coimbrap
/
projet_serveur_krkn
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Modification des IP/VLAN

master
Pierre Coimbra 2020-02-23 10:25:03 +01:00
parent 360133f96c
commit 71e1da177d
No known key found for this signature in database
GPG Key ID: F9C449C78F6FAEE6
2 changed files with 44 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
applicatif/repartition_en_zones.md
View File

@ -45,7 +45,7 @@ Pour Squid
- Bridge Interne VLAN 20 (PROXY) - Bridge Interne VLAN 20 (PROXY)
- Bridge Interne VLAN 30 (INT) - Bridge Interne VLAN 30 (INT)
- Bridge Interne VLAN 40 (CTF) - Bridge Interne VLAN 40 (CTF)
- Bridge Interne VLAN 50 (EXT) - Bridge Interne VLAN 50 (INT)
## Services Backend ## Services Backend

71
reseau/mise_en_place.md
View File

@ -4,6 +4,7 @@ Nous allons ici détaillé la configuration du réseau physique et virtuel. Il e
## Map des IPs principales. ## Map des IPs principales.
Voilà les IPs attribuées aux services principaux qu'il faut impérativement respecter. Voilà les IPs attribuées aux services principaux qu'il faut impérativement respecter.
### DMZ ### DMZ
Switch Interne VLAN 10
- Firewall Alpha : 10.0.0.1 - Firewall Alpha : 10.0.0.1
- Firewall Beta : 10.0.0.2 - Firewall Beta : 10.0.0.2
- Firewall VIP : 10.0.0.3 - Firewall VIP : 10.0.0.3
@ -14,12 +15,14 @@ Voilà les IPs attribuées aux services principaux qu'il faut impérativement re
- Mail : 10.0.0.10 - Mail : 10.0.0.10
### PROXY ### PROXY
Switch Interne VLAN 20
- HAProxy Alpha : 10.0.1.1 - HAProxy Alpha : 10.0.1.1
- HAProxy Beta : 10.0.1.2 - HAProxy Beta : 10.0.1.2
- Nginx Public Alpha : 10.0.1.3 - Nginx Public Alpha : 10.0.1.3
- Nginx Public Beta : 10.0.1.4 - Nginx Public Beta : 10.0.1.4
### INT ### INT
Switch Interne VLAN 30
- LDAP Alpha : 10.0.2.1 - LDAP Alpha : 10.0.2.1
- LDAP Bêta : 10.0.2.2 - LDAP Bêta : 10.0.2.2
- LDAP VIP : 10.0.2.3 - LDAP VIP : 10.0.2.3
@ -28,6 +31,7 @@ Voilà les IPs attribuées aux services principaux qu'il faut impérativement re
- [...] Voir DNS - [...] Voir DNS
### CTF : ### CTF :
Switch Interne VLAN 40
- HAProxy Alpha : 10.0.3.1 - HAProxy Alpha : 10.0.3.1
- HAProxy Beta : 10.0.3.2 - HAProxy Beta : 10.0.3.2
- Nginx CTF : 10.0.3.3 - Nginx CTF : 10.0.3.3
@ -37,23 +41,34 @@ Voilà les IPs attribuées aux services principaux qu'il faut impérativement re
- Environnement Web : 10.0.3.13 - Environnement Web : 10.0.3.13
- [...] Rajout possible - [...] Rajout possible
### DIRTY :
Switch Interne VLAN 50
- 10.0.4.0/24
Pas de containers permanent
### GRE internal ### GRE internal
- Alpha : 10.0.4.1 Switch Interne VLAN 100
- Beta : 10.0.4.2 - Alpha : 10.0.10.1
- Beta : 10.0.10.2
### CoroSync internal ### CoroSync internal
- Alpha : 10.0.5.1 Switch Administration VLAN 10
- Beta : 10.0.5.2 - Alpha : 10.1.1.1
- Beta : 10.1.1.2
### pfSync internal ### pfSync internal
- Alpha : 10.0.6.1 Switch Administration VLAN 20
- Beta : 10.0.6.2 - Alpha : 10.1.2.1
- Beta : 10.1.2.2
### GRE admin ### GRE admin
- Alpha : 10.0.7.1 Switch Administration VLAN 30
- Beta : 10.0.7.2 - Alpha : 10.1.10.1
- Beta : 10.1.10.2
### Administration : ### Administration :
Switch Administration VLAN 100
- Firewall Alpha : 10.1.0.1 - Firewall Alpha : 10.1.0.1
- Firewall Bêta : 10.1.0.2 - Firewall Bêta : 10.1.0.2
- Proxmox Alpha : 10.1.0.3 - Proxmox Alpha : 10.1.0.3
@ -109,7 +124,7 @@ iface wan inet manual
#GRE interne #GRE interne
allow-interne vx1 allow-interne vx1
iface gre1 inet static iface gre1 inet static
address 10.0.4.1 address 10.0.10.1
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge interne ovs_bridge interne
@ -121,23 +136,23 @@ iface interne inet manual
ovs_type OVSBridge ovs_type OVSBridge
ovs_ports bond0 vx1 ovs_ports bond0 vx1
up ovs-vsctl set Bridge ${IFACE} rstp_enable=true up ovs-vsctl set Bridge ${IFACE} rstp_enable=true
up ovs-vsctl --may-exist add-port interne gre1 -- set interface gre1 type=gre options:remote_ip='10.0.4.2' up ovs-vsctl --may-exist add-port interne gre1 -- set interface gre1 type=gre options:remote_ip='10.0.10.2'
down ovs-vsctl --if-exists del-port interne gre1 down ovs-vsctl --if-exists del-port interne gre1
#Admin Task #Admin Task
allow-admin admintask allow-admin admintask
iface admintask inet static iface admintask inet static
address 10.1.0.1 address 10.1.0.3
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=10 ovs_options tag=100
#Corosync #Corosync
allow-admin coro allow-admin coro
iface coro inet static iface coro inet static
address 10.0.5.1 address 10.1.1.1
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
@ -146,20 +161,20 @@ iface coro inet static
#pfSync #pfSync
allow-admin pfsync allow-admin pfsync
iface pfsync inet static iface pfsync inet static
address 10.0.6.1 address 10.1.2.1
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=30 ovs_options tag=20
#GRE admin #GRE admin
allow-admin vx2 allow-admin vx2
iface vx2 inet static iface vx2 inet static
address 10.0.7.1 address 10.1.10.1
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=100 ovs_options tag=30
#OVS Bridge administation #OVS Bridge administation
auto admin auto admin
@ -167,7 +182,7 @@ iface admin inet manual
ovs_type OVSBridge ovs_type OVSBridge
ovs_ports eth2 vx2 ovs_ports eth2 vx2
up ovs-vsctl set Bridge ${IFACE} rstp_enable=true up ovs-vsctl set Bridge ${IFACE} rstp_enable=true
up ovs-vsctl --may-exist add-port admin gre2 -- set interface gre2 type=gre options:remote_ip='10.0.7.2' up ovs-vsctl --may-exist add-port admin gre2 -- set interface gre2 type=gre options:remote_ip='10.0.10.2'
down ovs-vsctl --if-exists del-port admin gre2 down ovs-vsctl --if-exists del-port admin gre2
``` ```
@ -203,7 +218,7 @@ iface wan inet manual
#GRE interne #GRE interne
allow-interne vx1 allow-interne vx1
iface gre1 inet static iface gre1 inet static
address 10.0.4.2 address 10.0.10.2
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge interne ovs_bridge interne
@ -215,23 +230,23 @@ iface interne inet manual
ovs_type OVSBridge ovs_type OVSBridge
ovs_ports bond0 vx1 ovs_ports bond0 vx1
up ovs-vsctl set Bridge ${IFACE} rstp_enable=true up ovs-vsctl set Bridge ${IFACE} rstp_enable=true
up ovs-vsctl --may-exist add-port interne gre1 -- set interface gre1 type=gre options:remote_ip='10.0.4.1' up ovs-vsctl --may-exist add-port interne gre1 -- set interface gre1 type=gre options:remote_ip='10.0.10.1'
down ovs-vsctl --if-exists del-port interne gre1 down ovs-vsctl --if-exists del-port interne gre1
#Admin Task #Admin Task
allow-admin coro allow-admin coro
iface coro inet static iface coro inet static
address 10.1.0.2 address 10.1.0.4
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=10 ovs_options tag=100
#Corosync #Corosync
allow-admin coro allow-admin coro
iface coro inet static iface coro inet static
address 10.0.5.2 address 10.1.1.2
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
@ -240,20 +255,20 @@ iface coro inet static
#pfSync #pfSync
allow-admin pfsync allow-admin pfsync
iface pfsync inet static iface pfsync inet static
address 10.0.6.2 address 10.1.2.2
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=30 ovs_options tag=20
#GRE admin #GRE admin
allow-admin vx2 allow-admin vx2
iface vx2 inet static iface vx2 inet static
address 10.0.7.2 address 10.1.10.2
netmask 24 netmask 24
ovs_type OVSIntPort ovs_type OVSIntPort
ovs_bridge admin ovs_bridge admin
ovs_options tag=100 ovs_options tag=30
#OVS Bridge administation #OVS Bridge administation
auto admin auto admin
@ -261,6 +276,6 @@ iface admin inet manual
ovs_type OVSBridge ovs_type OVSBridge
ovs_ports eth2 vx2 ovs_ports eth2 vx2
up ovs-vsctl set Bridge ${IFACE} rstp_enable=true up ovs-vsctl set Bridge ${IFACE} rstp_enable=true
up ovs-vsctl --may-exist add-port admin gre2 -- set interface gre2 type=gre options:remote_ip='10.0.7.1' up ovs-vsctl --may-exist add-port admin gre2 -- set interface gre2 type=gre options:remote_ip='10.1.10.1'
down ovs-vsctl --if-exists del-port admin gre2 down ovs-vsctl --if-exists del-port admin gre2
``` ```