From a6690811eab31e1a5afca00de6e1f39703bf5eb3 Mon Sep 17 00:00:00 2001 From: "David M. Syzdek" Date: Wed, 11 May 2022 00:54:53 -0800 Subject: adding initial mgmtvpn.md --- notes/projects/strongswan/mgmtvpn.md | 114 +++++++++++++++++++++++++++++++++++ 1 file changed, 114 insertions(+) create mode 100644 notes/projects/strongswan/mgmtvpn.md diff --git a/notes/projects/strongswan/mgmtvpn.md b/notes/projects/strongswan/mgmtvpn.md new file mode 100644 index 0000000..44aa786 --- /dev/null +++ b/notes/projects/strongswan/mgmtvpn.md @@ -0,0 +1,114 @@ +Equipment Management VPN Infrastructure +======================================= + +Networks and VLANs +------------------ + + * VLAN + - 2086 - public uplink + - 2087 - private uplink + + * 10.0.50.128/27 - Equipment Management VPN Servers + - 10.0.50.128/28 - Equipment Management VPN Servers (NWC) + - 10.0.50.144/28 - Equipment Management VPN Servers (CWC) + + * 209.112.160.56/29 - Service Addresses + + * 209.112.160.64/28 - Public Uplinks + - 209.112.160.64/29 - NWC + - 209.112.160.72/29 - CWC + + * 2001:4948:d::90/124 - Service Addresses + + * 2001:4948:d:90::/63 - Public Uplinks + - 2001:4948:d:90::/64 - NWC + - 2001:4948:d:91::/64 - NWC + + * fdac:4aca:1cf6:90::/63 - VRRP Network + - fdac:4aca:1cf6:90::/64 - NWC + - fdac:4aca:1cf6:91::/64 - CWC + + +Service Addresses +----------------- + + * mgmtvpn1.nwc.acsalaska.net. (NWC) + - Address: 209.112.160.56 + - Address: 2001:4948:d::90/128 + + * mgmtvpn2.nwc.acsalaska.net. (NWC) + - Address: 209.112.160.57 + - Address: 2001:4948:d::91/128 + + * mgmtvpn1.cwc.acsalaska.net. (CWC) + - Address: 209.112.160.60 + - Address: 2001:4948:d::94/128 + + * mgmtvpn2.cwc.acsalaska.net. (CWC) + - Address: 209.112.160.61 + - Address: 2001:4948:d::95/128 + + +VRRP Addresses +-------------- + + * NWC Cluster + * mgmtvpnvrrp20.prv.nwc + - Network: eth1.2086 209.112.160.65/29 via 209.112.160.70 + - Network: eth1.2086 2001:4948:d:90::65/64 via 2001:4948:d:90::1 + - Network: eth1.2087 10.0.50.141/28 + - Network: eth1.2087 fdac:4aca:1cf6:90::141/64 + + * mgmtvpnvrrp21.prv.nwc + - Network: eth1.2086 209.112.160.66/29 via 209.112.160.70 + - Network: eth1.2086 2001:4948:d:90::66/64 via 2001:4948:d:90::1 + - Network: eth1.2087 10.0.50.140/28 + - Network: eth1.2087 fdac:4aca:1cf6:90::140/64 + + * CWC Cluster + * mgmtvpnvrrp30.prv.cwc + - Network: eth1.2086 209.112.160.73/29 via 209.112.160.70 + - Network: eth1.2086 2001:4948:d:91::73/64 via 2001:4948:d:91::1 + - Network: eth1.2087 10.0.50.157/28 + - Network: eth1.2087 fdac:4aca:1cf6:91::157/64 + + * mgmtvpnvrrp31.prv.cwc + - Network: eth1.2086 209.112.160.74/29 via 209.112.160.70 + - Network: eth1.2086 2001:4948:d:91::74/64 via 2001:4948:d:91::1 + - Network: eth1.2087 10.0.50.156/28 + - Network: eth1.2087 fdac:4aca:1cf6:91::156/64 + + +Servers +------- + + * NWC Cluster + * mgmtvpn20.prv.nwc + - Hypervisor: xen62.prv.nwc/xen63.prv.nwc + - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; + - Network: eth1.2086 n/a + - Network: eth1.2087 10.0.50.129/28 via 10.0.50.142 + - Network: eth1.2087 fdac:4aca:1cf6:90::129/64 + + * mgmtvpn21.prv.nwc + - Hypervisor: xen63.prv.nwc/xen62.prv.nwc + - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; + - Network: eth1.2086 n/a + - Network: eth1.2087 10.0.50.130/28 via 10.0.50.142 + - Network: eth1.2087 fdac:4aca:1cf6:90::130/64 + + * CWC Cluster + * mgmtvpn30.prv.cwc + - Hypervisor: xen17.prv.cwc/xen16.prv.cwc + - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; + - Network: eth1.2086 n/a + - Network: eth1.2087 10.0.50.145/28 via 10.0.50.158 + - Network: eth1.2087 fdac:4aca:1cf6:91::145/64 + + * mgmtvpn31.prv.cwc + - Hypervisor: xen16.prv.cwc/xen17.prv.cwc + - Specs: 2 vcpu; 4096 MB RAM; Pool-node1; + - Network: eth1.2086 n/a + - Network: eth1.2087 10.0.50.146/28 via 10.0.50.158 + - Network: eth1.2087 fdac:4aca:1cf6:91::146/64 + -- cgit v1.2.3