Cyber Security II. Netzplan: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
mail
(→ovs) |
(→ovs) |
||
| Zeile 17: | Zeile 17: | ||
*Port13: untaged:22 device:aktor | *Port13: untaged:22 device:aktor | ||
*Port14: untaged:22 device:mqtt | *Port14: untaged:22 device:mqtt | ||
| + | *Port16: untaged:22 device:win2022 | ||
| + | |||
*Port21: untaged:1 device:ids managment | *Port21: untaged:1 device:ids managment | ||
*Port23: mirror:21,22,23 device:ids suricata | *Port23: mirror:21,22,23 device:ids suricata | ||
Version vom 27. Juni 2026, 10:58 Uhr
Übersicht
Logischer Netzplan
Anpassen der Maschinen
fw
- GW: 192.168.HS.254
- WANIP: 192.168.HS.200+TN
- VIRT1: 192.168.HS.220+TN
- VIRT2: 192.168.HS.240+TN
- CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
ovs
- Port1 : untaged:1 taged:21,22,23
- Port2 : untaged:21 device:client
- Port12: untaged:22 device:sensor
- Port13: untaged:22 device:aktor
- Port14: untaged:22 device:mqtt
- Port16: untaged:22 device:win2022
- Port21: untaged:1 device:ids managment
- Port23: mirror:21,22,23 device:ids suricata
waf
- hostnamectl set-hostname waf.it213.xinmen.de
- get-cert.sh
- reboot
www
- hostnamectl set-hostname www.it213.xinmen.de
- get-cert.sh
- reboot
- hostnamectl set-hostname mail.it213.xinmen.de
- getcert-mail.sh
- reboot
![Bearbeiten](javascript:editDrawio("1735009532", "cybersec-2.1-plan.drawio.png", "png", false, false, false, true, "https://embed.diagrams.net")){kind=link}
![Bearbeiten](javascript:editDrawio("1492368581", "cybersec-2.2-plan.drawio.png", "png", false, false, false, true, "https://embed.diagrams.net")){kind=link}
![Bearbeiten](javascript:editDrawio("579214954", "cybersec-2.2-haproxy.drawio.png", "png", false, false, false, true, "https://embed.diagrams.net")){kind=link}
![Bearbeiten](javascript:editDrawio("1884203670", "cybersec-2.3-soc.drawio.png", "png", false, false, false, true, "https://embed.diagrams.net")){kind=link}