Cyber Security I. Netzplan

Übersicht

[Bearbeiten]

IPv4

• gateway 192.168.Y.254
• nameserver 78.47.133.194
• externe Domain itXX.xinmen.de
• interne Domain lab.int

Teilnehmer	Labor	Netz	Haupt-IP	Zweite-IP	CLIENTS	SERVER	DMZ
TN01	it21	172.26.0.0/22	192.168.Y.21	192.168.Y.41	172.26.1.0/24	172.26.2.0/24	172.26.3.0/24
TN02	it22	172.26.4.0/22	192.168.Y.22	192.168.Y.42	172.26.5.0/24	172.26.6.0/24	172.26.7.0/24
TN03	it23	172.26.8.0/22	192.168.Y.23	192.168.Y.43	172.26.9.0/24	172.26.10.0/24	172.26.11.0/24
TN04	it24	172.26.12.0/22	192.168.Y.24	192.168.Y.44	172.26.13.0/24	172.26.14.0/24	172.26.15.0/24
TN05	it25	172.26.16.0/22	192.168.Y.25	192.168.Y.45	172.26.17.0/24	172.26.18.0/24	172.26.19.0/24
TN06	it26	172.26.20.0/22	192.168.Y.26	192.168.Y.46	172.26.21.0/24	172.26.22.0/24	172.26.23.0/24
TN07	it27	172.26.24.0/22	192.168.Y.27	192.168.Y.47	172.26.25.0/24	172.26.26.0/24	172.26.27.0/24
TN08	it28	172.26.28.0/22	192.168.Y.28	192.168.Y.48	172.26.29.0/24	172.26.30.0/24	172.26.31.0/24
TN09	it29	172.26.32.0/22	192.168.Y.29	192.168.Y.49	172.26.33.0/24	172.26.34.0/24	172.26.35.0/24
TN10	it30	172.26.36.0/22	192.168.Y.30	192.168.Y.50	172.26.37.0/24	172.26.38.0/24	172.26.39.0/24
TN11	it31	172.26.40.0/22	192.168.Y.31	192.168.Y.51	172.26.41.0/24	172.26.42.0/24	172.26.43

Weiteres

Offizielle Zertifikate

• https://web.samogo.de/certs/

drawio rpm runterladen und installieren

• https://github.com/jgraph/drawio-desktop/releases/tag/v24.7.17

Netzplan

• wget https://xinux.de/downloads/linuggs.de/cybersec1.drawio.svg

Wie passe ich einen Debian/Ubuntu Rechner an

Resolver

• cat /etc/resolv.conf

nameserver 78.47.133.194
search it34.xinmen.de

Netzwerk

• cat /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
 address 172.26.55.2/24
 gateway 172.26.55.1

Hostnamen setzen

• hostnamectl set-hostname www.it.xinmen.de

Lokale Hostnamensauflösung

• cat /etc/hosts

127.0.0.1	localhost.localdomain	localhost
::1		localhost6.localdomain6	localhost6
127.0.0.1    www.xinmen.de www
# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

Portforwarding

• 192.168.12.34:9923 -> 172.26.55.2:22
• 192.168.12.34:9924 -> 172.26.53.52:22