Arquitetura da rede do LSC: mudanças entre as edições
Ir para navegação
Ir para pesquisar
(Criou página com '1) Dados da rede: 1704 LSC 150.162.57.0/26 Servidores Desktops INE - LSC Network: 150.162.57.0 Netmask: 255.255.255.192 (64 IPs) Broadcast: 150.162.57.63 Gatewa...') |
(Limpou toda a página) Etiqueta: anulando |
||
| Linha 1: | Linha 1: | ||
1) Dados da rede: |
|||
1704 |
|||
LSC |
|||
150.162.57.0/26 |
|||
Servidores |
|||
Desktops |
|||
INE - LSC |
|||
Network: 150.162.57.0 |
|||
Netmask: 255.255.255.192 (64 IPs) |
|||
Broadcast: 150.162.57.63 |
|||
Gateway: 150.162.57.62 |
|||
IP's: 150.162.57.1 - 150.162.57.59 |
|||
VRRP: 150.162.57.60 e 57.61 |
|||
2) Regras de acesso a rede: |
|||
Extended IP access list fw-v1704-LSC-in (interface interna para rede externa) |
|||
10 permit udp any any eq bootps |
|||
20 permit tcp 150.162.57.0 0.0.0.63 any established |
|||
30 permit ip 150.162.57.0 0.0.0.63 150.162.0.0 0.0.255.255 |
|||
40 permit ip 150.162.57.0 0.0.0.63 150.162.242.0 0.0.0.255 |
|||
50 deny tcp any any eq smtp domain msrpc 136 137 138 139 445 |
|||
60 deny udp any any eq domain 135 136 netbios-ns netbios-dgm netbios-ss 445 |
|||
70 permit ip 150.162.57.0 0.0.0.63 any |
|||
Extended IP access list fw-v1704-LSC-out (interface externa para a rede interna) |
|||
10 deny ip 150.162.57.0 0.0.0.63 any |
|||
20 permit tcp any any established |
|||
30 permit ip 150.162.0.0 0.0.3.255 any |
|||
40 permit ip 150.162.242.0 0.0.0.255 any |
|||
50 permit ip 150.162.0.0 0.0.255.255 host 150.162.57.3 |
|||
60 permit ip 200.135.64.0 0.0.31.255 host 150.162.57.3 |
|||
70 permit tcp any host 150.162.57.4 eq www 443 |
|||
80 permit tcp any host 150.162.57.5 eq www 443 |
|||
90 permit tcp host 150.162.60.140 host 150.162.57.5 eq smtp |
|||
100 permit tcp any host 150.162.57.7 eq www 443 |
|||
110 permit tcp 150.162.0.0 0.0.255.255 150.162.57.0 0.0.0.7 eq 22 www 443 8080 8443 |
|||
120 permit tcp 200.135.64.0 0.0.31.255 150.162.57.0 0.0.0.7 eq 22 www 443 |
|||
130 permit tcp 150.162.0.0 0.0.255.255 host 150.162.57.8 eq 22 www 443 |
|||
140 permit tcp 200.135.64.0 0.0.31.255 host 150.162.57.8 eq 22 www 443 |
|||
150 permit udp host 150.162.2.4 range bootps bootpc any |
|||
160 permit udp any eq ntp any eq ntp |
|||
170 permit udp any any gt 1024 |
|||
180 permit icmp any any |
|||
190 permit udp host 150.162.6.25 range bootps bootpc any |
|||
200 permit ip host 150.162.6.25 any |
|||
3) Servidor DHCP na Setic: |
|||
57.1 a 57.10 --> ips fixos; |
|||
57.11 a 57.59 --> ips dinamicos; |
|||
57.60 e 57.61 --> não usar porque são a redundância de roteamento da rede do LSC |
|||
att. |
|||
Alexandre S. Pastorino |
|||