Cyber Security II. Netzplan: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| (10 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 5: | Zeile 5: | ||
=Anpassen der Maschinen= | =Anpassen der Maschinen= | ||
== | ==opnsense== | ||
*CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden. | *CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden. | ||
{| class="wikitable" | |||
! Ort !! Typ !! Wert | |||
|- | |||
| System:Gateways:Configuration:WANGW || Static IPv4 || 192.168.HS.254 | |||
|- | |||
| System:Gateways:Configuration:DNSGW || Static IPv4 || 192.168.HS.88 | |||
|- | |||
| Interfaces:WAN:IPv4 address || Static IPv4 || 192.168.HS.2XX/24 | |||
|- | |||
| Interfaces:DMZ:IPv4 address || Static IPv4 || 10.88.2XX.1/24 | |||
|- | |||
| System:Settings:General:Domain || Domain || it2XX.xinmen.de | |||
|- | |||
| System:Settings:General:DNS servers || IPv4 || 1.1.1.1 | |||
|- | |||
| System:Trust:Certificates || Import || <nowiki>star.it2XX.xinmen.de</nowiki> | |||
|- | |||
| System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>star.it2XX.xinmen.de</nowiki> | |||
|- | |||
| Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3 | |||
|- | |||
| Firewall:Aliases:WWW || Host(s) || 10.88.2XX.11 | |||
|- | |||
| Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5 | |||
|- | |||
| Firewall:Aliases:DOCKER || Host(s) || 10.88.2XX.9 | |||
|} | |||
=ovs= | =ovs= | ||
*Port1 : untaged:1 taged:21,22,23 | *Port1 : untaged:1 taged:21,22,23 | ||
| Zeile 34: | Zeile 58: | ||
*hostnamectl set-hostname mail.it213.xinmen.de | *hostnamectl set-hostname mail.it213.xinmen.de | ||
*get-cert.sh | *get-cert.sh | ||
*make-mail.sh | |||
*reboot | *reboot | ||
Aktuelle Version vom 20. Oktober 2026, 18:05 Uhr
Übersicht
Logischer Netzplan
Anpassen der Maschinen
opnsense
- CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
| Ort | Typ | Wert |
|---|---|---|
| System:Gateways:Configuration:WANGW | Static IPv4 | 192.168.HS.254 |
| System:Gateways:Configuration:DNSGW | Static IPv4 | 192.168.HS.88 |
| Interfaces:WAN:IPv4 address | Static IPv4 | 192.168.HS.2XX/24 |
| Interfaces:DMZ:IPv4 address | Static IPv4 | 10.88.2XX.1/24 |
| System:Settings:General:Domain | Domain | it2XX.xinmen.de |
| System:Settings:General:DNS servers | IPv4 | 1.1.1.1 |
| System:Trust:Certificates | Import | star.it2XX.xinmen.de |
| System:Settings:Administration:SSL Certificate | Auswahl | star.it2XX.xinmen.de |
| Firewall:Aliases:MAIL | Host(s) | 10.88.2XX.3 |
| Firewall:Aliases:WWW | Host(s) | 10.88.2XX.11 |
| Firewall:Aliases:WAF | Host(s) | 10.88.2XX.5 |
| Firewall:Aliases:DOCKER | Host(s) | 10.88.2XX.9 |
ovs
- Port1 : untaged:1 taged:21,22,23
- Port2 : untaged:21 device:client
- Port12: untaged:22 device:sensor
- Port13: untaged:22 device:aktor
- Port14: untaged:22 device:mqtt
- Port16: untaged:22 device:win2022
- Port21: untaged:1 device:ids managment
- Port23: mirror:21,22,23 device:ids suricata
waf
- hostnamectl set-hostname waf.it213.xinmen.de
- get-cert.sh
- reboot
www
- hostnamectl set-hostname www.it213.xinmen.de
- get-cert.sh
- reboot
- hostnamectl set-hostname mail.it213.xinmen.de
- get-cert.sh
- make-mail.sh
- reboot
HA Proxy
SOC
