cwchristerw/tjas-infra
1
0
Fork 0
mirror of https://github.com/cwchristerw/tjas-infra synced 2025-09-01 08:59:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: cwchristerw:2b671f8a6d81fdb3c59d4ae13f47c25f3feb5a74
Branches Tags
cwchristerw:master
...
compare: cwchristerw:5008c1be97eb52db9c0ac642471cf3f52a6ef657
Branches Tags
cwchristerw:master

2 Commits
2b671f8a6d ... 5008c1be97

Author SHA1 Message Date
Christer Warén
5008c1be97 Allow DHCP & DNS from FirewallD 2025-08-26 12:49:41 +03:00
Christer Warén
56b53fdc5b Update network device configurations to INSTRUCTIONS.md 2025-08-26 12:49:22 +03:00
2 changed files with 209 additions and 9 deletions
Expand all files Collapse all files

216
INSTRUCTIONS.md
View File

@@ -14,12 +14,12 @@
r1.net.tjas r1.net.tjas
``` ```
!
version 12.4 version 12.4
service timestamps debug datetime msec service timestamps debug datetime msec
service timestamps log datetime msec service timestamps log datetime msec
no service password-encryption no service password-encryption
! !
!
hostname r1.net.tjas hostname r1.net.tjas
! !
boot-start-marker boot-start-marker
@@ -62,27 +62,35 @@ interface FastEthernet0/1.10
description "TINU - INTERNET" description "TINU - INTERNET"
encapsulation dot1Q 10 encapsulation dot1Q 10
ip address 192.168.1.1 255.255.255.224 ip address 192.168.1.1 255.255.255.224
ip access-group 10 out
ip helper-address 192.168.2.10 ip helper-address 192.168.2.10
ip nat inside
no snmp trap link-status no snmp trap link-status
! !
interface FastEthernet0/1.20 interface FastEthernet0/1.20
description "JUVA - INTRA" description "JUVA - INTRA"
encapsulation dot1Q 20 encapsulation dot1Q 20
ip address 192.168.2.1 255.255.255.224 ip address 192.168.2.1 255.255.255.224
ip access-group 20 out
ip helper-address 192.168.2.10 ip helper-address 192.168.2.10
ip nat inside
no snmp trap link-status no snmp trap link-status
! !
interface FastEthernet0/1.30 interface FastEthernet0/1.30
description "AITO - TOIMISTO" description "AITO - TOIMISTO"
encapsulation dot1Q 30 encapsulation dot1Q 30
ip address 192.168.3.1 255.255.255.224 ip address 192.168.3.1 255.255.255.224
ip access-group 30 out
ip helper-address 192.168.2.10 ip helper-address 192.168.2.10
ip nat inside
no snmp trap link-status no snmp trap link-status
! !
interface FastEthernet0/1.69 interface FastEthernet0/1.69
description "SIVE - HALLINTA" description "SIVE - HALLINTA"
encapsulation dot1Q 69 encapsulation dot1Q 69
ip address 192.168.69.1 255.255.255.192 ip address 192.168.69.1 255.255.255.192
ip access-group 69 in
ip access-group 69 out
ip helper-address 192.168.69.20 ip helper-address 192.168.69.20
no snmp trap link-status no snmp trap link-status
! !
@@ -94,10 +102,43 @@ interface GigabitEthernet0/0/0
ip classless ip classless
! !
ip http server ip http server
ip nat inside source list 1 interface FastEthernet0/0 overload
! !
access-list 1 permit 192.168.1.0 0.0.0.31
access-list 1 permit 192.168.2.0 0.0.0.31
access-list 1 permit 192.168.3.0 0.0.0.31
access-list 10 deny 192.168.0.0 0.0.255.255
access-list 10 permit any
access-list 20 permit 192.168.2.0 0.0.0.31
access-list 20 deny 192.168.0.0 0.0.255.255
access-list 20 permit any
access-list 30 permit 192.168.2.10
access-list 30 permit 192.168.3.0 0.0.0.31
access-list 30 deny 192.168.0.0 0.0.255.255
access-list 30 permit any
access-list 69 permit 192.168.69.0 0.0.0.63
! !
control-plane control-plane
! !
banner motd ^C
.-') _ ('-. .-')
( OO) ) ( OO ).-. ( OO ).
/ '._ ,--. / . --. /(_)---\_)
|'--...__) .-')| ,| | \-. \ / _ |
'--. .--'( OO |(_|.-'-' | |\ :` `.
| | | `-'| | \| |_.' | '..`''.)
| | ,--. | | | .-. |.-._) \
| | | '-' / | | | |\ /
`--' `-----' `--' `--' `-----'
PVJJK 1.VOS NIINISALO
r1.net.tjas
^C
! !
line con 0 line con 0
line aux 0 line aux 0
@@ -113,11 +154,13 @@ end
s1.net.tjas s1.net.tjas
``` ```
hostname "s1.net.tjas" hostname "s1.net.tjas"
ip default-gateway 192.168.1.1
snmp-server community "public" Unrestricted snmp-server community "public" Unrestricted
vlan 1 vlan 1
name "DEFAULT_VLAN" name "DEFAULT_VLAN"
untagged 1-52 untagged 4-52
ip address dhcp-bootp ip address dhcp-bootp
no untagged 1-3
exit exit
vlan 10 vlan 10
name "TINU" name "TINU"
@@ -140,6 +183,24 @@ vlan 69
tagged 1-3 tagged 1-3
exit exit
ip authorized-managers 192.168.69.20 255.255.255.255 ip authorized-managers 192.168.69.20 255.255.255.255
banner motd "
.-') _ ('-. .-')
( OO) ) ( OO ).-. ( OO ).
/ '._ ,--. / . --. /(_)---\_)
|'--...__) .-')| ,| | \-. \ / _ |
'--. .--'( OO |(_|.-'-' | |\ :` `.
| | | `-'| | \| |_.' | '..`''.)
| | ,--. | | | .-. |.-._) \
| | | '-' / | | | |\ /
`--' `-----' `--' `--' `-----'
PVJJK 1.VOS NIINISALO
s1.net.tjas
"
ip ssh ip ssh
password manager password manager
``` ```
@@ -147,16 +208,83 @@ password manager
s2.net.tjas s2.net.tjas
``` ```
hostname "s2.net.tjas" hostname "s2.net.tjas"
interface 3
disable
exit
interface 4
disable
exit
interface 5
disable
exit
interface 6
disable
exit
interface 7
disable
exit
interface 8
disable
exit
interface 9
disable
exit
interface 10
disable
exit
interface 11
disable
exit
interface 12
disable
exit
interface 13
disable
exit
interface 14
disable
exit
interface 15
disable
exit
interface 16
disable
exit
interface 17
disable
exit
interface 18
disable
exit
interface 19
disable
exit
interface 20
disable
exit
interface 21
disable
exit
interface 22
disable
exit
interface 23
disable
exit
interface 24
disable
exit
ip default-gateway 192.168.2.1
snmp-server community "public" Unrestricted snmp-server community "public" Unrestricted
vlan 1 vlan 1
name "DEFAULT_VLAN" name "DEFAULT_VLAN"
untagged 25-28 untagged 3-28
ip address dhcp-bootp ip address dhcp-bootp
no untagged 1-24 no untagged 1-2
exit exit
vlan 20 vlan 20
name "JUVA" name "JUVA"
untagged 2-24 untagged 3-24
ip address 192.168.2.2 255.255.255.224 ip address 192.168.2.2 255.255.255.224
tagged 1-2 tagged 1-2
exit exit
@@ -165,7 +293,25 @@ vlan 69
ip address 192.168.69.12 255.255.255.192 ip address 192.168.69.12 255.255.255.192
tagged 1-2 tagged 1-2
exit exit
ip authorized-managers 192.168.69.20 255.255.255.255 ip authorized-managers 192.168.69.20
banner motd "
.-') _ ('-. .-')
( OO) ) ( OO ).-. ( OO ).
/ '._ ,--. / . --. /(_)---\_)
|'--...__) .-')| ,| | \-. \ / _ |
'--. .--'( OO |(_|.-'-' | |\ :` `.
| | | `-'| | \| |_.' | '..`''.)
| | ,--. | | | .-. |.-._) \
| | | '-' / | | | |\ /
`--' `-----' `--' `--' `-----'
PVJJK 1.VOS NIINISALO
s2.net.tjas
"
ip ssh ip ssh
password manager password manager
``` ```
@@ -173,6 +319,40 @@ password manager
s3.net.tjas s3.net.tjas
``` ```
hostname "s3.net.tjas" hostname "s3.net.tjas"
interface 2
disable
exit
interface 3
disable
exit
interface 4
disable
exit
interface 5
disable
exit
interface 6
disable
exit
interface 7
disable
exit
interface 8
disable
exit
interface 9
disable
exit
interface 10
disable
exit
interface 11
disable
exit
interface 12
disable
exit
ip default-gateway 192.168.3.1
snmp-server community "public" Unrestricted snmp-server community "public" Unrestricted
vlan 1 vlan 1
name "DEFAULT_VLAN" name "DEFAULT_VLAN"
@@ -182,9 +362,9 @@ vlan 1
exit exit
vlan 30 vlan 30
name "AITO" name "AITO"
untagged 13-24
ip address 192.168.3.2 255.255.255.224 ip address 192.168.3.2 255.255.255.224
tagged 1,13-24 tagged 1
untagged
exit exit
vlan 69 vlan 69
name "SIVE" name "SIVE"
@@ -192,7 +372,25 @@ vlan 69
ip address 192.168.69.13 255.255.255.192 ip address 192.168.69.13 255.255.255.192
tagged 1 tagged 1
exit exit
ip authorized-managers 192.168.69.20 255.255.255.255 ip authorized-managers 192.168.69.20
banner motd "
.-') _ ('-. .-')
( OO) ) ( OO ).-. ( OO ).
/ '._ ,--. / . --. /(_)---\_)
|'--...__) .-')| ,| | \-. \ / _ |
'--. .--'( OO |(_|.-'-' | |\ :` `.
| | | `-'| | \| |_.' | '..`''.)
| | ,--. | | | .-. |.-._) \
| | | '-' / | | | |\ /
`--' `-----' `--' `--' `-----'
PVJJK 1.VOS NIINISALO
s3.net.tjas
"
ip ssh ip ssh
password manager password manager
``` ```

2
tasks/installer.yml
View File

@@ -133,6 +133,8 @@
- http - http
- https - https
- ssh - ssh
- dhcp
- dns
loop: "{{ services }}" loop: "{{ services }}"
loop_control: loop_control:
label: "{{ service }}" label: "{{ service }}"