aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
Diffstat
-rw-r--r--notes/projects/strongswan/mgmtvpn.md114
1 files changed, 114 insertions, 0 deletions
diff --git a/notes/projects/strongswan/mgmtvpn.md b/notes/projects/strongswan/mgmtvpn.md
new file mode 100644
index 0000000..44aa786
--- /dev/null
+++ b/notes/projects/strongswan/mgmtvpn.md
@@ -0,0 +1,114 @@
1Equipment Management VPN Infrastructure
2=======================================
3
4Networks and VLANs
5------------------
6
7 * VLAN
8 - 2086 - public uplink
9 - 2087 - private uplink
10
11 * 10.0.50.128/27 - Equipment Management VPN Servers
12 - 10.0.50.128/28 - Equipment Management VPN Servers (NWC)
13 - 10.0.50.144/28 - Equipment Management VPN Servers (CWC)
14
15 * 209.112.160.56/29 - Service Addresses
16
17 * 209.112.160.64/28 - Public Uplinks
18 - 209.112.160.64/29 - NWC
19 - 209.112.160.72/29 - CWC
20
21 * 2001:4948:d::90/124 - Service Addresses
22
23 * 2001:4948:d:90::/63 - Public Uplinks
24 - 2001:4948:d:90::/64 - NWC
25 - 2001:4948:d:91::/64 - NWC
26
27 * fdac:4aca:1cf6:90::/63 - VRRP Network
28 - fdac:4aca:1cf6:90::/64 - NWC
29 - fdac:4aca:1cf6:91::/64 - CWC
30
31
32Service Addresses
33-----------------
34
35 * mgmtvpn1.nwc.acsalaska.net. (NWC)
36 - Address: 209.112.160.56
37 - Address: 2001:4948:d::90/128
38
39 * mgmtvpn2.nwc.acsalaska.net. (NWC)
40 - Address: 209.112.160.57
41 - Address: 2001:4948:d::91/128
42
43 * mgmtvpn1.cwc.acsalaska.net. (CWC)
44 - Address: 209.112.160.60
45 - Address: 2001:4948:d::94/128
46
47 * mgmtvpn2.cwc.acsalaska.net. (CWC)
48 - Address: 209.112.160.61
49 - Address: 2001:4948:d::95/128
50
51
52VRRP Addresses
53--------------
54
55 * NWC Cluster
56 * mgmtvpnvrrp20.prv.nwc
57 - Network: eth1.2086 209.112.160.65/29 via 209.112.160.70
58 - Network: eth1.2086 2001:4948:d:90::65/64 via 2001:4948:d:90::1
59 - Network: eth1.2087 10.0.50.141/28
60 - Network: eth1.2087 fdac:4aca:1cf6:90::141/64
61
62 * mgmtvpnvrrp21.prv.nwc
63 - Network: eth1.2086 209.112.160.66/29 via 209.112.160.70
64 - Network: eth1.2086 2001:4948:d:90::66/64 via 2001:4948:d:90::1
65 - Network: eth1.2087 10.0.50.140/28
66 - Network: eth1.2087 fdac:4aca:1cf6:90::140/64
67
68 * CWC Cluster
69 * mgmtvpnvrrp30.prv.cwc
70 - Network: eth1.2086 209.112.160.73/29 via 209.112.160.70
71 - Network: eth1.2086 2001:4948:d:91::73/64 via 2001:4948:d:91::1
72 - Network: eth1.2087 10.0.50.157/28
73 - Network: eth1.2087 fdac:4aca:1cf6:91::157/64
74
75 * mgmtvpnvrrp31.prv.cwc
76 - Network: eth1.2086 209.112.160.74/29 via 209.112.160.70
77 - Network: eth1.2086 2001:4948:d:91::74/64 via 2001:4948:d:91::1
78 - Network: eth1.2087 10.0.50.156/28
79 - Network: eth1.2087 fdac:4aca:1cf6:91::156/64
80
81
82Servers
83-------
84
85 * NWC Cluster
86 * mgmtvpn20.prv.nwc
87 - Hypervisor: xen62.prv.nwc/xen63.prv.nwc
88 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
89 - Network: eth1.2086 n/a
90 - Network: eth1.2087 10.0.50.129/28 via 10.0.50.142
91 - Network: eth1.2087 fdac:4aca:1cf6:90::129/64
92
93 * mgmtvpn21.prv.nwc
94 - Hypervisor: xen63.prv.nwc/xen62.prv.nwc
95 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
96 - Network: eth1.2086 n/a
97 - Network: eth1.2087 10.0.50.130/28 via 10.0.50.142
98 - Network: eth1.2087 fdac:4aca:1cf6:90::130/64
99
100 * CWC Cluster
101 * mgmtvpn30.prv.cwc
102 - Hypervisor: xen17.prv.cwc/xen16.prv.cwc
103 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
104 - Network: eth1.2086 n/a
105 - Network: eth1.2087 10.0.50.145/28 via 10.0.50.158
106 - Network: eth1.2087 fdac:4aca:1cf6:91::145/64
107
108 * mgmtvpn31.prv.cwc
109 - Hypervisor: xen16.prv.cwc/xen17.prv.cwc
110 - Specs: 2 vcpu; 4096 MB RAM; Pool-node1;
111 - Network: eth1.2086 n/a
112 - Network: eth1.2087 10.0.50.146/28 via 10.0.50.158
113 - Network: eth1.2087 fdac:4aca:1cf6:91::146/64
114