documentation: add diagram and some cleanup

This commit is contained in:
Gregor Michels 2022-07-01 01:40:35 +02:00
parent 9d86702a57
commit 24cf60c390
3 changed files with 60 additions and 47 deletions

View File

@ -1,61 +1,44 @@
Doku: EAE - Am deutschen Platz
==============================
`eae-adp.freifunk-leipzig.de`:
* `gw-core01`
* `sw-access01`
* `sw-access02`
* `hyper01`
* `monitoring01`
* `ap-xxxx`
Overview:
--------
Hardware:
---------
| Typ | Manufacturer | Model | Count | Description |
| --- | ------------ | ----- | ----- | ----------- |
| Access Point | Aruba | AP-105 | 8x | |
| Switch | Zyxel | GS1800-8HP | 2x | |
| Router | Ubiquiti | EdgeRouter-X | 1x | |
| "Server" | Lenovo | ThinkCentre ... | 1x | |
![Layer 1 Overview of Network](layer1_overview.png)
Cloud:
------
IPAM / Device Overview:
-----------------------
| VM Name | IPv4 | IPv6 | Location | Provider | Type | Description |
| ------- | ---- | ---- | -------- | -------- | ---- | ----------- |
| `eap-adp-jump01` | `162.55.53.85` | `2a01:4f8:c0c:1281::/64` | Germany - Nuerenberg - DC3 | Hetzner | CX11 | vpn and jump host for remote access |
| Name | Location | MGMT IPv4 | MAC | Device | Notes |
| ------------- | -------- | ------------ | ------------------- | -------------------- | ----- |
| `gw-core01` | Büro | `10.84.1.1` | `78:8a:20:bd:b6:ae` | Ubiquiti EdgeRouterX | |
| `sw-access01` | Büro | `10.84.1.10` | `bc:cf:4f:e3:bb:8d` | Zyxel GS1800-8HP | |
| `sw-access02` | Zelt 5 | `10.84.1.11` | `bc:cf:4f:e3:ac:39` | Zyxel GS1800-8HP | |
| `hyper01` | Büro | `10.84.1.21` | `00:23:24:54:f0:fe` | Lenovo ThinkCentre ? | |
| `ap-2bbf` | Zelt 4 | `10.84.1.30` | `24:de:c6:cc:2b:bf` | Aruba AP-105 | |
| `ap-ac7c` | Zelt 5 | `10.84.1.31` | `24:de:c6:c3:ac:7c` | Aruba AP-105 | |
| `ap-0b99` | Zelt 2 | `10.84.1.32` | `6c:f3:7f:c9:0b:99` | Aruba AP-105 | |
| `ap-c5d1` | Büro | `10.84.1.33` | `ac:a3:1e:cf:c5:d1` | Aruba AP-105 | |
| `ap-c495` | Zelt 3 | `10.84.1.34` | `ac:a3:1e:cf:c4:95` | Aruba AP-105 | |
| `ap-8f42` | Zelt 1 | `10.84.1.36` | `d8:c7:c8:c2:8f:42` | Aruba AP-105 | |
Cloud VMs:
----------
| VM Name | IPv4 | IPv6 | Location | Provider | Type | Description | Notes |
| ---------------- | -------------- | ------------------------ | -------------------------- | -------- | ---- | ----------------------------------- | --------------------------- |
| `eae-adp-jump01` | `162.55.53.85` | `2a01:4f8:c0c:1281::/64` | Germany - Nuerenberg - DC3 | Hetzner | CX11 | vpn and jump host for remote access | kvm access: `@hirnpfirsich` |
Networks:
---------
| Name | VLAN | v4 Space | v6 Space | Description |
| ---- | ---- | -------- | -------- | ----------- |
| `mgmt` | 1 |`10.84.1.0/24` | / | default network which is used for administrative and monitoring tasks|
| `clients` | 2 | `10.84.2.0/22`| / | this is where the wifi clients live |
| `GIGACUBE` | / | `192.168.8.0/24` | / | created by the gigacube. wan for our gateway
IPAM:
-----
| IP | MAC | Device | Description |
| -- | --- | ------ | ----------- |
| `10.84.1.1/24` | `78:8a:20:bd:b6:ae` | `gw-core01` | |
| `10.84.1.10/24` | `bc:cf:4f:e3:bb:8d` | `sw-access01`| |
| `10.84.1.11/24` | `bc:cf:4f:e3:ac:39` | `sw-access02` | |
| `10.84.1.21/24` | | `hyper01` | |
| `10.84.1.30/24` | `24:de:c6:cc:2b:bf` | `ap-2bbf` | |
| `10.84.1.31/24` | `24:de:c6:c3:ac:7c` | `ap-ac7c` | |
| `10.84.1.32/24` | `6c:f3:7f:c9:0b:99` | `ap-0b99` | |
| `10.84.1.33/24` | `ac:a3:1e:cf:c5:d1` | `ap-c5d1` | |
| `10.84.1.34/24` | `ac:a3:1e:cf:c4:95` | `ap-c495` | |
| `10.84.1.35/24` | `18:64:72:cf:1a:38` | `ap-1a38` | |
| `10.84.1.36/24` | `d8:c7:c8:c2:8f:42` | `ap-8f42` | |
| `10.84.1.37/24` | `00:24:6c:c8:8f:39` | `ap-8f39` | |
SSH-Hostkeys:
-------------
| Name | VLAN | v4 Space | v6 Space | Description |
| ---------- | ---- | ----------------- | -------- | --------------------------------------------------------------------- |
| `mgmt` | 1 | `10.84.1.0/24` | / | default network which is used for administrative and monitoring tasks |
| `clients` | 2 | `10.84.2.0/22` | / | this is where the wifi clients live |
| `gigacube` | / | `192.168.8.0/24` | / | created by the gigacube. wan for our gateway |
| `backbone` | / | `10.254.254.0/30` | / | tunnel network between `gw-core01` and `eae-adp-jump01` |
Configuration:
--------------
@ -112,6 +95,7 @@ uci commit
/etc/init.d/system reload
/etc/init.d/network reload
```
4. install `rsync` (will be included in the next image!)
### `ap-xxxx`
@ -165,6 +149,21 @@ Installation Questions:
- Gateway: `10.84.1.1`
- DNS Server: `10.84.1.1`
Postinstall cleanup:
* remove enterprise repos and activate community repo:
```
root@hyper01:/etc/apt# rm /etc/apt/sources.list.d/pve-enterprise.list
root@hyper01:/etc/apt# cat > /etc/apt/sources.list.d/pve-no-subscription.list << EOF
> # PVE pve-no-subscription repository provided by proxmox.com,
# NOT recommended for production use
deb http://download.proxmox.com/debian/pve bullseye pve-no-subscription
> EOF
root@hyper01:/etc/apt#
```
* update: `apt update && apt dist-upgrade -y && reboot`
* install alpine template: `pveam update && pveam download local alpine-3.16-default_20220622_amd64.tar.xz`
### eap-adp-jump01
OS:
@ -203,8 +202,21 @@ passphrase again
4. execute autoinstall
```
# cd /
# ifconfig vio0 autoconf
# ftp https://git.sr.ht/~hirnpfirsich/ffl-eae-adp/blob/master/files/eae-adp-jump01.install.conf
# install -a -f eae-adp-jump01.install.conf
[...]
# reboot
```
5. install syspatches
```
eae-adp-jump01# syspatch
[...]
eae-adp-jump01# syspatch
[...]
eae-adp-jump01# reboot
```
6. install python3 for ansible
```
eae-adp-jump01# pkg_add python3
```

View File

@ -0,0 +1 @@
<mxfile host="app.diagrams.net" modified="2022-06-30T23:13:30.514Z" agent="5.0 (X11)" etag="I4XTGIR9eIS23KVW4C-J" version="20.0.4" type="device"><diagram id="6Gaa_q8_w2FQ-ZHDfri3" name="Page-1">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</diagram></mxfile>

Binary file not shown.

After

Width:  |  Height:  |  Size: 65 KiB