User Tools

Site Tools


настройка_шлюза_в_классе

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revision Both sides next revision
настройка_шлюза_в_классе [2016/12/01 10:35]
val
настройка_шлюза_в_классе [2020/11/28 18:00]
val [DNS]
Line 3: Line 3:
 ===== ISP1 ===== ===== ISP1 =====
  
-==== FreeBSD/​Ubuntu ====+==== FreeBSD/Debian/Ubuntu ====
  
   * Сменить пароль   * Сменить пароль
Line 59: Line 59:
 </​code>​ </​code>​
  
-==== Ubuntu ====+==== Debian/Ubuntu ====
 <​code>​ <​code>​
 root@nessus.isp.un:​~#​ cat /​etc/​hostname root@nessus.isp.un:​~#​ cat /​etc/​hostname
Line 84: Line 84:
 root@nessus.isp.un:​~#​ sh nat.sh root@nessus.isp.un:​~#​ sh nat.sh
  
-root@nessus.isp.un:​~#​ iptables-save ​-c > /​etc/​iptables.rules+root@nessus.isp.un:​~#​ iptables-save > /​etc/​iptables.rules
 </​code><​code>​ </​code><​code>​
 root@nessus.isp.un:​~#​ cat /​etc/​network/​interfaces root@nessus.isp.un:​~#​ cat /​etc/​network/​interfaces
Line 93: Line 93:
 auto eth0 auto eth0
 iface eth0 inet static iface eth0 inet static
-        pre-up iptables-restore ​-c < /​etc/​iptables.rules +        pre-up iptables-restore < /​etc/​iptables.rules 
-        address 10.N.M.252+        address 10.N.M.178
         netmask 255.255.255.0         netmask 255.255.255.0
         gateway 10.N.M.254         gateway 10.N.M.254
Line 105: Line 105:
 # up route add -net 192.168.1.0 netmask 255.255.255.0 gw 172.16.1.1 # up route add -net 192.168.1.0 netmask 255.255.255.0 gw 172.16.1.1
 # ... # ...
-# up route add -net 192.168.20.0 netmask 255.255.255.0 gw 172.16.1.20+# up route add -net 192.168.55.0 netmask 255.255.255.0 gw 172.16.1.55
 </​code><​code>​ </​code><​code>​
-# cat route.sh+# cat route.bash
 </​code><​code>​ </​code><​code>​
-for i in `jot 20 1`+for i in {1..55}
 do do
         #route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i}         #route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i}
-        #echo up route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i}+        #echo " ​ " ​up route add -net 192.168.${i}.0 netmask 255.255.255.0 gw 172.16.1.${i}
 done done
 </​code><​code>​ </​code><​code>​
-root@nessus.isp.un:​~#​ cat createuser.sh+root@nessus.isp.un:​~#​ cat createuser.bash
 </​code><​code>​ </​code><​code>​
-for i in `jot 20 1`+for i in {1..55}
 do do
         echo $i         echo $i
Line 164: Line 164:
 }; };
  
-//For un4, msc+//For lin7 (depricate), msc (depricate)
 zone "​168.192.in-addr.arpa"​ { zone "​168.192.in-addr.arpa"​ {
         type master;         type master;
Line 171: Line 171:
 }; };
  
-//for un2, bsd2+//for lin2
 zone "​corp1.un"​ IN {type forward;​forwarders {192.168.1.10;​};​};​ zone "​corp1.un"​ IN {type forward;​forwarders {192.168.1.10;​};​};​
 ... ...
-zone "corp20.un" IN {type forward;​forwarders {192.168.20.10;};};+zone "corp55.un" IN {type forward;​forwarders {192.168.55.10;};};
  
 //zone "​corp1.un"​ IN {type forward;​forwarders {172.16.1.1;​};​};​ //zone "​corp1.un"​ IN {type forward;​forwarders {172.16.1.1;​};​};​
 ... ...
-//zone "corp20.un" IN {type forward;​forwarders {172.16.1.20;};};+//zone "corp55.un" IN {type forward;​forwarders {172.16.1.55;};};
 </​code><​code>​ </​code><​code>​
 # cat un # cat un
Line 195: Line 195:
 openvas.isp ​    ​A ​      ​172.16.1.252 openvas.isp ​    ​A ​      ​172.16.1.252
  
 +;for lin1, asterisk1
 +;$GENERATE 1-55 server.corp$ A 172.16.1.$
  
-;for un2, bsd2, un3, asterisk2 +;for lin2, asterisk2 
-;$GENERATE 1-26 ns$ A 172.16.1.$ +;$GENERATE 1-55 ns$ A 172.16.1.$ 
-;$GENERATE 1-26 ns$ A 192.168.$.10 +;$GENERATE 1-55 ns$ A 192.168.$.10 
-;$GENERATE 1-26 corp$ NS ns$+;$GENERATE 1-55 corp$ NS ns$
  
-; for uncom, un1, bsd1 +;for lin5 
-;$GENERATE 27-37 server.corp$ A 172.16.1.$ +;$GENERATE 1-9 router$.isp A 172.16.1.19$
- +
-;​asterisk1 +
-;$GENERATE 1-14 server.corp$ A 172.16.1.$ +
-;$GENERATE 1-9 server.corpA 172.16.1.10$ +
-;$GENERATE 10-14 server.corp$ ​A 172.16.1.1$+
  
 +;for lin7, lin3
 +;$GENERATE 1-55 server.corp$ A 192.168.$.10
 +;$GENERATE 1-55 www.corp$ A 192.168.$.20
 +;$GENERATE 1-55 gate.corp$ A 192.168.$.1
 +;$GENERATE 1-55 router.corp$ A 192.168.$.1
 +;$GENERATE 1-55 switch.corp$ A 192.168.$.3
 +;$GENERATE 1-55 switch1.corp$ A 192.168.$.3
 +;$GENERATE 1-55 switch2.corp$ A 192.168.$.4
 +;$GENERATE 1-55 switch3.corp$ A 192.168.$.5
 +;$GENERATE 1-9 lan.corp$ A 192.168.10$.10
 +;$GENERATE 10-55 lan.corp$ A 192.168.1$.10
 +;$GENERATE 10-55 corp$ A 192.168.$.10
 +;$GENERATE 10-55 mgmt.corp$ A 192.168.$.20
  
 ;for CGP ;for CGP
Line 245: Line 255:
 ;$GENERATE 1-9 comp$ MX 10 mail.comp$ ;$GENERATE 1-9 comp$ MX 10 mail.comp$
 ;$GENERATE 1-9 comp$ A 172.16.1.20$ ;$GENERATE 1-9 comp$ A 172.16.1.20$
- 
-;for msc, un4, unbez 
-$GENERATE 38-55 server.corp$ A 192.168.$.10 
-$GENERATE 38-55 www.corp$ A 192.168.$.20 
-$GENERATE 38-55 gate.corp$ A 192.168.$.1 
-$GENERATE 38-55 router.corp$ A 192.168.$.1 
-;$GENERATE 1-9 lan.corp$ A 192.168.10$.10 
-$GENERATE 38-55 lan.corp$ A 192.168.1$.10 
-$GENERATE 38-55 corp$ A 192.168.$.10 
-$GENERATE 38-55 mgmt.corp$ A 192.168.$.20 
-</​code><​code>​ 
-# cat 192.168.rev 
-</​code><​code>​ 
-$TTL 3h 
-@ SOA ns.un. root.gate.isp.un. 43 1d 12h 1w 3h 
- 
-                NS      ns.un. 
- 
-;for msc, un4, unbez, !!! not for un3 
-;$GENERATE 40-55 1.$ PTR gate.corp$.un. 
-$GENERATE 40-55 1.$ PTR router.corp$.un. 
- 
-$GENERATE 40-55 10.$ PTR server.corp$.un. 
-$GENERATE 40-55 3.$ PTR switch.corp$.un. 
-$GENERATE 40-55 20.$ PTR mgmt.corp$.un. 
 </​code><​code>​ </​code><​code>​
-# cat dns.sh+# cat isp.dns.sh
 </​code><​code>​ </​code><​code>​
-STANDS="​1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25"+STANDS="​1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 51 53 54 55"
  
 for i in $STANDS for i in $STANDS
Line 293: Line 278:
  
 ns              A       ​172.16.1.254 ns              A       ​172.16.1.254
-;mail            A       ​192.168.$i.10+mail            A       ​192.168.$i.10
 ;mail            A       ​172.16.1.$(( $i + 200)) ;mail            A       ​172.16.1.$(( $i + 200))
 EOF EOF
Line 312: Line 297:
 ===== ISP2 ===== ===== ISP2 =====
  
-==== Ubuntu ====+==== Debian/Ubuntu ====
 <​code>​ <​code>​
 +# git clone http://​val.bmstu.ru/​unix/​conf.git
 +
 +# cat conf/​isp2/​readme.txt
 +
 root@gate.isp2.un:​~#​ cat /​etc/​network/​interfaces root@gate.isp2.un:​~#​ cat /​etc/​network/​interfaces
 </​code><​code>​ </​code><​code>​
Line 326: Line 315:
 auto eth0:0 auto eth0:0
 iface eth0:0 inet static iface eth0:0 inet static
-        pre-up iptables-restore ​-c < /​etc/​iptables.rules+        pre-up iptables-restore < /​etc/​iptables.rules
         address 10.N.M.179         address 10.N.M.179
         netmask 255.255.255.0         netmask 255.255.255.0
         gateway 10.N.M.254         gateway 10.N.M.254
- 
-auto eth0:1 
-iface eth0:1 inet static 
-        address 172.16.1.60 
-        netmask 255.255.255.0 
 </​code><​code>​ </​code><​code>​
 root@gate.isp2.un:​~#​ cat nat.sh root@gate.isp2.un:​~#​ cat nat.sh
настройка_шлюза_в_классе.txt · Last modified: 2020/11/28 18:01 by val