Pastein: ISP hostnamectl set-hostname isp; exec bash sed -i "s/HOSTNAME=localhost/HOSTNAME=isp/g" /etc/sysconfig/network cat /etc/sysconfig/network HQ-RTR hostnamectl set-hostname hq-rtr.au-team.irpo

Загрузка данных
ISP
hostnamectl set-hostname isp; exec bash 
sed -i "s/HOSTNAME=localhost/HOSTNAME=isp/g" /etc/sysconfig/network 
cat /etc/sysconfig/network
 
HQ-RTR
hostnamectl set-hostname hq-rtr.au-team.irpo; exec bash 
sed -i "s/HOSTNAME=localhost/HOSTNAME=hq-rtr.au-team.irpo/g" /etc/sysconfig/network

BR-RTR
hostnamectl set-hostname br-rtr.au-team.irpo; exec bash 
sed -i "s/HOSTNAME=localhost/HOSTNAME=br-rtr.au-team.irpo/g" /etc/sysconfig/network

HQ-SRV
hostnamectl set-hostname hq-srv.au-team.irpo; exec bash
sed -i "s/HOSTNAME=localhost/HOSTNAME=hq-srv.au-team.irpo/g" /etc/sysconfig/network

BR-SRV
hostnamectl set-hostname br-srv.au-team.irpo; exec bash
sed -i "s/HOSTNAME=localhost/HOSTNAME=br-srv.au-team.irpo/g" /etc/sysconfig/network

HQ-CLI
su-
hostnamectl set-hostname hq-cli.au-team.irpo; exec bash
sed -i "s/HOSTNAME=localhost/HOSTNAME=hq-cli.au-team.irpo/g" /etc/sysconfig/network

ISP
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
echo "BOOTPROTO=dhcp" >> /etc/net/ifaces/enp7s1/options
mkdir /etc/net/ifaces/enp7s2
mkdir /etc/net/ifaces/enp7s3
echo "TYPE=eth" > /etc/net/ifaces/enp7s2/options
echo "TYPE=eth" > /etc/net/ifaces/enp7s3/options
echo "172.16.1.1/28" > /etc/net/ifaces/enp7s2/ipv4address
echo "172.16.2.1/28" > /etc/net/ifaces/enp7s3/ipv4address
sed -i "s/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g" /etc/net/sysctl.conf
systemctl restart network

ПРОВЕРКА ip -c -br -4 a
ping -c3 ya.ru

если форвард не ставится, то нужно применить команду echo 1 > /proc/sys/net/ipv4/ip_forward и перезагрузить машину

apt-get update
apt-get install iptables
iptables -t nat -A POSTROUTING -s 172.16.1.0/28 -o enp7s1 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 172.16.2.0/28 -o enp7s1 -j MASQUERADE
iptables-save >> /etc/sysconfig/iptables
systemctl enable --now iptables.service

ПРОВЕРКА iptables -t nat -L -n -v

HQ-RTR
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
echo "172.16.1.2/28" > /etc/net/ifaces/enp7s1/ipv4address
echo "default via 172.16.1.1" > /etc/net/ifaces/enp7s1/ipv4route
echo "nameserver 77.88.8.8" > /etc/net/ifaces/enp7s1/resolv.conf
systemctl restart network

ПРОВЕРКА ip -c -br -4 a
ip -c r
ping -c3 ya.ru

BR-RTR
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
echo "172.16.2.2/28" > /etc/net/ifaces/enp7s1/ipv4address
echo "default via 172.16.2.1" > /etc/net/ifaces/enp7s1/ipv4route
echo "nameserver 77.88.8.8" > /etc/net/ifaces/enp7s1/resolv.conf
systemctl restart network

ПРОВЕРКА ip -c -br -4 a
ip -c -br a

mkdir /etc/net/ifaces/enp7s2
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
echo "TYPE=eth" > /etc/net/ifaces/enp7s2/options
echo "192.168.0.1/28" > /etc/net/ifaces/enp7s2/ipv4address
systemctl restart network

ПРОВЕРКА ip -c -br a

HQ-SRV
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
mkdir /etc/net/ifaces/enp7s1.100
cat <<EOF > /etc/net/ifaces/enp7s1.100/options
>TYPE=vlan
>HOST=enp7s1
>VID=100
>EOF
echo "192.168.100.2/27" > /etc/net/ifaces/enp7s1.100/ipv4address
echo "default via 192.168.100.1" > /etc/net/ifaces/enp7s1.100/ipv4address
echo "nameserver 77.88.8.8" > /etc/net/ifaces/enp7s1.100/resolv.conf
systemctl restart network

ПРОВЕРКА ip -c -br -4 a
ip -c r
cat /etc/resolv.conf

BR-SRV
echo "TYPE=eth" > /etc/net/ifaces/enp7s1/options
echo "192.168.0.2/28" > /etc/net/ifaces/enp7s1/ipv4address
echo "default via 192.168.0.1" > /etc/net/ifaces/enp7s1/ipv4route
echo "nameserver 77.88.8.8" > /etc/net/ifaces/enp7s1/resolv.conf
systemctl restart network

ПРОВЕРКА ip -c br -4 a
ip -c r 
cat /etc/resolv.conf
ping -c3 192.168.0.1

HQ-SRV
useradd sshuser -u 2026
passwd sshuser
usermod -aG wheel sshuser
echo "sshuser ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/sshuser

ПРОВЕРКА su - sshuser
id -u
sudo -i
exit

BR-SRV
seradd sshuser -u 2026
passwd sshuser
usermod -aG wheel sshuser
echo "sshuser ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/sshuser

ПРОВЕРКА su - sshuser
id -u
sudo -i
exit

HQ-RTR
useradd net_admin
passwd net_admin
usermod -aG wheel net_admin
echo "net_admin ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/net_admin

УСТАНОВКА SUDO
apt-get update && apt-get install sudo

ПРОВЕРКА su - net_admin
sudo -i
exit

BR-RTR
seradd net_admin
passwd net_admin
usermod -aG wheel net_admin
echo "net_admin ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/net_admin

УСТАНОВКА SUDO
apt-get update && apt-get install sudo

ПРОВЕРКА su - net_admin
sudo -i
exit

HQ-RTR
mkdir /etc/net/ifaces/enp7s2
echo "TYPE=eth" > /etc/net/ifaces/enp7s2/options
mkdir /etc/net/ifaces/enp7s2.100
mkdir /etc/net/ifaces/enp7s2.200
mkdir /etc/net/ifaces/enp7s2.999
cat <<EOF > /etc/net/ifaces/enp7s2.100/options
>TYPE=vlan
>HOST=enp7s2
>VID=100
>EOF

cat <<EOF > /etc/net/ifaces/enp7s2.200/options
>TYPE=vlan
>HOST=enp7s2
>VID=200
>EOF

cat <<EOF > /etc/net/ifaces/enp7s2.999/options
>TYPE=vlan
>HOST=enp7s2
>VID=999
>EOF

echo "192.168.100.1/27" > /etc/net/ifaces/enp7s2.100/ipv4address
echo "192.168.200.1/24" > /etc/net/ifaces/enp7s2.200/ipv4address
echo "192.168.99.1/29" > /etc/net/ifaces/enp7s2.100/ipv4address
systemctl restart network

ПРОВЕРКА ip -c -br -4 a
ip -c -d l

HQ-SRV
ПРОВЕРКА ip -c r
ping -c3 192.168.100.1

HQ-SRV
echo "Port 2026" >> /etc/openssh/sshd_config
echo "AllowUsers sshuser" >> /etc/openssh/sshd_config
echo "MaxAuthTries 2" >> /etc/openssh/sshd_config
echo "Banner /etc/openssh/banner" >> /etc/openssh/sshd_config
echo "Authorized access only: > /etc/openssh/banner
systemctl restart sshd.service
ssh user@127.0.0.1 -p 2026

BR-SRV
echo "Port 2026" >> /etc/openssh/sshd_config
echo "AllowUsers sshuser" >> /etc/openssh/sshd_config
echo "MaxAuthTries 2" >> /etc/openssh/sshd_config
echo "Banner /etc/openssh/banner" >> /etc/openssh/sshd_config
echo "Authorized access only" > /etc/openssh/banner
systemctl restart sshd.service
ssh user@127.0.0.1 -p 2026
exit

HQ-RTR
apt-get update && apt-get install -y frr
sed -i "s/osfd=no/ospfd=no/ospfd=yes/g" /etc/frr/daemons
systemctl enable --now frr.service
vtysh

BR-RTR
apt-get update && apt-get install -y frr
sed -i "s/osfd=no/ospfd=no/ospfd=yes/g" /etc/frr/daemons
systemctl enable --now frr.service
vtysh

HQ-RTR
sed -i "s/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g" /etc/sysctl.conf
systemctl restart network
iptables -t nat -A POSTROUTING -o enp7s1 -j MASQUERADE
iptables-save >> /etc/sysconfig/iptables
systemctl enable --now iptables.service
sysctl net.ipv4.ip_forward
iptables -t nat -L -n -v
vtysh
wr mem
exit

HQ-SRV
ping -c3 77.88.8.8
ping -c3 ya.ru

BR-RTR
sed -i "s/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g" /etc/sysctl.conf
systemctl restart network
apt-get update
apt-get install iptables
iptables -t nat -A POSTROUTING -o enp7s1 -j MASQUERADE
iptables-save >> /etc/sysconfig/iptables
systemctl enable --now iptables.service
sysctl net.ipv4.ip_forward
vtysh
wr mem
exit

BR-SRV
ping -c3 77.88.8.8
ping -c3 ya.ru

HQ-RTR
apt-get install -y dhcp-server
cat <<EOF > /etc/dhcp/dhcpd.conf
option domain-name "au-team.irpo";
option domain-name-servers 192.168.100.2;
default-lease-time 6000;
max-lease-time 72000;
authoritative;

subnet 192.168.200.0 netmask 255.255.255.0 {
range 192.168.200.2 192.168.200.254;
option routers 192.168.200.1;
}
EOF

HQ-CLI
cd /etc/net/ifaces/enp7s1.200
mcedit options
TYPE=vlan
BOOTPROTO=static
HOST=enp7s1
VID=200
DISABLED=no
systemctl restart network
exit
su -
ip -c -br -4 a
ip -c r
cat /etc/resolv.conf
ping -c3 77.88.8.8
ping -c3 192.168.100.2

HQ-SRV
apt-get install -y dnsmasq
cat <<EOF > /etc/dnsmasq.conf
> no-hosts
> server=77.88.8.8
> cache-size=1000
> all-servers
> no-negcache
> interface=*
> host-record=hq-rtr.au-team.ipro,192.168.100.1
> host-record=hq-rtr.au-team.ipro,192.168.200.1
> host-record=hq-rtr.au-team.ipro,192.168.99.1
> host-record=hq-srv.au-team.ipro,192.168.100.2
> host-record=hq-cli.au-team.ipro,192.168.200.2
> address=/br-rtr.au-team.ipro/192.168.0.1
> address=/br-srv.au-team.ipro/192.168.0.2
> address=/docker.au-team.ipro/172.16.1.1
> address=/web.au-team.ipro/172.16.2.1
> EOF
systemctl enable --now dnsmasq.service
host hq-rtr.au-team.ipro
hq-rtr.au-team.irpo has address 192.168.200.1
hq-rtr.au-team.irpo has address 192.168.100.1
hq-rtr.au-team.irpo has address 192.168.99.1

host hq-srv.au-team.ipro
hq-srv.au-team.irpo has address 192.168.100.2

host hq-cli.au-team.ipro
hq-cli.au-team.irpo has address 192.168.200.2

host br-rtr.au-team.ipro
br-rtr.au-team.irpo has address 192.168.0.1
host br-srv.au-team.ipro
br-srv.au-team.irpo has address 192.168.0.2

 host dockerer.au-team.ipro
dockerer.au-team.irpo has address 172.16.1.1

host web.au-team.ipro
web.au-team.irpo has address 172.16.2.1

host 192.168.99.1
1.99.168.192.in-addr.arpa domain name pointer hq-rtr.au-team.irpo.

host 192.168.100.1
1.100.168.192.in-addr.arpa domain name pointer hq-rtr.au-team.irpo.

host 192.168.200.1
1.200.168.192.

ISP
apt-get install tzdata
timedatecl set-timezone Asia/Yaketirinburg
timedatecl
Больше возможностей при регистрации:
