Coventry: Difference between revisions

From GigaTux Wiki
Jump to navigation Jump to search
← Older editNewer edit →

Cocodude (talk | contribs)

2 user groups
978 edits
VisualWikitext
No edit summary
Line 90: Line 90:
The PDU has eight ports. These will be used as follows:
The PDU has eight ports. These will be used as follows:


* Switch and KVMoIP
* Switch
* node00001
* node00001
* node00002
* node00002
Line 98: Line 98:
* dedi2 and dedi3
* dedi2 and dedi3
* dedi4 and dedi5
* dedi4 and dedi5
The KVMoIP is outside of the rack so doesn't need its own power connection.


===Startup output===
===Startup output===

Revision as of 09:57, 28 December 2015

Data centre location is CV4 9HN - just off Torrington Avenue.

Specifications

  • Up to 11U Lockable Rackspace
  • 3A of Power
  • 1U 8 Port APC Remote Reboot PDU
  • Up to 4 x KVM over IP Connections
  • 2 x 1000Mbit Network Ports
  • 20TB Monthly Bandwidth
  • 24 Port Gigabit Switch
  • 24/7 Access

Things we need to figure out

  • What if our rails don't work as expected?
  • Do they have a load of Ethernet cables or shall we buy some?
  • Power:
    • We'll need more than 8 power connectors. They don't need to be on the PDU. Is that all the power connectors we get?
    • What sort of connectors are there on the port? Kettle plug types?

Rack layout

(empty)
node00004
node00002
node00001
KVMoIP ?
24 Port Gigabit Switch - Cisco 2960
8 Port APC Remote Reboot PDU
2 x Mini ITX case - firewall and dedi44001
2 x Mini ITX case - dedi44002 and dedi44003
2 x Mini ITX case - dedi44004 and dedi44005
bittyback

Switch

  • VLAN 100 is public (internet) facing
  • VLAN 101 is behind the firewall
  • Some ports on VLAN 100 have restrictions in the source IPs that are allowed. See below.

If we really need a layer 3 switch, they can provide one for £20 per month or we can provide our own. They recommend a Cisco 3750G or Juniper EX4200.

Layout

KVMoIP (100) node00001 (100) node00002 (100) node00004 (100) Remote reboot PDU (100) (100) bittyback (101) node00001 BMC (101) node00002 BMC (101) node00004 BMC (101) bittyback BMC (101) (101)
firewall (100) dedi44001 (100 source filtered) dedi44002 (100 source filtered) dedi44003 (100 source filtered) dedi44004 (100 source filtered) dedi44005 (100 source filtered) Firewall (101) dedi44001 BMC (101) dedi44002 BMC (101) dedi44003 BMC (101) dedi44004 BMC (101) dedi44005 BMC (101)

Power

The PDU has eight ports. These will be used as follows:

  • Switch
  • node00001
  • node00002
  • node00004
  • bittyback
  • firewall and dedi1
  • dedi2 and dedi3
  • dedi4 and dedi5

The KVMoIP is outside of the rack so doesn't need its own power connection.

Startup output

Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Thu 19-Jul-07 20:06 by nachen
Image text-base: 0x00003000, data-base: 0x00D40000

ROM: Bootstrap program is C2960 boot loader
BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE6, RELEASE SOFTWARE (fc1)

sw0.rack40 uptime is 22 weeks, 22 hours, 32 minutes
System returned to ROM by power-on
System image file is "flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin"

cisco WS-C2960G-24TC-L (PowerPC405) processor (revision E0) with 61440K/4088K bytes of memory.
Processor board ID FOC1252U1RS
Last reset from power-on
2 Virtual Ethernet interfaces
48 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

VLAN configuration

Cisco document is at [1]

Create VLANs

  • configure terminal
  • vlan 100
  • end
  • show vlan
  • vlan 101
  • end
  • show vlan
  • copy running-config startup config

Assign VLANs

  • configure terminal
  • interface interface-id
  • switchport mode access 100 or 101
  • end
  • show running-config interface interface-id
  • show interfaces interface-id switchport
  • copy running-config startup config
  • show interfaces vlan 100 or 101
  • show vlan 100 or 101

Disallow VLAN 101 direct access to the trunk

  • configure terminal
  • interface interface-id
  • switchport trunk allowed vlan remove 101
  • end
  • show interfaces interface-id switchport

Source IP Guard

A simple overview is at [2] and a video at [3]

  • interface interface-id
  • ip verify source
  • show ip dhcp snoop bind

DHCP snooping must be enabled globally, and again for each VLAN on which IP source guard will be run.

  • ip dhcp snooping
  • ip dhcp snooping vlan 100

Get MAC addresses

  • show mac address-table int interface-id

Configure the IP address on the port

  • conf t
  • ip device tracking maximum 10 <-- try without this first
  • ip source binding MAC vlan 100 IP address interface interface-id
  • show ip verify source

Firewall

The firewall doesn't have a BMC because we don't want it to be Internet facing, and we probably only need the BMC if the firewall is down (and hence can't be used). We will rely on the KVMoIP for this and a permanently attached USB stick.

Preparation Tasks

  • Ask questions about server setup
  • Formally pay for server rack
  • Possibly buy another couple of Mini ITX servers
  • Set up reverse DNS for IPv4 and IPV6
  • Prepare Bittylicious "under maintenance" page

Items to bring from home

  • As many rails as I can find
  • Network cables
  • Power cables
  • Sat nav holder
  • Coffee and snacks
  • Cable ties and scissors
  • Label printer

When the servers are off

  • Change pointers for Bittylicious to go to the maintenance page
  • Tweet from Bittylicious_ and GigaTux

Post racking

  • Configure switch
  • Configure PDU
  • Configure KVMoIP
  • Reseat the hard drives so that they correctly correspond to physical bays, e.g. /dev/sda -> bay 0
  • Configure host OS networks
  • Configure domU IPs
  • Configure cpanel44002 IPs
  • Change DNS settings for gigatux.com, vixile.net and rewindhost.com on cpanel01002
  • Change GLUE settings for gigatux.com, vixile.net, rewindhost.com

IP Allocations

  • 185.113.128.0: Reserved - network
  • 185.113.128.1: Reserved - default gateway
  • 185.113.128.2: Dedicated server 3062 - IP 1 (UK Servers)
  • 185.113.128.3: Dedicated server 3062 - IP 2 (UK Servers)
  • 185.113.128.4: Dedicated server 3062 - IP 3 (UK Servers)
  • 185.113.128.5: Dedicated server 3062 - IP 4 (UK Servers)
  • 185.113.128.6: Switch
  • 185.113.128.7: KVMoIP?
  • 185.113.128.8: PDU?
  • 185.113.128.9:
  • 185.113.128.10: node00001 dom0
  • 185.113.128.11: node00002 dom0
  • 185.113.128.12: node00004 dom0
  • 185.113.128.13: Firewall external
  • 185.113.128.14: Dedicated server 3067 - IP 1 (UK Servers)
  • 185.113.128.15: Dedicated server 3067 - IP 2 (UK Servers)
  • 185.113.128.16: Dedicated server 3067 - IP 3 (UK Servers)
  • 185.113.128.17: Dedicated server 3067 - IP 4 (UK Servers)
  • 185.113.128.18: Dedicated server 3016 - IP 1 (Rapidswitch)
  • 185.113.128.19: Dedicated server 3016 - IP 2 (Rapidswitch)
  • 185.113.128.20: Dedicated server 3016 - IP 3 (Rapidswitch)
  • 185.113.128.21: Dedicated server 3016 - IP 4 (Rapidswitch)
  • 185.113.128.22: Dedicated server 3016 - IP 5 (Rapidswitch)
  • 185.113.128.23: Dedicated server 3022 - IP 1 (Rapidswitch)
  • 185.113.128.24: Dedicated server 3022 - IP 2 (Rapidswitch)
  • 185.113.128.25: Dedicated server 3022 - IP 3 (Rapidswitch)
  • 185.113.128.26: Dedicated server 3022 - IP 4 (Rapidswitch)
  • 185.113.128.27: Dedicated server 3088 - IP 1 (UK Servers)
  • 185.113.128.28: Dedicated server 3088 - IP 2 (UK Servers)
  • 185.113.128.29: Dedicated server 3088 - IP 3 (UK Servers)
  • 185.113.128.30: Dedicated server 3088 - IP 4 (UK Servers)
  • 185.113.128.31:
  • 185.113.128.32:
  • 185.113.128.33:
  • 185.113.128.34:
  • 185.113.128.35:
  • 185.113.128.36:
  • 185.113.128.37:
  • 185.113.128.38:
  • 185.113.128.39:
  • 185.113.128.40:
  • 185.113.128.41:
  • 185.113.128.42:
  • 185.113.128.43:
  • 185.113.128.44:
  • 185.113.128.45:
  • 185.113.128.46:
  • 185.113.128.47:
  • 185.113.128.48:
  • 185.113.128.49:
  • 185.113.128.50:
  • 185.113.128.51:
  • 185.113.128.52:
  • 185.113.128.53:
  • 185.113.128.54:
  • 185.113.128.55:
  • 185.113.128.56:
  • 185.113.128.57:
  • 185.113.128.58:
  • 185.113.128.59:
  • 185.113.128.60:
  • 185.113.128.61:
  • 185.113.128.62:
  • 185.113.128.63:
  • 185.113.128.64:
  • 185.113.128.65:
  • 185.113.128.66:
  • 185.113.128.67:
  • 185.113.128.68:
  • 185.113.128.69:
  • 185.113.128.70:
  • 185.113.128.71:
  • 185.113.128.72:
  • 185.113.128.73:
  • 185.113.128.74:
  • 185.113.128.75:
  • 185.113.128.76:
  • 185.113.128.77:
  • 185.113.128.78:
  • 185.113.128.79:
  • 185.113.128.80:
  • 185.113.128.81:
  • 185.113.128.82:
  • 185.113.128.83:
  • 185.113.128.84:
  • 185.113.128.85:
  • 185.113.128.86:
  • 185.113.128.87:
  • 185.113.128.88:
  • 185.113.128.89:
  • 185.113.128.90:
  • 185.113.128.91:
  • 185.113.128.92:
  • 185.113.128.93:
  • 185.113.128.94:
  • 185.113.128.95:
  • 185.113.128.96:
  • 185.113.128.97:
  • 185.113.128.98:
  • 185.113.128.99:
  • 185.113.128.100:
  • 185.113.128.101:
  • 185.113.128.102:
  • 185.113.128.103:
  • 185.113.128.104:
  • 185.113.128.105:
  • 185.113.128.106:
  • 185.113.128.107:
  • 185.113.128.108:
  • 185.113.128.109:
  • 185.113.128.110:
  • 185.113.128.111:
  • 185.113.128.112:
  • 185.113.128.113:
  • 185.113.128.114:
  • 185.113.128.115:
  • 185.113.128.116:
  • 185.113.128.117:
  • 185.113.128.118:
  • 185.113.128.119:
  • 185.113.128.120:
  • 185.113.128.121:
  • 185.113.128.122:
  • 185.113.128.123:
  • 185.113.128.124:
  • 185.113.128.125:
  • 185.113.128.126:
  • 185.113.128.127:
  • 185.113.128.128:
  • 185.113.128.129:
  • 185.113.128.130:
  • 185.113.128.131:
  • 185.113.128.132:
  • 185.113.128.133:
  • 185.113.128.134:
  • 185.113.128.135:
  • 185.113.128.136:
  • 185.113.128.137:
  • 185.113.128.138:
  • 185.113.128.139:
  • 185.113.128.140:
  • 185.113.128.141:
  • 185.113.128.142:
  • 185.113.128.143:
  • 185.113.128.144:
  • 185.113.128.145:
  • 185.113.128.146:
  • 185.113.128.147:
  • 185.113.128.148:
  • 185.113.128.149:
  • 185.113.128.150:
  • 185.113.128.151:
  • 185.113.128.152:
  • 185.113.128.153:
  • 185.113.128.154:
  • 185.113.128.155:
  • 185.113.128.156:
  • 185.113.128.157:
  • 185.113.128.158:
  • 185.113.128.159:
  • 185.113.128.160:
  • 185.113.128.161:
  • 185.113.128.162:
  • 185.113.128.163:
  • 185.113.128.164:
  • 185.113.128.165:
  • 185.113.128.166:
  • 185.113.128.167:
  • 185.113.128.168:
  • 185.113.128.169:
  • 185.113.128.170:
  • 185.113.128.171:
  • 185.113.128.172:
  • 185.113.128.173:
  • 185.113.128.174:
  • 185.113.128.175:
  • 185.113.128.176:
  • 185.113.128.177:
  • 185.113.128.178:
  • 185.113.128.179:
  • 185.113.128.180:
  • 185.113.128.181:
  • 185.113.128.182:
  • 185.113.128.183:
  • 185.113.128.184:
  • 185.113.128.185:
  • 185.113.128.186:
  • 185.113.128.187:
  • 185.113.128.188:
  • 185.113.128.189:
  • 185.113.128.190:
  • 185.113.128.191:
  • 185.113.128.192:
  • 185.113.128.193:
  • 185.113.128.194:
  • 185.113.128.195:
  • 185.113.128.196:
  • 185.113.128.197:
  • 185.113.128.198:
  • 185.113.128.199:
  • 185.113.128.200:
  • 185.113.128.201:
  • 185.113.128.202:
  • 185.113.128.203:
  • 185.113.128.204:
  • 185.113.128.205:
  • 185.113.128.206:
  • 185.113.128.207:
  • 185.113.128.208:
  • 185.113.128.209:
  • 185.113.128.210:
  • 185.113.128.211:
  • 185.113.128.212:
  • 185.113.128.213:
  • 185.113.128.214:
  • 185.113.128.215:
  • 185.113.128.216:
  • 185.113.128.217:
  • 185.113.128.218:
  • 185.113.128.219:
  • 185.113.128.220:
  • 185.113.128.221:
  • 185.113.128.222:
  • 185.113.128.223:
  • 185.113.128.224:
  • 185.113.128.225:
  • 185.113.128.226:
  • 185.113.128.227:
  • 185.113.128.228:
  • 185.113.128.229:
  • 185.113.128.230:
  • 185.113.128.231:
  • 185.113.128.232:
  • 185.113.128.233:
  • 185.113.128.234:
  • 185.113.128.235:
  • 185.113.128.236:
  • 185.113.128.237:
  • 185.113.128.238:
  • 185.113.128.239:
  • 185.113.128.240:
  • 185.113.128.241:
  • 185.113.128.242:
  • 185.113.128.243:
  • 185.113.128.244:
  • 185.113.128.245:
  • 185.113.128.246:
  • 185.113.128.247:
  • 185.113.128.248:
  • 185.113.128.249:
  • 185.113.128.250:
  • 185.113.128.251:
  • 185.113.128.252:
  • 185.113.128.253:
  • 185.113.128.254:
  • 185.113.128.255:
  • 185.113.129.0:
  • 185.113.129.1:
  • 185.113.129.2:
  • 185.113.129.3:
  • 185.113.129.4:
  • 185.113.129.5:
  • 185.113.129.6:
  • 185.113.129.7:
  • 185.113.129.8:
  • 185.113.129.9:
  • 185.113.129.10:
  • 185.113.129.11: Dedicated server 3035 - IP 1 (Rapidswitch)
  • 185.113.129.12: Dedicated server 3035 - IP 2 (Rapidswitch)
  • 185.113.129.13: Dedicated server 3035 - IP 3 (Rapidswitch)
  • 185.113.129.14: Dedicated server 3035 - IP 4 (Rapidswitch)
  • 185.113.129.15: Dedicated server 3035 - IP 5 (Rapidswitch)
  • 185.113.129.16:
  • 185.113.129.17:
  • 185.113.129.18:
  • 185.113.129.19:
  • 185.113.129.20:
  • 185.113.129.21:
  • 185.113.129.22:
  • 185.113.129.23:
  • 185.113.129.24:
  • 185.113.129.25:
  • 185.113.129.26:
  • 185.113.129.27:
  • 185.113.129.28:
  • 185.113.129.29:
  • 185.113.129.30:
  • 185.113.129.31:
  • 185.113.129.32:
  • 185.113.129.33:
  • 185.113.129.34:
  • 185.113.129.35:
  • 185.113.129.36:
  • 185.113.129.37:
  • 185.113.129.38:
  • 185.113.129.39:
  • 185.113.129.40:
  • 185.113.129.41:
  • 185.113.129.42:
  • 185.113.129.43:
  • 185.113.129.44:
  • 185.113.129.45:
  • 185.113.129.46:
  • 185.113.129.47:
  • 185.113.129.48:
  • 185.113.129.49:
  • 185.113.129.50:
  • 185.113.129.51:
  • 185.113.129.52:
  • 185.113.129.53:
  • 185.113.129.54:
  • 185.113.129.55:
  • 185.113.129.56:
  • 185.113.129.57:
  • 185.113.129.58:
  • 185.113.129.59:
  • 185.113.129.60:
  • 185.113.129.61:
  • 185.113.129.62:
  • 185.113.129.63:
  • 185.113.129.64:
  • 185.113.129.65:
  • 185.113.129.66:
  • 185.113.129.67:
  • 185.113.129.68:
  • 185.113.129.69:
  • 185.113.129.70:
  • 185.113.129.71:
  • 185.113.129.72:
  • 185.113.129.73:
  • 185.113.129.74:
  • 185.113.129.75:
  • 185.113.129.76:
  • 185.113.129.77:
  • 185.113.129.78:
  • 185.113.129.79:
  • 185.113.129.80:
  • 185.113.129.81:
  • 185.113.129.82:
  • 185.113.129.83:
  • 185.113.129.84:
  • 185.113.129.85:
  • 185.113.129.86:
  • 185.113.129.87:
  • 185.113.129.88:
  • 185.113.129.89:
  • 185.113.129.90:
  • 185.113.129.91:
  • 185.113.129.92:
  • 185.113.129.93:
  • 185.113.129.94:
  • 185.113.129.95:
  • 185.113.129.96:
  • 185.113.129.97:
  • 185.113.129.98:
  • 185.113.129.99:
  • 185.113.129.100:
  • 185.113.129.101:
  • 185.113.129.102:
  • 185.113.129.103:
  • 185.113.129.104:
  • 185.113.129.105:
  • 185.113.129.106:
  • 185.113.129.107:
  • 185.113.129.108:
  • 185.113.129.109:
  • 185.113.129.110:
  • 185.113.129.111:
  • 185.113.129.112:
  • 185.113.129.113:
  • 185.113.129.114:
  • 185.113.129.115:
  • 185.113.129.116:
  • 185.113.129.117:
  • 185.113.129.118:
  • 185.113.129.119:
  • 185.113.129.120:
  • 185.113.129.121:
  • 185.113.129.122:
  • 185.113.129.123:
  • 185.113.129.124:
  • 185.113.129.125:
  • 185.113.129.126:
  • 185.113.129.127:
  • 185.113.129.128:
  • 185.113.129.129:
  • 185.113.129.130:
  • 185.113.129.131:
  • 185.113.129.132:
  • 185.113.129.133:
  • 185.113.129.134:
  • 185.113.129.135:
  • 185.113.129.136:
  • 185.113.129.137:
  • 185.113.129.138:
  • 185.113.129.139:
  • 185.113.129.140:
  • 185.113.129.141:
  • 185.113.129.142:
  • 185.113.129.143:
  • 185.113.129.144:
  • 185.113.129.145:
  • 185.113.129.146:
  • 185.113.129.147:
  • 185.113.129.148:
  • 185.113.129.149:
  • 185.113.129.150:
  • 185.113.129.151:
  • 185.113.129.152:
  • 185.113.129.153:
  • 185.113.129.154:
  • 185.113.129.155:
  • 185.113.129.156:
  • 185.113.129.157:
  • 185.113.129.158:
  • 185.113.129.159:
  • 185.113.129.160:
  • 185.113.129.161:
  • 185.113.129.162:
  • 185.113.129.163:
  • 185.113.129.164:
  • 185.113.129.165:
  • 185.113.129.166:
  • 185.113.129.167:
  • 185.113.129.168:
  • 185.113.129.169:
  • 185.113.129.170:
  • 185.113.129.171:
  • 185.113.129.172:
  • 185.113.129.173:
  • 185.113.129.174:
  • 185.113.129.175:
  • 185.113.129.176:
  • 185.113.129.177:
  • 185.113.129.178:
  • 185.113.129.179:
  • 185.113.129.180:
  • 185.113.129.181:
  • 185.113.129.182:
  • 185.113.129.183:
  • 185.113.129.184:
  • 185.113.129.185:
  • 185.113.129.186:
  • 185.113.129.187:
  • 185.113.129.188:
  • 185.113.129.189:
  • 185.113.129.190:
  • 185.113.129.191:
  • 185.113.129.192:
  • 185.113.129.193:
  • 185.113.129.194:
  • 185.113.129.195:
  • 185.113.129.196:
  • 185.113.129.197:
  • 185.113.129.198:
  • 185.113.129.199:
  • 185.113.129.200:
  • 185.113.129.201:
  • 185.113.129.202:
  • 185.113.129.203:
  • 185.113.129.204:
  • 185.113.129.205:
  • 185.113.129.206:
  • 185.113.129.207:
  • 185.113.129.208:
  • 185.113.129.209:
  • 185.113.129.210:
  • 185.113.129.211:
  • 185.113.129.212:
  • 185.113.129.213:
  • 185.113.129.214:
  • 185.113.129.215:
  • 185.113.129.216:
  • 185.113.129.217:
  • 185.113.129.218:
  • 185.113.129.219:
  • 185.113.129.220:
  • 185.113.129.221:
  • 185.113.129.222:
  • 185.113.129.223:
  • 185.113.129.224:
  • 185.113.129.225:
  • 185.113.129.226:
  • 185.113.129.227:
  • 185.113.129.228:
  • 185.113.129.229:
  • 185.113.129.230:
  • 185.113.129.231:
  • 185.113.129.232:
  • 185.113.129.233:
  • 185.113.129.234:
  • 185.113.129.235:
  • 185.113.129.236:
  • 185.113.129.237:
  • 185.113.129.238:
  • 185.113.129.239:
  • 185.113.129.240:
  • 185.113.129.241:
  • 185.113.129.242:
  • 185.113.129.243:
  • 185.113.129.244:
  • 185.113.129.245:
  • 185.113.129.246:
  • 185.113.129.247:
  • 185.113.129.248:
  • 185.113.129.249:
  • 185.113.129.250:
  • 185.113.129.251:
  • 185.113.129.252:
  • 185.113.129.253:
  • 185.113.129.254:
  • 185.113.129.255: Reserved - broadcast

Dedicated servers

  • Michael Minniefield, currently 78.129.242.37, awaiting support ticket response (assumed no)
  • Michael Minniefield, currently 78.129.242.47, awaiting support ticket response (assumed no)
  • Christian Tchamba, currently 50.31.11.31 in Chicago, awaiting support ticket response (assumed no)
  • Christian Tchamba, currently 208.117.36.36 in Chicago, awaiting support ticket response (assumed no)
  • Rhonda Eggleston, currently 78.129.148.9 IS-30771 in Maidenhead, awaiting support ticket response (assumed yes)
  • Rhonda Eggleston, currently 78.129.234.2 IS-30985 in Maidenhead, awaiting support ticket response (assumed yes)
  • Bridgette Bates, currently 82.145.43.22 IS-30851 in Maidenhead, awaiting support ticket response (assumed yes)
  • Jack Hearbleed, currently in Frankfurt and staying there as paid for six months in advance
Retrieved from "https://gigatux.com/wiki/index.php?title=Coventry&oldid=698"