Coventry: Difference between revisions
Jump to navigation
Jump to search
| Line 36: | Line 36: | ||
|} | |} | ||
==Switch | ==Switch== | ||
* VLAN 100 is public (internet) facing | * VLAN 100 is public (internet) facing | ||
* VLAN 101 is behind the firewall | * VLAN 101 is behind the firewall | ||
* Some ports on VLAN 100 have restrictions in the source IPs that are allowed. See below. | * Some ports on VLAN 100 have restrictions in the source IPs that are allowed. See below. | ||
===Layout=== | |||
{| class="wikitable" | {| class="wikitable" | ||
| Line 71: | Line 73: | ||
|style="color: green;"|dedi44005 BMC (101) | |style="color: green;"|dedi44005 BMC (101) | ||
|} | |} | ||
===Startup output=== | |||
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) | |||
Copyright (c) 1986-2007 by Cisco Systems, Inc. | |||
Compiled Thu 19-Jul-07 20:06 by nachen | |||
Image text-base: 0x00003000, data-base: 0x00D40000 | |||
ROM: Bootstrap program is C2960 boot loader | |||
BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE6, RELEASE SOFTWARE (fc1) | |||
sw0.rack40 uptime is 22 weeks, 22 hours, 32 minutes | |||
System returned to ROM by power-on | |||
System image file is "flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin" | |||
cisco WS-C2960G-24TC-L (PowerPC405) processor (revision E0) with 61440K/4088K bytes of memory. | |||
Processor board ID FOC1252U1RS | |||
Last reset from power-on | |||
2 Virtual Ethernet interfaces | |||
48 Gigabit Ethernet interfaces | |||
The password-recovery mechanism is enabled. | |||
===VLAN configuration=== | |||
===Source IP Guard=== | |||
==Firewall== | ==Firewall== | ||
The firewall doesn't have a BMC because we don't want it to be Internet facing, and we probably only need the BMC if the firewall is down (and hence can't be used). We will rely on the KVMoIP for this and a permanently attached USB stick. | The firewall doesn't have a BMC because we don't want it to be Internet facing, and we probably only need the BMC if the firewall is down (and hence can't be used). We will rely on the KVMoIP for this and a permanently attached USB stick. | ||
Revision as of 10:40, 10 December 2015
Specifications
- Up to 11U Lockable Rackspace
- 3A of Power
- 1U 8 Port APC Remote Reboot PDU
- Up to 4 x KVM over IP Connections
- 2 x 1000Mbit Network Ports
- 20TB Monthly Bandwidth
- 24 Port Gigabit Switch
- 24/7 Access
Rack layout
| (empty) |
| node00004 |
| node00002 |
| node00001 |
| KVMoIP ? |
| 24 Port Gigabit Switch - Cisco 2960 |
| 8 Port APC Remote Reboot PDU |
| 2 x Mini ITX case - firewall and dedi44001 |
| 2 x Mini ITX case - dedi44002 and dedi44003 |
| 2 x Mini ITX case - dedi44004 and dedi44005 |
| bittyback |
Switch
- VLAN 100 is public (internet) facing
- VLAN 101 is behind the firewall
- Some ports on VLAN 100 have restrictions in the source IPs that are allowed. See below.
Layout
| KVMoIP (100) | node00001 (100) | node00002 (100) | node00004 (100) | Remote reboot PDU (100) | (100) | bittyback (101) | node00001 BMC (101) | node00002 BMC (101) | node00004 BMC (101) | bittyback BMC (101) | (101) | |
| firewall (100) | dedi44001 (100 source filtered) | dedi44002 (100 source filtered) | dedi44003 (100 source filtered) | dedi44004 (100 source filtered) | dedi44005 (100 source filtered) | Firewall (101) | dedi44001 BMC (101) | dedi44002 BMC (101) | dedi44003 BMC (101) | dedi44004 BMC (101) | dedi44005 BMC (101) |
Startup output
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Thu 19-Jul-07 20:06 by nachen Image text-base: 0x00003000, data-base: 0x00D40000 ROM: Bootstrap program is C2960 boot loader BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE6, RELEASE SOFTWARE (fc1) sw0.rack40 uptime is 22 weeks, 22 hours, 32 minutes System returned to ROM by power-on System image file is "flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin" cisco WS-C2960G-24TC-L (PowerPC405) processor (revision E0) with 61440K/4088K bytes of memory. Processor board ID FOC1252U1RS Last reset from power-on 2 Virtual Ethernet interfaces 48 Gigabit Ethernet interfaces The password-recovery mechanism is enabled.
VLAN configuration
Source IP Guard
Firewall
The firewall doesn't have a BMC because we don't want it to be Internet facing, and we probably only need the BMC if the firewall is down (and hence can't be used). We will rely on the KVMoIP for this and a permanently attached USB stick.