diff --git a/configs/l-/l-srv.sh b/configs/l-/l-srv.sh index eff9c88..bdffbf5 100644 --- a/configs/l-/l-srv.sh +++ b/configs/l-/l-srv.sh @@ -12,7 +12,15 @@ apt-cdrom add apt-get install tcpdump bind9 ssh nfs-common network-manager curl lynx net-tools vim bind9utils cifs-utils -y +sed -ie "s/^hosts:\t*/hosts:\t\tdns files [NOTFOUND=return] # old:/" /etc/nsswitch.conf +SSHC="/etc/ssh/sshd_config" +cp $SSHC $SSHC.old +sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSHC +nmcli con del id ens192 +nmcli con add con-name ens192 ifname ens192 autoconnect yes type ethernet ip4 172.16.20.10/24 gw4 172.16.20.1 +nmcli con mod ens192 +ipv4.dns 172.16.20.10 +ipv4.dns 192.168.20.10 +ipv4.dns-search "skill39.wsr" +nmcli con up ens192 ifname ens192 systemctl disable chronyd ; systemctl stop chronyd shutdown -r 0 diff --git a/configs/r-/r-cli.sh b/configs/r-/r-cli.sh new file mode 100644 index 0000000..3cb2ee2 --- /dev/null +++ b/configs/r-/r-cli.sh @@ -0,0 +1,38 @@ +HS="/etc/hostname" +sh -c "rm $HS"; touch $HS +echo "R-CLI" >> $HS +H="/etc/hosts"; rm $H; touch $H +echo -e "# ${H} file.\n# Configured by Maxim\n\n" >> $H +echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $H +echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $H +echo -e "20.20.20.10\tisp" >> $H +echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf +setenforce 0 +sed -ie 's/SELINUX=enforcing /SELINUX=permissive/' /etc/selinux/config; +systemctl stop firewalld && systemctl disable firewalld + +cd /media/; rm -rf * +mkdir CentOS; mkdir cdrom +cd /etc/ +mv yum.repos.d/ yum.repos.d-default/; mkdir yum.repos.d +REPF="/etc/yum.repos.d/CentOS-Media.repo" +touch $REPF +echo -e "# ${REPF} file.\n# Configured by Maxim\n\n[c7-media]\nname=CentOS-$releasever - Media\nbaseurl=file:///media/CentOS/\n\t\tfile:///media/cdrom/\ngpgcheck=1\nenabled=1\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7" >> $REPF +mount -L "CentOS 7 x86_64" /media/CentOS +mount -L "CDROM" /media/cdrom + +yum install lynx vim net-tools dhclient bash-completion tcpdump curl nfs-utils cifs-utils sshpass bind-utils -y + +sed -ie "s/^hosts:\t*/hosts:\t\tdns files [NOTFOUND=return] # old:/" /etc/nsswitch.conf +SSHC="/etc/ssh/sshd_config" +cp $SSHC $SSHC.old +sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSHC + +nmcli con del id ens32 +nmcli con add con-name ens32 ifname ens32 autoconnect yes type ethernet ip4 192.168.100.100/24 gw4 192.168.100.1 +nmcli con mod ens32 +ipv4.dns 172.16.20.10 +ipv4.dns 192.168.20.10 +ipv4.dns-search "skill39.wsr" +nmcli con up ens32 ifname ens32 + +systemctl disable chronyd ; systemctl stop chronyd +shutdown -r 0 + diff --git a/configs/r-/r-fw.sh b/configs/r-/r-fw.sh index 4c3ddd3..69b0987 100644 --- a/configs/r-/r-fw.sh +++ b/configs/r-/r-fw.sh @@ -7,7 +7,6 @@ echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $H echo -e "20.20.20.10\tisp" >> $H echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf - setenforce 0 sed -ie 's/SELINUX=enforcing /SELINUX=permissive/' /etc/selinux/config; systemctl stop firewalld && systemctl disable firewalld @@ -58,10 +57,11 @@ systemctl start frr; systemctl enable frr; vtysh conf t + ip forw router ospf - network 192.168.20.0/24 area 0 - network 192.168.10.0/30 area 0 - network 10.5.5.0/30 area 0 + network 192.168.10.0/30 area 0 + network 192.168.20.0/24 area 0 + network 10.5.5.0/30 area 0 network 5.5.5.0/27 area 0 passive-interface ens160 passive-interface ens224 diff --git a/configs/r-/r-rtr.sh b/configs/r-/r-rtr.sh index 485313d..b6eefab 100644 --- a/configs/r-/r-rtr.sh +++ b/configs/r-/r-rtr.sh @@ -31,9 +31,9 @@ sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSHC nmcli con del id ens192 nmcli con del id ens160 -nmcli con add con-name ens160 ifname ens160 autoconnect yes type ethernet ip4 192.168.10.2/30 +nmcli con add con-name ens160 ifname ens160 autoconnect yes type ethernet ip4 192.168.10.2/30 gw4 192.168.10.1 nmcli con mod ens160 +ipv4.dns 172.16.20.10 +ipv4.dns 192.168.20.10 +ipv4.dns-search "skill39.wsr" -nmcli con add con-name ens192 ifname ens192 autoconnect yes type ethernet ip4 192.168.100.1/24 gw4 192.168.10.1 +nmcli con add con-name ens192 ifname ens192 autoconnect yes type ethernet ip4 192.168.100.1/24 nmcli con mod ens192 +ipv4.dns 172.16.20.10 +ipv4.dns 192.168.20.10 +ipv4.dns-search "skill39.wsr" nmcli con up ens160 ifname ens160 diff --git a/configs/r-/r-srv.sh b/configs/r-/r-srv.sh new file mode 100644 index 0000000..c3630f9 --- /dev/null +++ b/configs/r-/r-srv.sh @@ -0,0 +1,38 @@ +HS="/etc/hostname" +sh -c "rm $HS"; touch $HS +echo "R-SRV" >> $HS +H="/etc/hosts"; rm $H; touch $H +echo -e "# ${H} file.\n# Configured by Maxim\n\n" >> $H +echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $H +echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $H +echo -e "20.20.20.10\tisp" >> $H +echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf +setenforce 0 +sed -ie 's/SELINUX=enforcing /SELINUX=permissive/' /etc/selinux/config; +systemctl stop firewalld && systemctl disable firewalld + +cd /media/; rm -rf * +mkdir CentOS; mkdir cdrom +cd /etc/ +mv yum.repos.d/ yum.repos.d-default/; mkdir yum.repos.d +REPF="/etc/yum.repos.d/CentOS-Media.repo" +touch $REPF +echo -e "# ${REPF} file.\n# Configured by Maxim\n\n[c7-media]\nname=CentOS-$releasever - Media\nbaseurl=file:///media/CentOS/\n\t\tfile:///media/cdrom/\ngpgcheck=1\nenabled=1\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7" >> $REPF +mount -L "CentOS 7 x86_64" /media/CentOS +mount -L "CDROM" /media/cdrom + +yum install lynx vim net-tools dhclient bash-completion tcpdump curl nfs-utils cifs-utils sshpass bind-utils bind -y + +sed -ie "s/^hosts:\t*/hosts:\t\tdns files [NOTFOUND=return] # old:/" /etc/nsswitch.conf +SSHC="/etc/ssh/sshd_config" +cp $SSHC $SSHC.old +sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSHC + +nmcli con del id ens160 +nmcli con add con-name ens160 ifname ens160 autoconnect yes type ethernet ip4 192.168.20.10/24 gw4 192.168.20.1 +nmcli con mod ens160 +ipv4.dns 172.16.20.10 +ipv4.dns 192.168.20.10 +ipv4.dns-search "skill39.wsr" +nmcli con up ens160 ifname ens160 + +systemctl disable chronyd ; systemctl stop chronyd +shutdown -r 0 +