
 +
 +
=Anpassen der Maschinen=
 +
==opnsense==
 +
*CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
 +
{| class="wikitable"
 +
! Ort !! Typ !! Wert
 +
|-
 +
| System:Gateways:Configuration:WANGW || Static IPv4 || 192.168.HS.254
 +
|-
 +
| System:Gateways:Configuration:DNSGW || Static IPv4 || 192.168.HS.88
 +
|-
 +
| Interfaces:WAN:IPv4 address || Static IPv4 || 192.168.HS.2XX/24
 +
|-
 +
| Interfaces:DMZ:IPv4 address || Static IPv4 || 10.88.2XX.1/24
 +
|-
 +
| System:Settings:General:Domain || Domain || it2XX.xinmen.de
 +
|-
 +
| System:Settings:General:DNS servers || IPv4 || 1.1.1.1
 +
|-
 +
| System:Trust:Certificates || Import || <nowiki>star.it2XX.xinmen.de</nowiki>
 +
|-
 +
| System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>star.it2XX.xinmen.de</nowiki>
 +
|-
 +
| Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3
 +
|-
 +
| Firewall:Aliases:WWW || Host(s) || 10.88.2XX.2
 +
|-
 +
| Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5
 +
|}
 +
 +
=ovs=
 +
*Port1 : untaged:1 taged:21,22,23
 +
*Port2 : untaged:21 device:client
 +
*Port12: untaged:22 device:sensor
 +
*Port13: untaged:22 device:aktor
 +
*Port14: untaged:22 device:mqtt
 +
*Port16: untaged:22 device:win2022
 +
 +
*Port21: untaged:1  device:ids managment
 +
*Port23: mirror:21,22,23 device:ids suricata
 +
 +
==waf==
 +
*hostnamectl set-hostname waf.it213.xinmen.de
 +
*get-cert.sh
 +
*reboot
 +
 +
==www==
 +
*hostnamectl set-hostname www.it213.xinmen.de
 +
*get-cert.sh
 +
*reboot
 +
==mail==
 +
*hostnamectl set-hostname mail.it213.xinmen.de
 +
*get-cert.sh
 +
*make-mail.sh
 +
*reboot
  
 
=HA Proxy=
 
=HA Proxy=
 
{{#drawio:cybersec-2.2-haproxy}}
 
{{#drawio:cybersec-2.2-haproxy}}
 +
 
=SOC=
 
=SOC=
 
{{#drawio:cybersec-2.3-soc}}
 
{{#drawio:cybersec-2.3-soc}}

Aktuelle Version vom 9. September 2026, 17:52 Uhr

Übersicht

Logischer Netzplan

Anpassen der Maschinen

opnsense

Ort Typ Wert
System:Gateways:Configuration:WANGW Static IPv4 192.168.HS.254
System:Gateways:Configuration:DNSGW Static IPv4 192.168.HS.88
Interfaces:WAN:IPv4 address Static IPv4 192.168.HS.2XX/24
Interfaces:DMZ:IPv4 address Static IPv4 10.88.2XX.1/24
System:Settings:General:Domain Domain it2XX.xinmen.de
System:Settings:General:DNS servers IPv4 1.1.1.1
System:Trust:Certificates Import star.it2XX.xinmen.de
System:Settings:Administration:SSL Certificate Auswahl star.it2XX.xinmen.de
Firewall:Aliases:MAIL Host(s) 10.88.2XX.3
Firewall:Aliases:WWW Host(s) 10.88.2XX.2
Firewall:Aliases:WAF Host(s) 10.88.2XX.5

ovs

  • Port1 : untaged:1 taged:21,22,23
  • Port2 : untaged:21 device:client
  • Port12: untaged:22 device:sensor
  • Port13: untaged:22 device:aktor
  • Port14: untaged:22 device:mqtt
  • Port16: untaged:22 device:win2022
  • Port21: untaged:1 device:ids managment
  • Port23: mirror:21,22,23 device:ids suricata

waf

  • hostnamectl set-hostname waf.it213.xinmen.de
  • get-cert.sh
  • reboot

www

  • hostnamectl set-hostname www.it213.xinmen.de
  • get-cert.sh
  • reboot

mail

  • hostnamectl set-hostname mail.it213.xinmen.de
  • get-cert.sh
  • make-mail.sh
  • reboot

HA Proxy

SOC

Abgerufen von „https://www.xinux.net/index.php?title=Cyber_Security_II._Netzplan&oldid=73382“