SYS 265 Assessment
tconklin-champlain edited this page Mar 8, 2022
·
9 revisions
- | edge01 | - | - | nginx | log01 | jump | traveler | wks01 | dchp | fw-mgmt | - | mgmt01 | Section |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
User | "WAN/24 (Different for each)" | DMZ/29 | LAN/24 | DMZ/29 | MGMT/28 | DMZ/29 | "WAN/24 (Different for each)" | LAN/24 | LAN/24 | LAN/24 | MGMT/28 | sec350.local | - |
timothy.conklin | 10.0.17.112 | 172.16.50.2 | 172.16.150.2 | 172.16.50.5 | 172.16.200.10 | 172.16.50.4 | 10.0.17.12 | DHCP 100-150 | 172.16.150.5 | 172.16.150.3 | 172.16.200.2 | 172.16.200.11 | 1 |
💡 Note: Passwords are purposfully left insecure for my own speed in real life I would not do this.
System | Type | Username | Password |
---|---|---|---|
edge01 | Firewall | vyos,timothy | Ch@mpl@1n!22,password |
nginx,dhcp | Linux Ubuntu | champuser,timothy | Ch@mpl@1n!22(password),password1 |
traveler | Windows | champuser,timothy-adm | Ch@mpl@1n!22(password),password1 |
sudo nano /etc/netplan/00-installer-config.yaml
- Configure like below
network:
version: 2
renderer: networkd
ethernets:
ens160:
addresses:
- 172.16.50.5/29
gateway4: 172.16.50.2
nameservers:
search: [mydomain, otherdomain]
addresses: [10.0.17.2, 1.1.1.1]
$ configure
# set nat destination rule 100 description "Would prefer pfSense!"
# set nat destination rule 100 inbound-interface eth0
# set nat destination rule 100 protocol tcp
# set nat destination rule 100 translation address $TARGET_SERVER
# set nat destination rule 100 translation port $TARGET_PORT