This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
настройка_шлюза_в_классе [2020/09/25 10:30] val [Ubuntu] |
настройка_шлюза_в_классе [2020/11/28 18:01] (current) val [DNS] |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ===== ISP1 ===== | ===== ISP1 ===== | ||
| - | ==== FreeBSD/Ubuntu ==== | + | ==== FreeBSD/Debian/Ubuntu ==== |
| * Сменить пароль | * Сменить пароль | ||
| Line 78: | Line 78: | ||
| iptables -t nat -A POSTROUTING -s 172.16.1.254 -j ACCEPT | iptables -t nat -A POSTROUTING -s 172.16.1.254 -j ACCEPT | ||
| - | iptables -t nat -A POSTROUTING -s 172.16.1.0/24,192.168.0.0/16 -j SNAT --to-source 10.M.N.180 | + | iptables -t nat -A POSTROUTING -s 172.16.1.0/24,192.168.0.0/16 -j SNAT --to-source 10.M.N.178 |
| conntrack -F | conntrack -F | ||
| Line 94: | Line 94: | ||
| iface eth0 inet static | iface eth0 inet static | ||
| pre-up iptables-restore < /etc/iptables.rules | pre-up iptables-restore < /etc/iptables.rules | ||
| - | address 10.N.M.180 | + | address 10.N.M.178 |
| netmask 255.255.255.0 | netmask 255.255.255.0 | ||
| gateway 10.N.M.254 | gateway 10.N.M.254 | ||
| Line 102: | Line 102: | ||
| address 172.16.1.254 | address 172.16.1.254 | ||
| netmask 255.255.255.0 | netmask 255.255.255.0 | ||
| + | |||
| + | # up route add -net 192.168.1.0 netmask 255.255.255.0 gw 172.16.1.1 | ||
| + | # ... | ||
| + | # up route add -net 192.168.55.0 netmask 255.255.255.0 gw 172.16.1.55 | ||
| </code><code> | </code><code> | ||
| # cat route.bash | # cat route.bash | ||
| Line 108: | Line 112: | ||
| do | do | ||
| #route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i} | #route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i} | ||
| - | #echo up route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i} | + | #echo " " up route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i} |
| done | done | ||
| </code><code> | </code><code> | ||
| Line 160: | Line 164: | ||
| }; | }; | ||
| - | //For un4, msc | + | //For lin7 (depricate), msc (depricate) |
| zone "168.192.in-addr.arpa" { | zone "168.192.in-addr.arpa" { | ||
| type master; | type master; | ||
| Line 167: | Line 171: | ||
| }; | }; | ||
| - | //for un2, bsd2 | + | //for lin2 |
| zone "corp1.un" IN {type forward;forwarders {192.168.1.10;};}; | zone "corp1.un" IN {type forward;forwarders {192.168.1.10;};}; | ||
| ... | ... | ||
| - | zone "corp20.un" IN {type forward;forwarders {192.168.20.10;};}; | + | zone "corp55.un" IN {type forward;forwarders {192.168.55.10;};}; |
| //zone "corp1.un" IN {type forward;forwarders {172.16.1.1;};}; | //zone "corp1.un" IN {type forward;forwarders {172.16.1.1;};}; | ||
| ... | ... | ||
| - | //zone "corp20.un" IN {type forward;forwarders {172.16.1.20;};}; | + | //zone "corp55.un" IN {type forward;forwarders {172.16.1.55;};}; |
| </code><code> | </code><code> | ||
| # cat un | # cat un | ||
| Line 185: | Line 189: | ||
| ns A 172.16.1.254 | ns A 172.16.1.254 | ||
| isp A 172.16.1.254 | isp A 172.16.1.254 | ||
| - | voip1 A 80.250.209.226 | + | ;voip1 A 80.250.209.226 |
| gate.isp A 172.16.1.254 | gate.isp A 172.16.1.254 | ||
| mail.isp A 172.16.1.254 | mail.isp A 172.16.1.254 | ||
| - | openvas.isp A 172.16.1.252 | + | ;openvas.isp A 172.16.1.252 |
| + | ;for lin1, asterisk1 | ||
| + | ;$GENERATE 1-55 server.corp$ A 172.16.1.$ | ||
| - | ;for un2, bsd2, un3, asterisk2 | + | ;for lin2, asterisk2 |
| - | ;$GENERATE 1-26 ns$ A 172.16.1.$ | + | ;$GENERATE 1-55 ns$ A 172.16.1.$ |
| - | ;$GENERATE 1-26 ns$ A 192.168.$.10 | + | ;$GENERATE 1-55 ns$ A 192.168.$.10 |
| - | ;$GENERATE 1-26 corp$ NS ns$ | + | ;$GENERATE 1-55 corp$ NS ns$ |
| - | ; for uncom, un1, bsd1 | + | ;for lin5 |
| - | ;$GENERATE 27-37 server.corp$ A 172.16.1.$ | + | ;$GENERATE 1-9 router$.isp A 172.16.1.19$ |
| - | + | ||
| - | ;asterisk1 | + | |
| - | ;$GENERATE 1-14 server.corp$ A 172.16.1.$ | + | |
| - | ;$GENERATE 1-9 server.corp$ A 172.16.1.10$ | + | |
| - | ;$GENERATE 10-14 server.corp$ A 172.16.1.1$ | + | |
| + | ;for lin7, lin3 | ||
| + | ;$GENERATE 1-55 server.corp$ A 192.168.$.10 | ||
| + | ;$GENERATE 1-55 www.corp$ A 192.168.$.20 | ||
| + | ;$GENERATE 1-55 gate.corp$ A 192.168.$.1 | ||
| + | ;$GENERATE 1-55 router.corp$ A 192.168.$.1 | ||
| + | ;$GENERATE 1-55 switch.corp$ A 192.168.$.3 | ||
| + | ;$GENERATE 1-55 switch1.corp$ A 192.168.$.3 | ||
| + | ;$GENERATE 1-55 switch2.corp$ A 192.168.$.4 | ||
| + | ;$GENERATE 1-55 switch3.corp$ A 192.168.$.5 | ||
| + | ;$GENERATE 1-9 lan.corp$ A 192.168.10$.10 | ||
| + | ;$GENERATE 10-55 lan.corp$ A 192.168.1$.10 | ||
| + | ;$GENERATE 10-55 corp$ A 192.168.$.10 | ||
| + | ;$GENERATE 10-55 mgmt.corp$ A 192.168.$.20 | ||
| ;for CGP | ;for CGP | ||
| Line 241: | Line 255: | ||
| ;$GENERATE 1-9 comp$ MX 10 mail.comp$ | ;$GENERATE 1-9 comp$ MX 10 mail.comp$ | ||
| ;$GENERATE 1-9 comp$ A 172.16.1.20$ | ;$GENERATE 1-9 comp$ A 172.16.1.20$ | ||
| - | |||
| - | ;for msc, un4, unbez | ||
| - | $GENERATE 38-55 server.corp$ A 192.168.$.10 | ||
| - | $GENERATE 38-55 www.corp$ A 192.168.$.20 | ||
| - | $GENERATE 38-55 gate.corp$ A 192.168.$.1 | ||
| - | $GENERATE 38-55 router.corp$ A 192.168.$.1 | ||
| - | ;$GENERATE 1-9 lan.corp$ A 192.168.10$.10 | ||
| - | $GENERATE 38-55 lan.corp$ A 192.168.1$.10 | ||
| - | $GENERATE 38-55 corp$ A 192.168.$.10 | ||
| - | $GENERATE 38-55 mgmt.corp$ A 192.168.$.20 | ||
| - | </code><code> | ||
| - | # cat 192.168.rev | ||
| - | </code><code> | ||
| - | $TTL 3h | ||
| - | @ SOA ns.un. root.gate.isp.un. 43 1d 12h 1w 3h | ||
| - | |||
| - | NS ns.un. | ||
| - | |||
| - | ;for msc, un4, unbez, !!! not for un3 | ||
| - | ;$GENERATE 40-55 1.$ PTR gate.corp$.un. | ||
| - | $GENERATE 40-55 1.$ PTR router.corp$.un. | ||
| - | |||
| - | $GENERATE 40-55 10.$ PTR server.corp$.un. | ||
| - | $GENERATE 40-55 3.$ PTR switch.corp$.un. | ||
| - | $GENERATE 40-55 20.$ PTR mgmt.corp$.un. | ||
| </code><code> | </code><code> | ||
| # cat isp.dns.sh | # cat isp.dns.sh | ||
| </code><code> | </code><code> | ||
| - | STANDS="1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25" | + | STANDS="1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 51 53 54 55" |
| for i in $STANDS | for i in $STANDS | ||
| Line 289: | Line 278: | ||
| ns A 172.16.1.254 | ns A 172.16.1.254 | ||
| - | ;mail A 192.168.$i.10 | + | mail A 192.168.$i.10 |
| ;mail A 172.16.1.$(( $i + 200)) | ;mail A 172.16.1.$(( $i + 200)) | ||
| EOF | EOF | ||