Cyber Security II. Netzplan: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 16: | Zeile 16: | ||
| System:Gateways:Configuration:DNSGW || Static IPv4 || 192.168.HS.88 | | System:Gateways:Configuration:DNSGW || Static IPv4 || 192.168.HS.88 | ||
|- | |- | ||
| Interfaces:WAN:IPv4 address || Static IPv4 || 192.168.HS. | | Interfaces:WAN:IPv4 address || Static IPv4 || 192.168.HS.2XX/24 | ||
|- | |- | ||
| Interfaces:DMZ:IPv4 address || Static IPv4 || 10.88.2XX.1/24 | | Interfaces:DMZ:IPv4 address || Static IPv4 || 10.88.2XX.1/24 | ||
| Zeile 22: | Zeile 22: | ||
| System:Settings:General:Domain || Domain || it2XX.xinmen.de | | System:Settings:General:Domain || Domain || it2XX.xinmen.de | ||
|- | |- | ||
| System:Settings:General:DNS servers || IPv4 || | | System:Settings:General:DNS servers || IPv4 || 1.1.1.1 | ||
|- | |- | ||
| System:Trust:Certificates || Import || <nowiki>*.it2XX.xinmen.de</nowiki> | | System:Trust:Certificates || Import || <nowiki>*.it2XX.xinmen.de</nowiki> | ||
| Zeile 30: | Zeile 28: | ||
| System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>*.it2XX.xinmen.de</nowiki> | | System:Settings:Administration:SSL Certificate || Auswahl || <nowiki>*.it2XX.xinmen.de</nowiki> | ||
|- | |- | ||
| Firewall:Aliases:MAIL || Host(s) || 10.88.2XX. | | Firewall:Aliases:MAIL || Host(s) || 10.88.2XX.3 | ||
|- | |- | ||
| Firewall:Aliases:WWW || Host(s) || 10.88.2XX. | | Firewall:Aliases:WWW || Host(s) || 10.88.2XX.2 | ||
|- | |- | ||
| Firewall:Aliases:WAF || Host(s) || 10.88.2XX. | | Firewall:Aliases:WAF || Host(s) || 10.88.2XX.5 | ||
|} | |} | ||
Version vom 9. September 2026, 17:51 Uhr
Übersicht
Logischer Netzplan
Anpassen der Maschinen
opnsense
- GW: 192.168.HS.254
- WANIP: 192.168.HS.200+TN
- CERT: wget https://web.samogo.de/certs/it200+TN.xinmen.de.tgz, einspielen und zuornden.
| Ort | Typ | Wert |
|---|---|---|
| System:Gateways:Configuration:WANGW | Static IPv4 | 192.168.HS.254 |
| System:Gateways:Configuration:DNSGW | Static IPv4 | 192.168.HS.88 |
| Interfaces:WAN:IPv4 address | Static IPv4 | 192.168.HS.2XX/24 |
| Interfaces:DMZ:IPv4 address | Static IPv4 | 10.88.2XX.1/24 |
| System:Settings:General:Domain | Domain | it2XX.xinmen.de |
| System:Settings:General:DNS servers | IPv4 | 1.1.1.1 |
| System:Trust:Certificates | Import | *.it2XX.xinmen.de |
| System:Settings:Administration:SSL Certificate | Auswahl | *.it2XX.xinmen.de |
| Firewall:Aliases:MAIL | Host(s) | 10.88.2XX.3 |
| Firewall:Aliases:WWW | Host(s) | 10.88.2XX.2 |
| Firewall:Aliases:WAF | Host(s) | 10.88.2XX.5 |
ovs
- Port1 : untaged:1 taged:21,22,23
- Port2 : untaged:21 device:client
- Port12: untaged:22 device:sensor
- Port13: untaged:22 device:aktor
- Port14: untaged:22 device:mqtt
- Port16: untaged:22 device:win2022
- Port21: untaged:1 device:ids managment
- Port23: mirror:21,22,23 device:ids suricata
waf
- hostnamectl set-hostname waf.it213.xinmen.de
- get-cert.sh
- reboot
www
- hostnamectl set-hostname www.it213.xinmen.de
- get-cert.sh
- reboot
- hostnamectl set-hostname mail.it213.xinmen.de
- get-cert.sh
- make-mail.sh
- reboot
HA Proxy
SOC
