aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
Diffstat
-rw-r--r--notes/projects/strongswan/mgmtvpn.md59
1 files changed, 37 insertions, 22 deletions
diff --git a/notes/projects/strongswan/mgmtvpn.md b/notes/projects/strongswan/mgmtvpn.md
index 44aa786..a7773b6 100644
--- a/notes/projects/strongswan/mgmtvpn.md
+++ b/notes/projects/strongswan/mgmtvpn.md
@@ -5,50 +5,65 @@ Networks and VLANs
5------------------ 5------------------
6 6
7 * VLAN 7 * VLAN
8 - 2086 - public uplink 8 - Public Subnet: MGMT_VPN / 2086
9 - 2087 - private uplink 9 - Private Subnet: MGMT_VPN / 2087
10 10
11 * 10.0.50.128/27 - Equipment Management VPN Servers 11 * Networks
12 - 10.0.50.128/28 - Equipment Management VPN Servers (NWC) 12 - 10.0.50.128/27 Equipment Management VPN Servers
13 - 10.0.50.144/28 - Equipment Management VPN Servers (CWC) 13 - 10.0.50.128/28 Equipment Management VPN Servers (NWC)
14 - 10.0.50.144/28 Equipment Management VPN Servers (CWC)
14 15
15 * 209.112.160.56/29 - Service Addresses 16 - 209.112.160.56/29 Service Addresses
16 17
17 * 209.112.160.64/28 - Public Uplinks 18 - 209.112.160.64/28 Public Uplinks
18 - 209.112.160.64/29 - NWC 19 - 209.112.160.64/29 Public Uplinks (NWC)
19 - 209.112.160.72/29 - CWC 20 - 209.112.160.72/29 Public Uplinks (CWC)
20 21
21 * 2001:4948:d::90/124 - Service Addresses 22 - 2001:4948:d::90/124 Service Addresses
22 23
23 * 2001:4948:d:90::/63 - Public Uplinks 24 - 2001:4948:d:90::/63 Public Uplinks
24 - 2001:4948:d:90::/64 - NWC 25 - 2001:4948:d:90::/64 Public Uplinks (NWC)
25 - 2001:4948:d:91::/64 - NWC 26 - 2001:4948:d:91::/64 Public Uplinks (CWC)
26 27
27 * fdac:4aca:1cf6:90::/63 - VRRP Network 28 - fdac:4aca:1cf6:90::/63 VRRP Network
28 - fdac:4aca:1cf6:90::/64 - NWC 29 - fdac:4aca:1cf6:90::/64 VRRP Network (NWC)
29 - fdac:4aca:1cf6:91::/64 - CWC 30 - fdac:4aca:1cf6:91::/64 VRRP Network (CWC)
30 31
31 32
32Service Addresses 33Service Addresses
33----------------- 34-----------------
34 35
35 * mgmtvpn1.nwc.acsalaska.net. (NWC) 36 * mgmtvpn1.nwc.acsalaska.net
36 - Address: 209.112.160.56 37 - Address: 209.112.160.56
37 - Address: 2001:4948:d::90/128 38 - Address: 2001:4948:d::90/128
38 39
39 * mgmtvpn2.nwc.acsalaska.net. (NWC) 40 * mgmtvpn2.nwc.acsalaska.net
40 - Address: 209.112.160.57 41 - Address: 209.112.160.57
41 - Address: 2001:4948:d::91/128 42 - Address: 2001:4948:d::91/128
42 43
43 * mgmtvpn1.cwc.acsalaska.net. (CWC) 44 * mgmtvpn1.cwc.acsalaska.net
44 - Address: 209.112.160.60 45 - Address: 209.112.160.60
45 - Address: 2001:4948:d::94/128 46 - Address: 2001:4948:d::94/128
46 47
47 * mgmtvpn2.cwc.acsalaska.net. (CWC) 48 * mgmtvpn2.cwc.acsalaska.net
48 - Address: 209.112.160.61 49 - Address: 209.112.160.61
49 - Address: 2001:4948:d::95/128 50 - Address: 2001:4948:d::95/128
50 51
51 52
53Routers
54-------
55
56 * mx1.nwc
57 - xe-11/3/1.2086: 209.112.160.70/29
58 - xe-11/3/1.2086: 2001:4948:d:90::1/64
59 - xe-11/3/1.2087: 10.0.50.142/28
60
61 * mx1.cwc
62 - xe-11/3/1.2086: 209.112.160.78/29
63 - xe-11/3/1.2086: 2001:4948:d:91::1/64
64 - xe-11/3/1.2087: 10.0.50.158/28
65
66
52VRRP Addresses 67VRRP Addresses
53-------------- 68--------------
54 69
@@ -67,13 +82,13 @@ VRRP Addresses
67 82
68 * CWC Cluster 83 * CWC Cluster
69 * mgmtvpnvrrp30.prv.cwc 84 * mgmtvpnvrrp30.prv.cwc
70 - Network: eth1.2086 209.112.160.73/29 via 209.112.160.70 85 - Network: eth1.2086 209.112.160.73/29 via 209.112.160.78
71 - Network: eth1.2086 2001:4948:d:91::73/64 via 2001:4948:d:91::1 86 - Network: eth1.2086 2001:4948:d:91::73/64 via 2001:4948:d:91::1
72 - Network: eth1.2087 10.0.50.157/28 87 - Network: eth1.2087 10.0.50.157/28
73 - Network: eth1.2087 fdac:4aca:1cf6:91::157/64 88 - Network: eth1.2087 fdac:4aca:1cf6:91::157/64
74 89
75 * mgmtvpnvrrp31.prv.cwc 90 * mgmtvpnvrrp31.prv.cwc
76 - Network: eth1.2086 209.112.160.74/29 via 209.112.160.70 91 - Network: eth1.2086 209.112.160.74/29 via 209.112.160.78
77 - Network: eth1.2086 2001:4948:d:91::74/64 via 2001:4948:d:91::1 92 - Network: eth1.2086 2001:4948:d:91::74/64 via 2001:4948:d:91::1
78 - Network: eth1.2087 10.0.50.156/28 93 - Network: eth1.2087 10.0.50.156/28
79 - Network: eth1.2087 fdac:4aca:1cf6:91::156/64 94 - Network: eth1.2087 fdac:4aca:1cf6:91::156/64