Coventry

Data centre location is CV4 9HN - just off Torrington Avenue.

Specifications

• Up to 11U Lockable Rackspace
• 3A of Power
• 1U 8 Port APC Remote Reboot PDU
• Up to 4 x KVM over IP Connections
• 2 x 1000Mbit Network Ports
• 20TB Monthly Bandwidth
• 24 Port Gigabit Switch
• 24/7 Access

Things we need to figure out

• What if our rails don't work as expected?
• Do they have a load of Ethernet cables or shall we buy some?
• Power:
  • We'll need more than 8 power connectors. They don't need to be on the PDU. Is that all the power connectors we get?
  • What sort of connectors are there on the port? Kettle plug types?

Rack layout

(empty)

node00004

node00002

node00001

KVMoIP ?

24 Port Gigabit Switch - Cisco 2960

8 Port APC Remote Reboot PDU

2 x Mini ITX case - firewall and dedi44001

2 x Mini ITX case - dedi44002 and dedi44003

2 x Mini ITX case - dedi44004 and dedi44005

bittyback

Switch

• VLAN 100 is public (internet) facing
• VLAN 101 is behind the firewall
• Some ports on VLAN 100 have restrictions in the source IPs that are allowed. See below.

Layout

KVMoIP (100)

node00001 (100)

node00002 (100)

node00004 (100)

Remote reboot PDU (100)

(100)

bittyback (101)

node00001 BMC (101)

node00002 BMC (101)

node00004 BMC (101)

bittyback BMC (101)

(101)

firewall (100)

dedi44001 (100 source filtered)

dedi44002 (100 source filtered)

dedi44003 (100 source filtered)

dedi44004 (100 source filtered)

dedi44005 (100 source filtered)

Firewall (101)

dedi44001 BMC (101)

dedi44002 BMC (101)

dedi44003 BMC (101)

dedi44004 BMC (101)

dedi44005 BMC (101)

Startup output

Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Thu 19-Jul-07 20:06 by nachen
Image text-base: 0x00003000, data-base: 0x00D40000

ROM: Bootstrap program is C2960 boot loader
BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)SEE6, RELEASE SOFTWARE (fc1)

sw0.rack40 uptime is 22 weeks, 22 hours, 32 minutes
System returned to ROM by power-on
System image file is "flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin"

cisco WS-C2960G-24TC-L (PowerPC405) processor (revision E0) with 61440K/4088K bytes of memory.
Processor board ID FOC1252U1RS
Last reset from power-on
2 Virtual Ethernet interfaces
48 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

VLAN configuration

Cisco document is at [1]

Create VLANs

• configure terminal
• vlan 100
• end
• show vlan
• vlan 101
• end
• show vlan
• copy running-config startup config

Assign VLANs

• configure terminal
• interface interface-id
• switchport mode access 100 or 101
• end
• show running-config interface interface-id
• show interfaces interface-id switchport
• copy running-config startup config

• show interfaces vlan 100 or 101
• show vlan 100 or 101

Disallow VLAN 101 direct access to the trunk

• configure terminal
• interface interface-id
• switchport trunk allowed vlan remove 101
• end
• show interfaces interface-id switchport

Source IP Guard

A simple overview is at [2]

• interface interface-id
• ip verify source
• show ip dhcp snoop bind

DHCP snooping must be enabled globally, and again for each VLAN on which IP source guard will be run.

• ip dhcp snooping
• ip dhcp snooping vlan 100

Get MAC addresses

• show mac address-table int interface-id

Configure the IP address on the port

• conf t
• ip source binding MAC vlan 100 IP address interface interface-id
• show ip verify source

Firewall

The firewall doesn't have a BMC because we don't want it to be Internet facing, and we probably only need the BMC if the firewall is down (and hence can't be used). We will rely on the KVMoIP for this and a permanently attached USB stick.