Arquitetura da rede do LSC

1. Dados da rede:

1704 LSC 150.162.57.0/26

* Servidores * Desktops

INE - LSC Network: 150.162.57.0 Netmask: 255.255.255.192 (64 IPs) Broadcast: 150.162.57.63 Gateway: 150.162.57.62 IP's: 150.162.57.1 - 150.162.57.59 VRRP: 150.162.57.60 e 57.61

2. Regras de acesso a rede:

• Extended IP access list fw-v1704-LSC-in (interface interna para rede externa)

   10 permit udp any any eq bootps
   20 permit tcp 150.162.57.0 0.0.0.63 any established
   30 permit ip 150.162.57.0 0.0.0.63 150.162.0.0 0.0.255.255
   40 permit ip 150.162.57.0 0.0.0.63 150.162.242.0 0.0.0.255
   50 deny tcp any any eq smtp domain msrpc 136 137 138 139 445
   60 deny udp any any eq domain 135 136 netbios-ns netbios-dgm netbios-ss 445
   70 permit ip 150.162.57.0 0.0.0.63 any

• Extended IP access list fw-v1704-LSC-out (interface externa para a rede interna)

   10 deny ip 150.162.57.0 0.0.0.63 any
   20 permit tcp any any established
   30 permit ip 150.162.0.0 0.0.3.255 any
   40 permit ip 150.162.242.0 0.0.0.255 any
   50 permit ip 150.162.0.0 0.0.255.255 host 150.162.57.3
   60 permit ip 200.135.64.0 0.0.31.255 host 150.162.57.3
   70 permit tcp any host 150.162.57.4 eq www 443
   80 permit tcp any host 150.162.57.5 eq www 443
   90 permit tcp host 150.162.60.140 host 150.162.57.5 eq smtp
   100 permit tcp any host 150.162.57.7 eq www 443
   110 permit tcp 150.162.0.0 0.0.255.255 150.162.57.0 0.0.0.7 eq 22 www 443 8080 8443
   120 permit tcp 200.135.64.0 0.0.31.255 150.162.57.0 0.0.0.7 eq 22 www 443
   130 permit tcp 150.162.0.0 0.0.255.255 host 150.162.57.8 eq 22 www 443
   140 permit tcp 200.135.64.0 0.0.31.255 host 150.162.57.8 eq 22 www 443
   150 permit udp host 150.162.2.4 range bootps bootpc any
   160 permit udp any eq ntp any eq ntp
   170 permit udp any any gt 1024
   180 permit icmp any any
   190 permit udp host 150.162.6.25 range bootps bootpc any
   200 permit ip host 150.162.6.25 any

3. Servidor DHCP na Setic:

• 57.60 e 57.61 --> não usar porque são a redundância de roteamento da rede do LSC
• 57.11 a 57.59 --> ips dinamicos
• 57.1 a 57.10 --> ips fixos (alocados manualmente na própria maquina), dos quais:

- 150.162.57.1 --> Livres

- 150.162.57.3 --> possivelmente do bizagi (verificar e entender bem)

- 150.162.57.5 e 150.162.57.7 --> processos.ufsc.br

- 150.162.57.4 e 150.162.57.6 --> dev.processos.ufsc.br

- 150.162.57.8 e 150.162.57.9 --> dev2.processos.ufsc.br

- 150.162.57.10 --> Workstation Dell Precision 5820 no LSC (usada como local terciario do back-ups, usando o rsync sincronizando com a dev2)