mirror of
https://github.com/SantaSpeen/kkep-praktic-2022.git
synced 2026-05-20 00:20:15 +00:00
18.04.2022
This commit is contained in:
@@ -0,0 +1,219 @@
|
||||
# !!!!!
|
||||
# VMWare не может вставить русские буквы, так что исключайте их при копировании
|
||||
# !!!!!
|
||||
|
||||
# Пакеты -> ip -> тунель -> дхцп -> -> ->
|
||||
|
||||
# File version: 2.0
|
||||
CONFIG_FILE_VERSION="2.0"
|
||||
|
||||
HOSTS="/etc/hosts"; rm $HOSTS; touch $HOSTS
|
||||
echo -e "# ${HOSTS} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n\n" >> $HOSTS
|
||||
echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $HOSTS
|
||||
echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $HOSTS
|
||||
|
||||
cat $HOSTS
|
||||
|
||||
# echo -e "20.20.20.10\tisp" >> $HOSTS # Organisation RIGHT
|
||||
# echo -e "10.10.10.10\tisp" >> $HOSTS # Organisation LEFT
|
||||
|
||||
# Для смены порядка чтения "DNS"
|
||||
|
||||
nano /etc/nsswitch.conf
|
||||
|
||||
# Ответы DNS сервера должны иметь более высокий приоритет.
|
||||
# В строке, которая начинается с "hosts: ", меняем местами слова files и dns.
|
||||
|
||||
SSH_CONFIG="/etc/ssh/sshd_config"
|
||||
cp $SSH_CONFIG $SSH_CONFIG.old
|
||||
sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSH_CONFIG
|
||||
systemctl restart ssh.service
|
||||
|
||||
# Эта настройка для FW и RTR
|
||||
|
||||
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
|
||||
|
||||
# Настройка debian
|
||||
|
||||
apt-cdrom add
|
||||
apt-get install tcpdump bind9 ssh nfs-common network-manager curl lynx net-tools vim bind9utils cifs-utils -y
|
||||
|
||||
# CentOS yum repo Config
|
||||
|
||||
cd /media/
|
||||
sh -c "rm -rf *"
|
||||
mkdir CentOS
|
||||
mkdir cdrom
|
||||
|
||||
cd /etc/
|
||||
|
||||
mkdir yum.repos.d-default/
|
||||
mv ./yum.repos.d/CentOS* ./yum.repos.d-default/
|
||||
|
||||
cd yum.repos.d/
|
||||
sh -c "rm -rf *"
|
||||
REPO_FILE="/etc/yum.repos.d/CentOS-Media.repo"
|
||||
touch $REPO_FILE
|
||||
|
||||
echo -e "# ${REPO_FILE} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n" >> $REPO_FILE
|
||||
echo "[c7-media]" >> $REPO_FILE
|
||||
echo -e "name=CentOS-$releasever - Media" >> $REPO_FILE
|
||||
echo "baseurl=file:///media/CentOS/" >> $REPO_FILE
|
||||
echo -e "\t\tfile:///media/cdrom/" >> $REPO_FILE
|
||||
echo "gpgcheck=1" >> $REPO_FILE
|
||||
echo "enabled=1" >> $REPO_FILE
|
||||
echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7" >> $REPO_FILE
|
||||
|
||||
cat $REPO_FILE
|
||||
|
||||
# Проверить устройства можно командой blkid
|
||||
# Имя образа будет указано в lable="<ISO-NAME>"
|
||||
|
||||
# /dev/sr1 Это [datastore1] _ISO/CentOS-7-x86_64-DVD-1810.iso
|
||||
# /dev/sr0 Это [datastore1] _ISO/Additional.iso
|
||||
|
||||
mount /dev/sr1 /media/CentOS
|
||||
mount /dev/sr0 /media/cdrom
|
||||
|
||||
yum install lynx vim net-tools dhclient bash-completion tcpdump curl nfs-utils cifs-utils sshpass bind-utils libcares* -y
|
||||
|
||||
# firewall вырубить на всех, кроме R-FW
|
||||
|
||||
systemctl stop firewalld && systemctl disable firewalld
|
||||
|
||||
# R-FW
|
||||
|
||||
firewall-cmd --permanent --zone=external --add-service=gre
|
||||
firewall-cmd --permanent --zone=external --add-interface=ens160
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=ens192
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=ens224
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=gre1
|
||||
|
||||
firewall-cmd --reload
|
||||
|
||||
# firewall-cmd --permanent --zone=external --add-interface=ens256
|
||||
# firewall-cmd --permanent --zone=external --add-masquerade
|
||||
# firewall-cmd --permanent --zone=trusted --add-interface=tunnel
|
||||
# firewall-cmd --permanent --zone=external --add-forward-port=port=80:proto=tcp:toport=80:toaddr=192.168.20.10
|
||||
# firewall-cmd --permanent --zone=external --add-service=http
|
||||
# firewall-cmd --permanent --zone=external --add-service=https
|
||||
# firewall-cmd --permanent --zone=external --add-service=ssh
|
||||
|
||||
# L-FW
|
||||
|
||||
# iptables -t nat -A POSTROUTING -o ens256 -j MASQUERADE
|
||||
# iptables -t nat -A PREROUTING -i ens256 -p udp --dport 53 -j DNAT --to-destination 172.16.20.10
|
||||
|
||||
echo "AllowUsers ssh_p root ssh_c" >> /etc/ssh/sshd_config
|
||||
|
||||
adduser ssh_p
|
||||
# p_hss
|
||||
|
||||
adduser ssh_c
|
||||
# c_hss
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.20.0/24 area 0
|
||||
# network 172.16.50.0/30 area 0
|
||||
# network 172.16.55.0/30 area 0
|
||||
# network 10.5.5.0/30 area 0
|
||||
# network 5.5.5.0/27 area 0
|
||||
# passive-interface ens160
|
||||
# passive-interface ens256
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
# L-RTR-A
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.50.0/30 area 0
|
||||
# network 172.16.100.0/24 area 0
|
||||
# passive-interface esn224
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
apt install isc-dhcp-server
|
||||
|
||||
# Пишем интерфейсы
|
||||
nano /etc/default/isc-dhcp-server
|
||||
|
||||
# Выставляем ip
|
||||
nano /etc/dhcp/dhcpd.conf
|
||||
|
||||
# # /etc/dhcp/dhcpd.conf file
|
||||
# # L-RTR-A
|
||||
# option domain-name "skill39.wsr";
|
||||
# option domain-name-servers 172.16.20.10;
|
||||
|
||||
# default-lease-time 600;
|
||||
# max-lease-time 7200;
|
||||
# ddns-update-style none;
|
||||
|
||||
# authoritative;
|
||||
|
||||
# subnet 172.16.50.0 netmask 255.255.255.252 {}
|
||||
|
||||
# subnet 172.16.100.0 netmask 255.255.255.0 {
|
||||
# range 172.16.100.65 172.16.100.75;
|
||||
# option routers 172.16.100.1;
|
||||
# }
|
||||
|
||||
# subnet 172.16.200.0 netmask 255.255.255.0 {
|
||||
# range 172.16.200.65 172.16.200.75;
|
||||
# option routers 172.16.200.1;
|
||||
# }
|
||||
|
||||
# host lclib {
|
||||
# hardware ethernet 00:0C:29:1D:2C:06;
|
||||
# fixed-address 172.16.200.61;
|
||||
# }
|
||||
|
||||
# Включаем isc-dhcp-server и переагружаем
|
||||
systemctl start isc-dhcp-server && systemctl enable isc-dhcp-server; shutdown -r 0
|
||||
|
||||
# L-RTR-B
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.55.0/30 area 0
|
||||
# network 172.16.200.0/24 area 0
|
||||
# passive-interface ens224
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
apt install isc-dhcp-relay
|
||||
Reference in New Issue
Block a user