network/salt-pillar/switches/init.sls

573 lines
14 KiB
Plaintext

#!yaml|gpg
switches:
switch-b1:
model: 'linksys-srw2048'
location: Haus B Souterrain
# Ports 1-24 oben
# Ports 25-48 unten
ports:
switch-b2:
mode: bond
group: 3
ports:
- g25
- g26
- g27
- g28
mgmt:
mode: access
ports:
- g1
iso1:
mode: access
ports:
- g2
iso2:
mode: access
ports:
- g3
iso3:
mode: access
ports:
- g4
ap8:
mode: trunk
ports:
- g16
ap23:
mode: trunk
ports:
- g10
switch-c1:
mode: bond
group: 2
ports:
- g29
- g30
- g31
- g32
switch-d1:
mode: trunk
ports:
- g34
server1:
mode: trunk
ports:
# - g46
# - g47
# - g48
- g24
server2:
mode: bond
group: 1
ports:
- g12
- g38
- g39
- g40
server5:
mode: bond
group: 6
ports:
- g17
- g18
- g19
- g20
server6:
mode: bond
group: 8
ports:
- g5
- g6
- g7
- g8
server7:
mode: bond
group: 7
ports:
- g9
- g11
- g14
- g15
server8:
mode: bond
group: 5
ports:
- g35
- g36
- g37
- g13
serv:
mode: access
ports:
# vps1
- g22
# c3d2-monit:
# mode: trunk
# ports:
# - g21
# - g45
c3d2:
mode: access
ports:
- g23
switch-c3d2-main:
mode: bond
group: 4
ports:
- g41
- g42
- g43
- g44
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQf/c9ysLI/ePzYtqz7AyoKBZQKFau/pEpQDswA5hdJiRSgh
TQ73u7NVVYTGk/sZ2awAVLQ/KUM7JPMHMXK1+uPIQq0/+Xg/v5zJdaWwRUUIGtCz
Sg3BpV41a/NgxlJbh0bJw0CjlgTHF7qIhiQNoHx/DnYECab8bMr8i7NziWXZl1kf
6A5BqAu5siaaqngn5wYmMdstl48lejiDNgtZSeti/1FV9fk4D2w9zEMHZnTS2M+O
TzDk2lsAA4CEXeQBsBOSMsbHDy6yo4CzuNk61ALfH8a3Tn1sQjfSLo021xAvqj5U
nS9/L/57ffRILzz1hfURBV0N/VnDqi5enSZIvVU2WtJLAZEAghgXjE7rfjsN1ypG
mYUz1OQ9cLG8ttSL9+fhYc8rCW0jx8KD5HKPiNHnR1x0s2RbUnprQdlFgC4go8U7
DRE15mc7GkkYbvIl
=/BZc
-----END PGP MESSAGE-----
switch-b2:
model: '3com-4200G'
location: Haus B Souterrain
# Ports 1-24 oben
# Ports 25-48 unten
# Ports 49-52 unten seitlich (optisch)
# 10GE hinten
ports:
switch-b1:
mode: bond
group: 2
ports:
- TenGigabitEthernet 1/1/1
- GigabitEthernet 1/0/25
- GigabitEthernet 1/0/26
- GigabitEthernet 1/0/27
- GigabitEthernet 1/0/28
mgmt:
mode: access
ports:
- GigabitEthernet1/0/1
- GigabitEthernet1/0/41 # server3
- GigabitEthernet1/0/42 # server1
- GigabitEthernet1/0/43 # unused
- GigabitEthernet1/0/44 # server5
- GigabitEthernet1/0/45 # server6
- GigabitEthernet1/0/46 # server7
- GigabitEthernet1/0/47 # server8
- GigabitEthernet1/0/48 # server9
priv1:
mode: access
ports:
- GigabitEthernet 1/0/3
priv2:
mode: access
ports:
- GigabitEthernet 1/0/4
priv3:
mode: access
ports:
- GigabitEthernet 1/0/5
ap42:
mode: trunk
ports:
- GigabitEthernet 1/0/6
ap5:
mode: trunk
ports:
- GigabitEthernet 1/0/7
ap1:
mode: trunk
ports:
- GigabitEthernet 1/0/8
ap11:
mode: trunk
ports:
- GigabitEthernet 1/0/10
ap15:
mode: trunk
ports:
- GigabitEthernet 1/0/12
ap53:
mode: trunk
ports:
- GigabitEthernet 1/0/15
pub:
mode: access
ports:
- GigabitEthernet 1/0/11
- GigabitEthernet 1/0/20
- GigabitEthernet 1/0/24
ap18:
mode: trunk
ports:
- GigabitEthernet 1/0/18
ap51:
mode: trunk
ports:
- GigabitEthernet 1/0/13
server3:
mode: bond
group: 1
ports:
- GigabitEthernet1/0/30
- GigabitEthernet1/0/31
server9:
mode: bond
group: 3
ports:
- GigabitEthernet1/0/2
- GigabitEthernet1/0/29
- GigabitEthernet1/0/32
ap24:
mode: trunk
ports:
- GigabitEthernet 1/0/34
ap25:
mode: trunk
ports:
- GigabitEthernet 1/0/35
ap29:
mode: trunk
ports:
- GigabitEthernet 1/0/36
ap30:
mode: trunk
ports:
- GigabitEthernet 1/0/22
ap35:
mode: trunk
ports:
- GigabitEthernet 1/0/23
priv19:
mode: access
ports:
- GigabitEthernet 1/0/40
ap37:
mode: trunk
ports:
- GigabitEthernet 1/0/39
ap39:
mode: trunk
ports:
- GigabitEthernet 1/0/17
ap40:
mode: trunk
ports:
- GigabitEthernet 1/0/21
priv24:
mode: access
ports:
- GigabitEthernet 1/0/14
- GigabitEthernet 1/0/16
ap41:
mode: trunk
ports:
- GigabitEthernet 1/0/37
ap55:
mode: trunk
ports:
- GigabitEthernet 1/0/19
ap56:
mode: trunk
ports:
- GigabitEthernet 1/0/9
ap54:
mode: trunk
ports:
- GigabitEthernet 1/0/38
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQf+N6p+ZuZsx1AF7CI2TKsxxEU1EyM1DIqtk7d5DoidTIZ4
zYnL9X72VSQiNRtkk955wU5sStanDjQMxBUcEO/bEQq6Cjy7tgWZZXEfCedM3Xzq
MEs861JCHdpBfL/zehHZxjmGe+St0xRGn4yBZcP/835Sl6t6q4znPFabcgDmIItX
ZsjaQfKd0La8GclHI1Pib7UuI6fvD70GkcQHoKoM1cOw8HQRpY953RnTNDKUk7is
ZjvhHkPUU2smLxJhCCwAiARq7TZceI0orfCkjQ87sRXavO82dn2Vq3mD9iVwnYY+
mVuYBhqguwq0HoOomHKf/JbQc7Gz8E+SBHWvjCUvVtJLARwt3KUvZGY28oKm7pcs
ITJJEiVPfnS2CtIm7T0nCm4LMiE20GWhhJIh8gIQuORlUvtMX0R29v3cVcNYCbIh
+2WKG1F/gum7at/q
=On3v
-----END PGP MESSAGE-----
switch-c1:
model: 'HP-procurve-2824'
location: Turm C Keller, bei Kabelanschluessen
# Ports 1-19 ungerade oben
# Ports 2-20 gerade unten
# (15, 16 gehen aktuell nach Haus A)
# Ports 21-24 unten seitlich (optional optisch)
# Port 7 geht aktuell nach Turm C Erdgeschoss und dadurch zur Ecce
ports:
switch-b1:
mode: bond
group: 2
ports: 21-24
up1:
mode: access
ports: '1'
nostp: true
up2:
mode: access
ports: '2'
nostp: true
# up3:
# mode: access
# ports: '3'
# nostp: true
up4:
mode: access
ports: '4'
nostp: true
# "Antenne"
switch-dach:
mode: trunk
ports: '6'
iso1:
mode: access
ports: '9'
iso2:
mode: access
ports: '10'
iso3:
mode: access
ports: '11'
iso4:
mode: access
ports: '12'
iso5:
mode: access
ports: '13'
iso6:
mode: access
ports: '14'
# Saal A: durch dummen PoE-Switch mit Aggregation an ap44-50 + switch-a1
switch-a1:
mode: bond
group: 1
ports: 15-16
lacp: no
ap19:
mode: trunk
ports: 17
ap26:
mode: trunk
ports: 18
ap17:
mode: trunk
ports: 19
ap38:
mode: trunk
ports: 7
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQgAhPMG6VKUFLVNZmVfZ6P21CrXRmUeExuxIg4QIrYtKfYe
cxWst/IuHnDyL2TP8yGb00sjz7o0psZ9Z+zRCi/ONONyNzee103ymjXxk0Ygekid
1IGVeSTqskrgOl53mFZEfP4nBcOqzcNFjMkm0c5B2OmHHHOokOJ5Xzsya120SGXk
JnYFVsRD6GFwuF88pgQ5VrGd5/drMaIrNkJ69dyfvYdHRTd0UgtiZFOMesRYFFP7
+QdSW1MFoVZnjZgLeoNF/efIhHnTdClROCMZBYU5Z3pQcHAfE4GN3w+MceP/+5EY
z3wuSNpsuYNr8NnEDvofTJGdOLuclE6JPFvJMg1QptJKASfn3ZlOrL4ohbPGaDQ6
z1P+6DJXliXS7dBdxH0bsB2qRZslmcj286D9bPgTsuvCzOaxcTtkM8y76gVVOVBI
TN+j1/OdlXyVmTM=
=XUUi
-----END PGP MESSAGE-----
# Unused: 3
switch-d1:
model: 'TL-SG3210'
location: Turm D Elektroraum
ports:
switch-b1:
mode: bond
ports: 1
group: 1
ap9:
mode: trunk
ports: 5
ap10:
mode: trunk
ports: 4
ap7:
mode: trunk
# Turm D, 5. Etage
ports: 8
ap22:
mode: trunk
ports: 2
ap12:
mode: trunk
ports: 7
ap3:
mode: trunk
ports: 3
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQgAkS9jHdnqPPary/yduPsA3Ya1rrERxfZxJnvicexUKl7b
eJlLe8e1BQE3BTaqkvLcBrGztBBvrgnv+kzmSTCd5jbL2/fFOdhedBsNjWpYtA7A
o6PPfYHka/Km4J/MihzVac9XUbBFhN0ETGYbGi0upPHHEKht3bUNzqkzvHxhQ8lJ
D7dDPs3vJXx3Ey8taZawdLJ9IcthvSojt8Un5A/SpdroW2CF4u0Gubuz+9D5i0T5
vXDqDQqEewu7pofxZ8TR4PY9PNHT9kmHyI2sIq1AkqP0Mn8wKP7dJVrUS3Z+xBUt
/f0B+8a0EJDuQBB2p7yRlBcg5d58TGB59pptmLpQ39JDAbZxHQymPKy3R14k1wKa
fYvaMBkaGtcu/foCb1r3xfAZOJSF5MT754wjvxB1bl/iizqJQm+WN3YAkja/Gwh+
J31/Ng==
=e45t
-----END PGP MESSAGE-----
switch-c3d2-main:
model: 'HP-procurve-2824'
location: C3D2
# Ports 1-19 ungerade oben
# Ports 2-20 gerade unten
# (15, 16 gehen aktuell nach Haus A)
# Ports 21-24 unten seitlich (optional optisch)
# Unused Port 7 geht aktuell nach Turm C Erdgeschoss
ports:
mgmt:
mode: access
ports: 1
switch-b1:
mode: bond
group: 1
ports: 21-24
ap2:
mode: trunk
ports: 3
ap31:
mode: trunk
ports: 2
# For testing a new ap
ap-test1:
mode: trunk
ports: 4
# For testing a new ap
ap-test2:
mode: trunk
ports: 5
iso4:
mode: access
ports: 6
# Freifunk Mesh-on-LAN
bmx:
mode: access
ports: 7
c3d2:
mode: access
ports: '8-20'
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQf+P65UkLF8x+pDNEoeSISflL8QTPih/D8lP5CK5gYTaL6x
0SoVanRYdXERiXdZ1FXw/zorg76Ofpa35k+88wRK7XxGDkP62TC26Qeu8ZbCX4kR
t+IQSlKk74YTCC15vBFF+pAa5PFCWPBiWcl5yKTxCNy7e/wHSVtusia6WcmvwJJy
M4cY8uPiKEtwLqwZ6hJIjNbjU8yFRI3EQ1irTcd/6WBErIoaaeQT5GpUvPQ6xa6R
lfw0OVmKK31Kmwgs+Wty/hiBlASMGdUQZDHVwsoLyFIpWejH+lfY4RMkdqz8BP2a
CFxQMWipc4lXMw1n4oXpkr5DPAYB0d2vDPL2sKV5KNJJAe9RC4rLlk+9uYqE4PyK
RswLCZhHuKqFa07ufkRpbFGyywAa70UXtbvPkbJb6G1mJ75ozXTS11JqhAdnHCBC
2i+VD94/nzLdvg==
=1SbG
-----END PGP MESSAGE-----
# switch-a1-poe:
# password: |
# ----BEGIN PGP MESSAGE-----
# hQEMA2PKcvDMvlKLAQf/ZSCPgN2uBCz3eZgIhOlTsAIxOHugCrROoXzmnV+XiD8j
# BP3T/KWCooFhdiWx9STyVJWk/tKz3UoVm+PmfYVeM7N3/FCXvN9N8eM1LNat/KVF
# frAu9raBhvH12DOBvSa5ouC9dbM/ggh/joJBUhIppGZk0aBGTjYcdxnQPGZmkwej
# ysnrKedMuIXGh+NWGusTe2Pgs81Ei5w/rnRp4jJZd4YD5hIVnO2KqPT50mlmc4Hi
# 6eg65oqFrzG5bJb1NYObt3D66nHpKZPoOXiw2Gg87twFvRsV7x+dyXuNvsOr3nIb
# Keeib9sXus67+zNwGJ5MmnZz5kM+iLE3AcTAQ67andJEAQAvyoDfxMMlMqhx/QNU
# VlTLZwdATmZ/JdCSoN+ti1+XG+7Lo7faOpUW/CxYD5iiSHsrA1/TvhZkVDB+Oqmx
# NJUMaDQ=
# =kig9
# -----END PGP MESSAGE-----
switch-a1:
model: 'TL-SG3210'
location: Saal A
ports:
# ZW stage
priv25:
mode: access
ports:
- 2
- 3
- 4
- 5
pub:
mode: access
ports:
- 8
# ZW office
priv31:
mode: access
ports:
- 6
switch-c1:
# Eigentlich gehen diese Ports durch das dumme PoE-Switch mit
# statisch konfigurierter Aggregation
mode: trunk
ports: 7
iso4:
mode: access
ports:
- 1
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQgAkS9jHdnqPPary/yduPsA3Ya1rrERxfZxJnvicexUKl7b
eJlLe8e1BQE3BTaqkvLcBrGztBBvrgnv+kzmSTCd5jbL2/fFOdhedBsNjWpYtA7A
o6PPfYHka/Km4J/MihzVac9XUbBFhN0ETGYbGi0upPHHEKht3bUNzqkzvHxhQ8lJ
D7dDPs3vJXx3Ey8taZawdLJ9IcthvSojt8Un5A/SpdroW2CF4u0Gubuz+9D5i0T5
vXDqDQqEewu7pofxZ8TR4PY9PNHT9kmHyI2sIq1AkqP0Mn8wKP7dJVrUS3Z+xBUt
/f0B+8a0EJDuQBB2p7yRlBcg5d58TGB59pptmLpQ39JDAbZxHQymPKy3R14k1wKa
fYvaMBkaGtcu/foCb1r3xfAZOJSF5MT754wjvxB1bl/iizqJQm+WN3YAkja/Gwh+
J31/Ng==
=e45t
-----END PGP MESSAGE-----
switch-dach:
model: 'HP-procurve-2824'
location: Dach
ports:
mgmt:
mode: access
ports: '1'
switch-c1:
mode: trunk
ports: '24'
# Starlink
up3:
mode: access
ports: '3'
nostp: true
# Freifunk Mesh-on-LAN
bmx:
mode: access
ports: '10-19'
serv:
mode: access
ports: '6-9'
password: |
-----BEGIN PGP MESSAGE-----
hQEMA2PKcvDMvlKLAQgAkS9jHdnqPPary/yduPsA3Ya1rrERxfZxJnvicexUKl7b
eJlLe8e1BQE3BTaqkvLcBrGztBBvrgnv+kzmSTCd5jbL2/fFOdhedBsNjWpYtA7A
o6PPfYHka/Km4J/MihzVac9XUbBFhN0ETGYbGi0upPHHEKht3bUNzqkzvHxhQ8lJ
D7dDPs3vJXx3Ey8taZawdLJ9IcthvSojt8Un5A/SpdroW2CF4u0Gubuz+9D5i0T5
vXDqDQqEewu7pofxZ8TR4PY9PNHT9kmHyI2sIq1AkqP0Mn8wKP7dJVrUS3Z+xBUt
/f0B+8a0EJDuQBB2p7yRlBcg5d58TGB59pptmLpQ39JDAbZxHQymPKy3R14k1wKa
fYvaMBkaGtcu/foCb1r3xfAZOJSF5MT754wjvxB1bl/iizqJQm+WN3YAkja/Gwh+
J31/Ng==
=e45t
-----END PGP MESSAGE-----