Добавить README.md
This commit is contained in:
182
README.md
Normal file
182
README.md
Normal file
@@ -0,0 +1,182 @@
|
|||||||
|
# Домашнее задание 28
|
||||||
|
|
||||||
|
## Архитектура сетей
|
||||||
|
Для выполнение задания используется vagrant box Ubuntu 22.04
|
||||||
|
За основу взят Vagranfile https://github.com/erlong15/otus-linux/tree/network
|
||||||
|
|
||||||
|
В оригинальный Vagranfile внесены следующие изменения
|
||||||
|
1. Все VM будут на Ubuntu 22.04
|
||||||
|
2. Весь provision перенесен в Ansible
|
||||||
|
|
||||||
|
### Создание Vagrantfile
|
||||||
|
|
||||||
|
Зададим следующие характеристики для всех VM
|
||||||
|
|
||||||
|
- CPU - 1
|
||||||
|
- Memory - 512mb
|
||||||
|
|
||||||
|
|
||||||
|
Бедет создано 7 VM
|
||||||
|
|
||||||
|
- inetRouter
|
||||||
|
- centralRouter
|
||||||
|
- office1Router
|
||||||
|
- office2Router
|
||||||
|
- centralServer
|
||||||
|
- office1Server
|
||||||
|
- office2Server
|
||||||
|
|
||||||
|
|
||||||
|
Будут добавлены следующие сети и следующая адресация:
|
||||||
|
|
||||||
|
1. **inetRouter**
|
||||||
|
- **router-net** ip **192.168.255.1/30** link to **centralRouter**
|
||||||
|
|
||||||
|
2. **centralRouter**
|
||||||
|
- **router-net** ip **192.168.255.2/30** link to **inetRouter**
|
||||||
|
- **router-off01-net** ip **192.168.255.5/30** link to **office1Router**
|
||||||
|
- **router-off02-net** ip **192.168.255.9/30** link to **office2Router**
|
||||||
|
- **dir-net** ip **192.168.0.1/28** link to **centralServer**
|
||||||
|
- **hw-centr-net** ip **192.168.0.33/28** **no link**
|
||||||
|
- **wifi-net** ip **192.168.0.65/26** **no link**
|
||||||
|
|
||||||
|
3. **centralServer**
|
||||||
|
- **dir-net** ip **192.168.0.2/28** link to **centralRouter**
|
||||||
|
|
||||||
|
4. **office1Router**
|
||||||
|
- **router-off01-net** ip **192.168.255.6/30** link to **centralRouter**
|
||||||
|
- **dev01-net** ip **192.168.2.1/26** link to **office1Server**
|
||||||
|
- **test01-srv-net** ip **192.168.2.65/26** **no link**
|
||||||
|
- **managers-net** ip **192.168.2.129/26** **no link**
|
||||||
|
- **hw01-net** ip **192.168.2.193/26** **no link**
|
||||||
|
|
||||||
|
5. **office1Server**
|
||||||
|
- **dev01-net** ip **192.168.2.2/26** link to **office1Router**
|
||||||
|
|
||||||
|
6. **office2Router**
|
||||||
|
- **router-off02-net** ip **192.168.255.10/30** link to **centralRouter**
|
||||||
|
- **dev02-net** ip **192.168.1.1/25** link to **office2Server**
|
||||||
|
- **test02-srv-net** ip **192.168.1.129/26** **no link**
|
||||||
|
- **hw02-net** ip **192.168.1.193/26** **no link**
|
||||||
|
|
||||||
|
5. **office2Server**
|
||||||
|
- **dev02-net** ip **192.168.1.2/25** link to **office2Router**
|
||||||
|
|
||||||
|
|
||||||
|
Карта сети
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Готовый [Vagrantfile](Vagrantfile)
|
||||||
|
|
||||||
|
|
||||||
|
### Cоздание ansible.yml
|
||||||
|
|
||||||
|
Сценарий для Ansible будет выполнять следующие действия:
|
||||||
|
|
||||||
|
1. На всех VM (кроме inetRouter), будет отключен маршрут по умолчанию, который создает vagrant
|
||||||
|
2. На inetRouter будет установлен iptables-persistent, для сохранения правил iptables
|
||||||
|
3. На inetRouter будет установлен iptables-persistent, для сохранения правил iptables
|
||||||
|
4. На всех VM, которые будут выполнять роль роутеров включен net.ipv4.ip_forward, для разрешения роутинга
|
||||||
|
5. Добавлены маршруты:
|
||||||
|
- На **centralRouter** маршруты до office1 и office2
|
||||||
|
- На **office1Router** маршруты до умолчанию на centralRouter
|
||||||
|
- На **office1Server** маршруты до умолчанию на office1Router
|
||||||
|
- На **office2Router** маршруты до умолчанию на centralRouter
|
||||||
|
- На **office2Server** маршруты до умолчанию на office2Router
|
||||||
|
|
||||||
|
|
||||||
|
Готовый [ansible.yml](ansible.yml)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
### Проверка
|
||||||
|
|
||||||
|
Запускаем vagrant
|
||||||
|
```bash
|
||||||
|
alex@ubuntu-pc:~/Документы/28$ vagrant up
|
||||||
|
Bringing machine 'inetRouter' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'centralRouter' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'centralServer' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'office1Router' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'office1Server' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'office2Router' up with 'virtualbox' provider...
|
||||||
|
Bringing machine 'office2Server' up with 'virtualbox' provider...
|
||||||
|
==> inetRouter: You assigned a static IP ending in ".1" or ":1" to this machine.
|
||||||
|
==> inetRouter: This is very often used by the router and can cause the
|
||||||
|
==> inetRouter: network to not work properly. If the network doesn't work
|
||||||
|
==> inetRouter: properly, try changing this IP.
|
||||||
|
==> inetRouter: Importing base box 'ubuntu/jammy64'...
|
||||||
|
==> inetRouter: Matching MAC address for NAT networking...
|
||||||
|
==> inetRouter: You assigned a static IP ending in ".1" or ":1" to this machine.
|
||||||
|
==> inetRouter: This is very often used by the router and can cause the
|
||||||
|
==> inetRouter: network to not work properly. If the network doesn't work
|
||||||
|
==> inetRouter: properly, try changing this IP.
|
||||||
|
==> inetRouter: Checking if box 'ubuntu/jammy64' version '20241002.0.0' is up to date...
|
||||||
|
==> inetRouter: Setting the name of the VM: 28_inetRouter_1773580566544_92349
|
||||||
|
==> inetRouter: Clearing any previously set network interfaces...
|
||||||
|
==> inetRouter: Preparing network interfaces based on configuration...
|
||||||
|
inetRouter: Adapter 1: nat
|
||||||
|
inetRouter: Adapter 2: intnet
|
||||||
|
==> inetRouter: Forwarding ports...
|
||||||
|
inetRouter: 22 (guest) => 2222 (host) (adapter 1)
|
||||||
|
==> inetRouter: Running 'pre-boot' VM customizations...
|
||||||
|
==> inetRouter: Booting VM...
|
||||||
|
==> inetRouter: Waiting for machine to boot. This may take a few minutes...
|
||||||
|
inetRouter: SSH address: 127.0.0.1:2222
|
||||||
|
inetRouter: SSH username: vagrant
|
||||||
|
...
|
||||||
|
|
||||||
|
|
||||||
|
...
|
||||||
|
|
||||||
|
TASK [Gathering Facts] *********************************************************
|
||||||
|
ok: [office2Server]
|
||||||
|
|
||||||
|
TASK [add default gateway netplan] *********************************************
|
||||||
|
changed: [office2Server]
|
||||||
|
|
||||||
|
RUNNING HANDLER [apply netplan] ************************************************
|
||||||
|
changed: [office2Server]
|
||||||
|
|
||||||
|
PLAY RECAP *********************************************************************
|
||||||
|
office2Server : ok=6 changed=4 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
|
||||||
|
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
После запуска всех машин, поключимся к office1Server и с помощью tracepath посмотрим, по какому маршруту идут пакеты до 8.8.8.8
|
||||||
|
|
||||||
|
```bash
|
||||||
|
vagrant@office1Server:~$ ping 8.8.8.8
|
||||||
|
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
|
||||||
|
64 bytes from 8.8.8.8: icmp_seq=1 ttl=252 time=30.3 ms
|
||||||
|
64 bytes from 8.8.8.8: icmp_seq=2 ttl=252 time=25.1 ms
|
||||||
|
^C
|
||||||
|
--- 8.8.8.8 ping statistics ---
|
||||||
|
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
|
||||||
|
rtt min/avg/max/mdev = 25.128/27.691/30.254/2.563 ms
|
||||||
|
vagrant@office1Server:~$ tracepath 8.8.8.8 -n -m 11
|
||||||
|
1?: [LOCALHOST] pmtu 1500
|
||||||
|
1: 192.168.2.1 1.031ms
|
||||||
|
1: 192.168.2.1 2.782ms
|
||||||
|
2: 192.168.255.5 1.928ms
|
||||||
|
3: 192.168.255.1 1.004ms
|
||||||
|
4: 10.0.2.2 1.419ms
|
||||||
|
5: 192.168.50.1 5.875ms asymm 4
|
||||||
|
6: 212.1.254.233 18.778ms asymm 4
|
||||||
|
7: 212.1.241.238 5.011ms asymm 4
|
||||||
|
8: 212.1.251.35 3.846ms asymm 4
|
||||||
|
9: 178.176.150.27 6.001ms asymm 4
|
||||||
|
10: no reply
|
||||||
|
11: no reply
|
||||||
|
Too many hops: pmtu 1500
|
||||||
|
Resume: pmtu 1500
|
||||||
|
```
|
||||||
|
|
||||||
|
Видим, что пакеты проходят **office1Router** -> **centralRouter** -> **inetRouter** -> **other**
|
||||||
|
|
||||||
|
Все готово!
|
||||||
Reference in New Issue
Block a user