aboutsummaryrefslogtreecommitdiffstats
path: root/notes
diff options
context:
space:
mode:
authorDavid M. Syzdek <david@syzdek.net>2022-05-04 18:13:21 -0800
committerDavid M. Syzdek <david@syzdek.net>2022-05-04 18:13:21 -0800
commite2f92e621e46462e0aa47ebbed0e42f54d9184ca (patch)
tree692d72797aab155c3d0f70ad1e853e4e0de92564 /notes
parent717625aebc09089c82f3c87fdd1601bf54d8bdd9 (diff)
downloadscratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.gz
scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.bz2
scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.tar.xz
scratchpad-e2f92e621e46462e0aa47ebbed0e42f54d9184ca.zip
Adding lecvpn notes
Diffstat (limited to 'notes')
-rw-r--r--notes/projects/strongswan/lecvpn.md96
1 files changed, 96 insertions, 0 deletions
diff --git a/notes/projects/strongswan/lecvpn.md b/notes/projects/strongswan/lecvpn.md
new file mode 100644
index 0000000..b20e4bc
--- /dev/null
+++ b/notes/projects/strongswan/lecvpn.md
@@ -0,0 +1,96 @@
1
2LEC VPN Subnets
3===============
4
5 * 172.25.242.64/64 - NWC LEC Mgmt VPN Subnet
6 - 172.25.242.64/29 - Servers
7 - 172.25.242.72/29 - User Pool
8 - 172.25.242.80/28 - Site to Site Pool
9 - 172.25.242.96/27 - Reserved
10
11 * 172.25.243.64/26 - CWC LEC Mgmt VPN Subnet
12 - 172.25.243.64/29 - Servers
13 - 172.25.243.72/29 - User Pool
14 - 172.25.243.80/28 - Site to Site Pool
15 - 172.25.243.96/27 - Reserved
16
17 * 2001:4948:0:2::d170:a012/127 - NWC P2P
18 * 2001:4948:0:2::d170:a010/127 - CWC P2P
19 * fdac:4aca:1cf6:188::/64 - NWC Servers (VRRP)
20 * fdac:4aca:1cf6:18a::/64 - CWC Servers (VRRP)
21
22
23LEC VPN Service Addresses
24===============
25
26 * lecvpndev.acsalaska.net (NWC)
27 - Address: 209.112.160.0
28 - Address: 2001:4948:d:0::189
29
30 * lecvpn.acsalaska.net (CWC)
31 - Address: 209.112.160.1
32 - Address: 2001:4948:d:0::187
33
34 * lecvpn.nwc.acsalaska.net. (NWC)
35 - Address: 209.112.160.6
36 - Address: 2001:4948:d:0::188
37
38 * lecvpn.cwc.acsalaska.net. (CWC)
39 - Address: 209.112.160.7
40 - Address: 2001:4948:d:0::18a
41
42
43LEC VPN Servers
44===============
45
46 * NWC Cluster
47 * lecvpn20.prv.nwc
48 - Hypervisor: xen62.prv.nwc/xen63.prv.nwc
49 - Specs: 2 vcpu; 4096 MB RAM; Pool-node2;
50 - Network: eth1.2088
51 - Network: eth1.2089 172.25.242.65/29 via 172.25.242.70
52 - Network: eth1.2089 fdac:4aca:1cf6:188::65/64
53
54 * lecvpn21.prv.nwc
55 - Hypervisor: xen63.prv.nwc/xen62.prv.nwc
56 - Specs: 2 vcpu; 4096 MB RAM; Pool-node2;
57 - Network: eth1.2088
58 - Network: eth1.2089 172.25.242.66/29 via 172.25.242.70
59 - Network: eth1.2089 fdac:4aca:1cf6:188::66/64
60
61 * lecvpnvrrp20.prv.nwc
62 - Network: eth1.2088 209.112.160.17/31 via 209.112.160.16
63 - Network: eth1.2088 2001:4948:0:2::d170:a011/127
64 - Network: eth1.2089 172.25.242.69/29
65 - Network: eth1.2089 fdac:4aca:1cf6:188::69/64
66
67 * CWC Cluster
68 * lecvpn30.prv.cwc
69 - Hypervisor: xen16.prv.cwc/xen17.prv.cwc
70 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
71 - Network: eth1.2088
72 - Network: eth1.2089 172.25.243.65/29 via 172.25.243.70
73 - Network: eth1.2089 fdac:4aca:1cf6:18a::65/64
74
75 * lecvpn31.prv.cwc
76 - Hypervisor: xen17.prv.cwc/xen16.prv.cwc
77 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
78 - Network: eth1.2088
79 - Network: eth1.2089 172.25.243.66/29 via 172.25.243.70
80 - Network: eth1.2089 fdac:4aca:1cf6:18a::66/64
81
82 * lecvpnvrrp30.prv.cwc
83 - Network: eth1.2088 209.112.160.19/31 via 209.112.160.18
84 - Network: eth1.2088 2001:4948:0:2::d170:a013/127
85 - Network: eth1.2089 172.25.243.69/29
86 - Network: eth1.2089 fdac:4aca:1cf6:18a::69/64
87
88
89Configuration URLs
90==================
91
92 * https://configs.prv.acsalaska.net/pub/configs/vpn/lec/firewall.git
93 * https://configs.prv.acsalaska.net/pub/configs/vpn/lec/keepalived.git
94 * https://configs.prv.acsalaska.net/pub/configs/vpn/strongswan.git
95 * https://configs.prv.acsalaska.net/pub/configs/vpn/swanctl.git
96