aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavid M. Syzdek <david@syzdek.net>2020-03-20 04:04:08 -0800
committerDavid M. Syzdek <david@syzdek.net>2020-03-20 04:04:08 -0800
commitd8626aa03a7aa88a5945df2c3f14419670abc12b (patch)
tree941b3a4a0a959b0d6557f11da437f5bbc15582d6
parente1abb3b484e6a52a225f3fab5e5fac86a147e653 (diff)
downloadscratchpad-d8626aa03a7aa88a5945df2c3f14419670abc12b.tar.gz
scratchpad-d8626aa03a7aa88a5945df2c3f14419670abc12b.tar.bz2
scratchpad-d8626aa03a7aa88a5945df2c3f14419670abc12b.tar.xz
scratchpad-d8626aa03a7aa88a5945df2c3f14419670abc12b.zip
Adding VPN notes
Diffstat
-rw-r--r--notes/projects/strongswan/vpn-notes.md126
1 files changed, 126 insertions, 0 deletions
diff --git a/notes/projects/strongswan/vpn-notes.md b/notes/projects/strongswan/vpn-notes.md
new file mode 100644
index 0000000..b3b2d8a
--- /dev/null
+++ b/notes/projects/strongswan/vpn-notes.md
@@ -0,0 +1,126 @@
1sp VPN ervers
2===============
3
4Configurations
5==============
6
7 * [Firewall Rules](https://configs.prv.nwc.acsalaska.net/pub/configs/vpn/ipeng/firewall.git/about/)
8 * [Keepalived Configurations](https://configs.prv.nwc.acsalaska.net/pub/configs/vpn/ipeng/keepalived.git/about/)
9 * [Strongswan Configurations](https://configs.prv.nwc.acsalaska.net/pub/configs/vpn/ipeng/strongswan.git/about/)
10 * [Swanctl Configurations](https://configs.prv.nwc.acsalaska.net/pub/configs/vpn/ipeng/swanctl.git/about/)
11
12
13Notes
14=====
15
16Charon
17------
18
19Starting the daemon:
20
21 ipsec start
22 swanctl --load-all
23
24
25Stopping the daemin:
26
27 ipsec stop
28
29
30VPN Settings
31============
32
33 * VPN Type: IKEv2
34 * Server Address: vpn.cwc.acsalaska.net
35 * Remote ID: vpn.acsalaska.net
36 * Username: syzdek
37 * Password: XXXXXXXX
38 * Server Cert: http://certs.acsalaska.net/certs/akcom-ipeng-vpnCA.pem
39
40
41Networking
42==========
43
44 * VLAN
45 - VPN Internal: ISP_VPN / 2080
46 - VPN Public: ISP_VPN / 2081
47
48 * Networks
49 - 10.0.49.192/27 ISP VPN/Strongswan Servers Private
50 - 10.0.49.192/28 ISP VPN/Strongswan Servers Private (NWC)
51 - 10.0.49.208/28 ISP VPN/Strongswan Servers Private (CWC)
52 - 10.0.59.0/24 ISP VPN/Strongswan Pools
53 - 10.0.59.0/25 ISP VPN/Strongswan Pool (NWC)
54 - 10.0.59.128/25 ISP VPN/Strongswan Pool (CWC)
55 - 209.112.142.48/28 ISP VPN/Strongswan Servers Public
56 - 209.112.142.48/29 ISP VPN/Strongswan Servers Public (NWC)
57 - 209.112.142.56/29 ISP VPN/Strongswan Servers Public (CWC)
58
59
60Hosts
61=====
62
63Virtual Addresses
64-----------------
65
66 * 209.112.142.10 - vpn.nwc.acsalaska.net
67 * 209.112.142.11 - vpn.cwc.acsalaska.net
68 * 209.112.142.12 - vpn.acsalaska.net
69
70
71Routers
72-------
73
74 * mx1.nwc
75 - xe-11/3/1.2080: 10.0.49.206/28
76 - xe-11/3/1.2081: 209.112.142.55/29
77
78 * mx1.cwc
79 - xe-11/3/1.2080: 10.0.49.222/28
80 - xe-11/3/1.2081: 209.112.142.62/29
81
82
83Servers (NWC)
84-------------
85
86 * vpn20.prv.nwc
87 - Alias: vpn20.mwc.acsalaska.net
88 - Parent: TBD
89 - Network: VLAN 2080: 10.0.49.193/28 GW 10.0.49.206
90
91 * vpn21.prv.nwc
92 - Alias: vpn21.nwc.acsalaska.net
93 - Parent: TBD
94 - Network: VLAN 2080: 10.0.49.194/28 GW 10.0.49.206
95
96 * vpnvrrp20.prv.nwc
97 - Parent: vpn20.prv.nwc/vpn21.prv.nwc
98 - Network: VLAN 2080: 10.0.49.194/28 GW 10.0.49.206
99
100 * vpnvrrp20.nwc
101 - Parent: vpn20.prv.nwc/vpn21.prv.nwc
102 - Network: VLAN 2081: 209.112.142.49/29 GW 209.112.142.55
103
104
105Servers (CWC)
106-------------
107
108 * vpn30.prv.cwc
109 - Alias: vpn30.cwc.acsalaska.net
110 - Parent: xen18.prv.cwc/xen19.prv.cwc
111 - Network: VLAN 2080: 10.0.49.209/28 GW 10.0.49.222
112
113 * vpn31.prv.cwc
114 - Alias: vpn31.cwc.acsalaska.net
115 - Parent: xen19.prv.cwc/xen18.prv.cwc
116 - Network: VLAN 2080: 10.0.49.210/28 GW 10.0.49.222
117
118 * vpnvrrp30.prv.cwc
119 - Parent: vpn30.prv.cwc/vpn31.prv.cwc
120 - Network: VLAN 2080: 10.0.49.213/28 GW 10.0.49.222
121
122 * vpnvrrp30.cwc
123 - Parent: vpn30.prv.cwc/vpn31.prv.cwc
124 - Network: VLAN 2081: 209.112.142.58/29 GW 209.112.142.62
125
126