Cyber Security II. Netzplan: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(6 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 5: Zeile 5:
  
 
=Anpassen der Maschinen=
 
=Anpassen der Maschinen=
−
==fw==
+
==opnsense==
−
*GW: 192.168.HS.254
 
−
*WANIP: 192.168.HS.200+TN
 
−
*VIRT1: 192.168.HS.220+TN
 
−
*VIRT2: 192.168.HS.240+TN
 
 
*CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
 
*CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
 +
{| class="wikitable"
 +
! Ort !! Typ !! Wert
 +
|-
 +
| System:Gateways:Configuration:WANGW || Static IPv4 || 192.168.HS.254
 +
|-
 +
| System:Gateways:Configuration:DNSGW || Static IPv4 || 192.168.HS.88
 +
|-
 +
| Interfaces:WAN:IPv4 address || Static IPv4 || 192.168.HS.2XX/24
 +
|-
 +
| Interfaces:DMZ:IPv4 address || Static IPv4 || 10.88.2XX.1/24
 +
|-
 +
| System:Settings:General:Domain || Domain || it2XX.xinmen.de
 +
|-
 +
| System:Settings:General:DNS servers || IPv4 || 1.1.1.1
 +
|-
 +
| System:Trust:Certificates || Import || <nowiki>star.it2XX.xinmen.de</nowiki>
 +
|-
 +
| System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>star.it2XX.xinmen.de</nowiki>
 +
|-
 +
| Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3
 +
|-
 +
| Firewall:Aliases:WWW || Host(s) || 10.88.2XX.2
 +
|-
 +
| Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5
 +
|}
 +
 
=ovs=
 
=ovs=
 
*Port1 : untaged:1 taged:21,22,23
 
*Port1 : untaged:1 taged:21,22,23

Aktuelle Version vom 9. September 2026, 17:52 Uhr

Übersicht

Logischer Netzplan

Anpassen der Maschinen

opnsense

Ort Typ Wert
System:Gateways:Configuration:WANGW Static IPv4 192.168.HS.254
System:Gateways:Configuration:DNSGW Static IPv4 192.168.HS.88
Interfaces:WAN:IPv4 address Static IPv4 192.168.HS.2XX/24
Interfaces:DMZ:IPv4 address Static IPv4 10.88.2XX.1/24
System:Settings:General:Domain Domain it2XX.xinmen.de
System:Settings:General:DNS servers IPv4 1.1.1.1
System:Trust:Certificates Import star.it2XX.xinmen.de
System:Settings:Administration:SSL Certificate Auswahl star.it2XX.xinmen.de
Firewall:Aliases:MAIL Host(s) 10.88.2XX.3
Firewall:Aliases:WWW Host(s) 10.88.2XX.2
Firewall:Aliases:WAF Host(s) 10.88.2XX.5

ovs

  • Port1 : untaged:1 taged:21,22,23
  • Port2 : untaged:21 device:client
  • Port12: untaged:22 device:sensor
  • Port13: untaged:22 device:aktor
  • Port14: untaged:22 device:mqtt
  • Port16: untaged:22 device:win2022
  • Port21: untaged:1 device:ids managment
  • Port23: mirror:21,22,23 device:ids suricata

waf

  • hostnamectl set-hostname waf.it213.xinmen.de
  • get-cert.sh
  • reboot

www

  • hostnamectl set-hostname www.it213.xinmen.de
  • get-cert.sh
  • reboot

mail

  • hostnamectl set-hostname mail.it213.xinmen.de
  • get-cert.sh
  • make-mail.sh
  • reboot

HA Proxy

SOC

Abgerufen von „https://www.xinux.net/index.php?title=Cyber_Security_II._Netzplan&oldid=73382“