Cyber Security II. Netzplan: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
mail
(→fw) |
|||
| (11 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
=Übersicht= | =Übersicht= | ||
| − | |||
{{#drawio:cybersec-2.1-plan}} | {{#drawio:cybersec-2.1-plan}} | ||
| − | + | ==Logischer Netzplan== | |
{{#drawio:cybersec-2.2-plan}} | {{#drawio:cybersec-2.2-plan}} | ||
| + | |||
| + | =Anpassen der Maschinen= | ||
| + | ==fw== | ||
| + | *GW: 192.168.HS.254 | ||
| + | *WANIP: 192.168.HS.200+TN | ||
| + | *CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden. | ||
| + | |||
| + | =ovs= | ||
| + | *Port1 : untaged:1 taged:21,22,23 | ||
| + | *Port2 : untaged:21 device:client | ||
| + | *Port12: untaged:22 device:sensor | ||
| + | *Port13: untaged:22 device:aktor | ||
| + | *Port14: untaged:22 device:mqtt | ||
| + | *Port16: untaged:22 device:win2022 | ||
| + | |||
| + | *Port21: untaged:1 device:ids managment | ||
| + | *Port23: mirror:21,22,23 device:ids suricata | ||
| + | |||
| + | ==waf== | ||
| + | *hostnamectl set-hostname waf.it213.xinmen.de | ||
| + | *get-cert.sh | ||
| + | *reboot | ||
| + | |||
| + | ==www== | ||
| + | *hostnamectl set-hostname www.it213.xinmen.de | ||
| + | *get-cert.sh | ||
| + | *reboot | ||
| + | ==mail== | ||
| + | *hostnamectl set-hostname mail.it213.xinmen.de | ||
| + | *get-cert.sh | ||
| + | *make-mail.sh | ||
| + | *reboot | ||
=HA Proxy= | =HA Proxy= | ||
{{#drawio:cybersec-2.2-haproxy}} | {{#drawio:cybersec-2.2-haproxy}} | ||
| + | |||
=SOC= | =SOC= | ||
{{#drawio:cybersec-2.3-soc}} | {{#drawio:cybersec-2.3-soc}} | ||
Aktuelle Version vom 29. Juni 2026, 06:43 Uhr
Übersicht
Logischer Netzplan
Anpassen der Maschinen
fw
- GW: 192.168.HS.254
- WANIP: 192.168.HS.200+TN
- CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
ovs
- Port1 : untaged:1 taged:21,22,23
- Port2 : untaged:21 device:client
- Port12: untaged:22 device:sensor
- Port13: untaged:22 device:aktor
- Port14: untaged:22 device:mqtt
- Port16: untaged:22 device:win2022
- Port21: untaged:1 device:ids managment
- Port23: mirror:21,22,23 device:ids suricata
waf
- hostnamectl set-hostname waf.it213.xinmen.de
- get-cert.sh
- reboot
www
- hostnamectl set-hostname www.it213.xinmen.de
- get-cert.sh
- reboot
- hostnamectl set-hostname mail.it213.xinmen.de
- get-cert.sh
- make-mail.sh
- reboot



