SYS 265 Assessment - tconklin-champlain/Tech-Journal GitHub Wiki

IP Assignmnets

- edge01 - - nginx log01 jump traveler wks01 dchp fw-mgmt - mgmt01 Section
User "WAN/24 (Different for each)" DMZ/29 LAN/24 DMZ/29 MGMT/28 DMZ/29 "WAN/24 (Different for each)" LAN/24 LAN/24 LAN/24 MGMT/28 sec350.local -
timothy.conklin 10.0.17.112 172.16.50.2 172.16.150.2 172.16.50.5 172.16.200.10 172.16.50.4 10.0.17.12 DHCP 100-150 172.16.150.5 172.16.150.3 172.16.200.2 172.16.200.11 1

Passwords

💡 Note: Passwords are purposfully left insecure for my own speed in real life I would not do this.

System Type Username Password
edge01 Firewall vyos,timothy Ch@mpl@1n!22,password
nginx,dhcp Linux Ubuntu champuser,timothy Ch@mpl@1n!22(password),password1
traveler Windows champuser,timothy-adm Ch@mpl@1n!22(password),password1

Configuring without nmtui

  1. sudo nano /etc/netplan/00-installer-config.yaml
  2. Configure like below
network:
  version: 2
  renderer: networkd
  ethernets:
    ens160:
      addresses:
        - 172.16.50.5/29
      gateway4: 172.16.50.2
      nameservers:
          search: [mydomain, otherdomain]
          addresses: [10.0.17.2, 1.1.1.1]

Quick VyOS Port forwarding reminder

$ configure
# set nat destination rule 100 description "Would prefer pfSense!"
# set nat destination rule 100 inbound-interface eth0
# set nat destination rule 100 protocol tcp
# set nat destination rule 100 translation address $TARGET_SERVER
# set nat destination rule 100 translation port $TARGET_PORT