aboutsummaryrefslogtreecommitdiffstats
path: root/notes/projects/strongswan/mgmtvpn.md
blob: 44aa786a3bdd52ba90aa931c1e47cdb88a55c6f6 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
Equipment Management VPN Infrastructure
=======================================

Networks and VLANs
------------------

   * VLAN
     - 2086 - public uplink
     - 2087 - private uplink

   * 10.0.50.128/27 - Equipment Management VPN Servers
     - 10.0.50.128/28 - Equipment Management VPN Servers (NWC)
     - 10.0.50.144/28 - Equipment Management VPN Servers (CWC)

   * 209.112.160.56/29 - Service Addresses

   * 209.112.160.64/28 - Public Uplinks
     - 209.112.160.64/29 - NWC
     - 209.112.160.72/29 - CWC

   * 2001:4948:d::90/124 - Service Addresses

   * 2001:4948:d:90::/63 - Public Uplinks
     - 2001:4948:d:90::/64 - NWC
     - 2001:4948:d:91::/64 - NWC

   * fdac:4aca:1cf6:90::/63 - VRRP Network
     - fdac:4aca:1cf6:90::/64 - NWC
     - fdac:4aca:1cf6:91::/64 - CWC


Service Addresses
-----------------

   * mgmtvpn1.nwc.acsalaska.net. (NWC)
     - Address: 209.112.160.56
     - Address: 2001:4948:d::90/128

   * mgmtvpn2.nwc.acsalaska.net. (NWC)
     - Address: 209.112.160.57
     - Address: 2001:4948:d::91/128

   * mgmtvpn1.cwc.acsalaska.net. (CWC)
     - Address: 209.112.160.60
     - Address: 2001:4948:d::94/128

   * mgmtvpn2.cwc.acsalaska.net. (CWC)
     - Address: 209.112.160.61
     - Address: 2001:4948:d::95/128


VRRP Addresses
--------------

   * NWC Cluster
     * mgmtvpnvrrp20.prv.nwc
       - Network:    eth1.2086  209.112.160.65/29      via  209.112.160.70
       - Network:    eth1.2086  2001:4948:d:90::65/64  via  2001:4948:d:90::1
       - Network:    eth1.2087  10.0.50.141/28
       - Network:    eth1.2087  fdac:4aca:1cf6:90::141/64

     * mgmtvpnvrrp21.prv.nwc
       - Network:    eth1.2086  209.112.160.66/29      via  209.112.160.70
       - Network:    eth1.2086  2001:4948:d:90::66/64  via  2001:4948:d:90::1
       - Network:    eth1.2087  10.0.50.140/28
       - Network:    eth1.2087  fdac:4aca:1cf6:90::140/64

   * CWC Cluster
     * mgmtvpnvrrp30.prv.cwc
       - Network:    eth1.2086  209.112.160.73/29      via  209.112.160.70
       - Network:    eth1.2086  2001:4948:d:91::73/64  via  2001:4948:d:91::1
       - Network:    eth1.2087  10.0.50.157/28
       - Network:    eth1.2087  fdac:4aca:1cf6:91::157/64

     * mgmtvpnvrrp31.prv.cwc
       - Network:    eth1.2086  209.112.160.74/29      via  209.112.160.70
       - Network:    eth1.2086  2001:4948:d:91::74/64  via  2001:4948:d:91::1
       - Network:    eth1.2087  10.0.50.156/28
       - Network:    eth1.2087  fdac:4aca:1cf6:91::156/64


Servers
-------

   * NWC Cluster
     * mgmtvpn20.prv.nwc
       - Hypervisor: xen62.prv.nwc/xen63.prv.nwc
       - Specs:      2 vcpu; 4096 MB RAM; Pool-node1;
       - Network:    eth1.2086  n/a
       - Network:    eth1.2087  10.0.50.129/28  via  10.0.50.142
       - Network:    eth1.2087  fdac:4aca:1cf6:90::129/64

     * mgmtvpn21.prv.nwc
       - Hypervisor: xen63.prv.nwc/xen62.prv.nwc
       - Specs:      2 vcpu; 4096 MB RAM; Pool-node1;
       - Network:    eth1.2086  n/a
       - Network:    eth1.2087  10.0.50.130/28  via  10.0.50.142
       - Network:    eth1.2087  fdac:4aca:1cf6:90::130/64

   * CWC Cluster
     * mgmtvpn30.prv.cwc
       - Hypervisor: xen17.prv.cwc/xen16.prv.cwc
       - Specs:      2 vcpu; 4096 MB RAM; Pool-node1;
       - Network:    eth1.2086  n/a
       - Network:    eth1.2087  10.0.50.145/28  via  10.0.50.158
       - Network:    eth1.2087  fdac:4aca:1cf6:91::145/64

     * mgmtvpn31.prv.cwc
       - Hypervisor: xen16.prv.cwc/xen17.prv.cwc
       - Specs:      2 vcpu; 4096 MB RAM; Pool-node1;
       - Network:    eth1.2086  n/a
       - Network:    eth1.2087  10.0.50.146/28  via  10.0.50.158
       - Network:    eth1.2087  fdac:4aca:1cf6:91::146/64