User:Pgmurphy/SecureVLANs

From WolfTech
Jump to navigation Jump to search

Private VLANS created for:

  • Cameras
    • PERYTON
    • GRIFFIN
  • Printers
    • ECEPRINT
    • SENTINEL
    • OM
  • LightsOut Management cards
    • All Managed Servers

Setup

Allow 172 VLANS to only communicate (in/out) with:

  • 152.14.98.x
  • 152.1.51.x

Issues

Issues to address:

  1. Research machines in the server rooms
  2. Remote access machines in the server rooms

Solution:

  • Configure the firewalls on these machines to block access to 172 ranges.
-A OUTPUT -p ALL -d 172.25.0.128/25 -j REJECT
-A OUTPUT -p ALL -d 172.26.0.0/24 -j REJECT
-A OUTPUT -p ALL -d 172.26.1.0/24 -j REJECT
-A OUTPUT -p ALL -d 172.26.1.128/25 -j REJECT
Retrieved from "https://tools.wolftech.ncsu.edu/support/index.php?title=User:Pgmurphy/SecureVLANs&oldid=6474"