diff options
| author | David M. Syzdek <david@syzdek.net> | 2022-05-04 18:13:21 -0800 |
|---|---|---|
| committer | David M. Syzdek <david@syzdek.net> | 2022-05-04 18:13:21 -0800 |
| commit | e2f92e621e46462e0aa47ebbed0e42f54d9184ca (patch) | |
| tree | 692d72797aab155c3d0f70ad1e853e4e0de92564 | |
| parent | 717625aebc09089c82f3c87fdd1601bf54d8bdd9 (diff) | |
| download | scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.gz scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.bz2 scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.xz scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.zip | |
Adding lecvpn notes
| -rw-r--r-- | notes/projects/strongswan/lecvpn.md | 96 |
1 files changed, 96 insertions, 0 deletions
diff --git a/notes/projects/strongswan/lecvpn.md b/notes/projects/strongswan/lecvpn.md new file mode 100644 index 0000000..b20e4bc --- /dev/null +++ b/notes/projects/strongswan/lecvpn.md | |||
| @@ -0,0 +1,96 @@ | |||
| 1 | |||
| 2 | LEC VPN Subnets | ||
| 3 | =============== | ||
| 4 | |||
| 5 | * 172.25.242.64/64 - NWC LEC Mgmt VPN Subnet | ||
| 6 | - 172.25.242.64/29 - Servers | ||
| 7 | - 172.25.242.72/29 - User Pool | ||
| 8 | - 172.25.242.80/28 - Site to Site Pool | ||
| 9 | - 172.25.242.96/27 - Reserved | ||
| 10 | |||
| 11 | * 172.25.243.64/26 - CWC LEC Mgmt VPN Subnet | ||
| 12 | - 172.25.243.64/29 - Servers | ||
| 13 | - 172.25.243.72/29 - User Pool | ||
| 14 | - 172.25.243.80/28 - Site to Site Pool | ||
| 15 | - 172.25.243.96/27 - Reserved | ||
| 16 | |||
| 17 | * 2001:4948:0:2::d170:a012/127 - NWC P2P | ||
| 18 | * 2001:4948:0:2::d170:a010/127 - CWC P2P | ||
| 19 | * fdac:4aca:1cf6:188::/64 - NWC Servers (VRRP) | ||
| 20 | * fdac:4aca:1cf6:18a::/64 - CWC Servers (VRRP) | ||
| 21 | |||
| 22 | |||
| 23 | LEC VPN Service Addresses | ||
| 24 | =============== | ||
| 25 | |||
| 26 | * lecvpndev.acsalaska.net (NWC) | ||
| 27 | - Address: 209.112.160.0 | ||
| 28 | - Address: 2001:4948:d:0::189 | ||
| 29 | |||
| 30 | * lecvpn.acsalaska.net (CWC) | ||
| 31 | - Address: 209.112.160.1 | ||
| 32 | - Address: 2001:4948:d:0::187 | ||
| 33 | |||
| 34 | * lecvpn.nwc.acsalaska.net. (NWC) | ||
| 35 | - Address: 209.112.160.6 | ||
| 36 | - Address: 2001:4948:d:0::188 | ||
| 37 | |||
| 38 | * lecvpn.cwc.acsalaska.net. (CWC) | ||
| 39 | - Address: 209.112.160.7 | ||
| 40 | - Address: 2001:4948:d:0::18a | ||
| 41 | |||
| 42 | |||
| 43 | LEC VPN Servers | ||
| 44 | =============== | ||
| 45 | |||
| 46 | * NWC Cluster | ||
| 47 | * lecvpn20.prv.nwc | ||
| 48 | - Hypervisor: xen62.prv.nwc/xen63.prv.nwc | ||
| 49 | - Specs: 2 vcpu; 4096 MB RAM; Pool-node2; | ||
| 50 | - Network: eth1.2088 | ||
| 51 | - Network: eth1.2089 172.25.242.65/29 via 172.25.242.70 | ||
| 52 | - Network: eth1.2089 fdac:4aca:1cf6:188::65/64 | ||
| 53 | |||
| 54 | * lecvpn21.prv.nwc | ||
| 55 | - Hypervisor: xen63.prv.nwc/xen62.prv.nwc | ||
| 56 | - Specs: 2 vcpu; 4096 MB RAM; Pool-node2; | ||
| 57 | - Network: eth1.2088 | ||
| 58 | - Network: eth1.2089 172.25.242.66/29 via 172.25.242.70 | ||
| 59 | - Network: eth1.2089 fdac:4aca:1cf6:188::66/64 | ||
| 60 | |||
| 61 | * lecvpnvrrp20.prv.nwc | ||
| 62 | - Network: eth1.2088 209.112.160.17/31 via 209.112.160.16 | ||
| 63 | - Network: eth1.2088 2001:4948:0:2::d170:a011/127 | ||
| 64 | - Network: eth1.2089 172.25.242.69/29 | ||
| 65 | - Network: eth1.2089 fdac:4aca:1cf6:188::69/64 | ||
| 66 | |||
| 67 | * CWC Cluster | ||
| 68 | * lecvpn30.prv.cwc | ||
| 69 | - Hypervisor: xen16.prv.cwc/xen17.prv.cwc | ||
| 70 | - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; | ||
| 71 | - Network: eth1.2088 | ||
| 72 | - Network: eth1.2089 172.25.243.65/29 via 172.25.243.70 | ||
| 73 | - Network: eth1.2089 fdac:4aca:1cf6:18a::65/64 | ||
| 74 | |||
| 75 | * lecvpn31.prv.cwc | ||
| 76 | - Hypervisor: xen17.prv.cwc/xen16.prv.cwc | ||
| 77 | - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; | ||
| 78 | - Network: eth1.2088 | ||
| 79 | - Network: eth1.2089 172.25.243.66/29 via 172.25.243.70 | ||
| 80 | - Network: eth1.2089 fdac:4aca:1cf6:18a::66/64 | ||
| 81 | |||
| 82 | * lecvpnvrrp30.prv.cwc | ||
| 83 | - Network: eth1.2088 209.112.160.19/31 via 209.112.160.18 | ||
| 84 | - Network: eth1.2088 2001:4948:0:2::d170:a013/127 | ||
| 85 | - Network: eth1.2089 172.25.243.69/29 | ||
| 86 | - Network: eth1.2089 fdac:4aca:1cf6:18a::69/64 | ||
| 87 | |||
| 88 | |||
| 89 | Configuration URLs | ||
| 90 | ================== | ||
| 91 | |||
| 92 | * https://configs.prv.acsalaska.net/pub/configs/vpn/lec/firewall.git | ||
| 93 | * https://configs.prv.acsalaska.net/pub/configs/vpn/lec/keepalived.git | ||
| 94 | * https://configs.prv.acsalaska.net/pub/configs/vpn/strongswan.git | ||
| 95 | * https://configs.prv.acsalaska.net/pub/configs/vpn/swanctl.git | ||
| 96 | |||