Commit Graph

526 Commits

Author SHA1 Message Date
Daniel Poelzleithner
14645e96a7 Merge branch 'master' of github.com:zentralwerk/network 2019-07-03 12:38:48 +02:00
Daniel Poelzleithner
e85fcc7f69 change ips 2019-07-03 12:37:39 +02:00
e488cfb1c0 dhcp: fix syntax 2019-07-02 19:51:44 +02:00
244349bd40 introduce dnscache.serv 2019-07-02 19:48:43 +02:00
a8c79a3dea switches: share vlan serv between switch-b1,b2 2019-07-02 18:46:56 +02:00
Daniel Poelzleithner
07199d3095 add new servers 2019-07-02 16:30:53 +02:00
yater
af077db925
flatbert and storage are gone!
flatbert und storage (jeweils im sinne von eigenständig anzuschließender hardware an die switches) gibt es nicht mehr. aber ersatzweise scheint sich anderes angefunden zu haben, was noch nicht genau in der konfiguration abgebildet (oder allgemein unklar) ist.
2019-07-02 04:46:42 +02:00
f4dc82251a hosts: move pub ipv6 back to up1 range 2019-07-01 19:50:02 +02:00
f0ddc642db lxc, hosts, dhcp: move pub ipv6 back to up1 range 2019-07-01 19:40:42 +02:00
8c9568ba60 hosts, subnets: move pub ipv6 back to up1 range 2019-07-01 18:34:29 +02:00
8e89cf4344 hosts: add minecraft server for the kids 2019-06-24 20:07:41 +02:00
836433e1ae switches: change c3d2-server* to bond 2019-06-24 18:47:34 +02:00
webzwo0i
13737e70d5 locally applied changes from server1 2019-06-15 21:05:53 +02:00
webzwo0i
3bfd8cfffa remove ap3 from switch c1 2019-06-15 21:03:54 +02:00
cc20ec8572 hosts, subnets: split up core for up1+up2 2019-06-04 21:41:20 +02:00
eafaccbd0b subnets: change to new ipv6 addrs here too 2019-06-04 20:59:41 +02:00
bfada876bb salt-containers: update gw6 to upstream2 for many containers 2019-06-04 20:17:31 +02:00
9296cc3e0a bird: also add new ipv6 prefix to bgp 2019-06-04 20:11:44 +02:00
52801f30db resubnet priv* with new static ipv6 addrs 2019-06-04 19:57:26 +02:00
3898d731a3 upstream2: upgrade to 50 mbps upstream 2019-06-04 19:18:33 +02:00
d8ef76d1f1 switches: clean up for c3d2-monit 2019-05-19 20:33:45 +02:00
8acba452ba switches: fix ports syntax 2019-05-15 00:32:38 +02:00
171e8547aa switches: hack around ports syntax 2019-05-15 00:31:14 +02:00
440fd600d8 switches: prepare ap34 at switch-c1 2019-05-14 23:31:23 +02:00
95062a039f switches: fix switch-a1 2019-05-14 23:28:46 +02:00
ebd454db4e switches: replace switch-a1 2019-05-14 23:25:06 +02:00
07472c406b switches: distribute priv7 to switch-a1 2019-05-14 20:20:56 +02:00
718b6cc912 switches: manually prepare switch-a1 2019-05-14 19:56:56 +02:00
webzwo0i
ddd7373979 monit -> server2 2019-05-12 14:26:58 +02:00
f25947c67f radv: change pub rdnss to upstream1 2019-04-30 19:34:25 +02:00
6ba951a79f radv: enable for c3d2-gw 2019-04-30 19:34:19 +02:00
556f9d6a57 switches: deploy server5+server6 2019-04-22 16:20:12 +02:00
f5b1ed3b86 dhcp priv19-gw: change domain-name-servers to upstream2 2019-04-16 17:52:10 +02:00
d75cded5c0 aps: fix syntax 2019-04-14 20:41:23 +02:00
bb0ea19bae cpe, switches: deploy priv7+ap39 2019-04-14 20:39:59 +02:00
18df590860 aps: retire all things priv7 2019-04-14 20:39:34 +02:00
4e014ba9ff cpe: add ap39 version 2019-04-14 19:47:12 +02:00
5041cdfc6e cpe: prepare ap39 2019-04-14 19:45:48 +02:00
1b298aeaf4 cpe, switches: prepare priv21 2019-04-09 18:02:50 +02:00
d163aa2466 upstream1: add http/s port-forwarding to public-access-proxy.hq.c3d2.de 2019-04-01 18:41:51 +02:00
29457a1cb2 cpe: decomission ap16 2019-03-12 15:39:53 +01:00
058e342d17 aps: optimize ap37 channels 2018-12-16 21:46:41 +01:00
eri451
f2b156b8c2 corrected dhcp range for priv20 2018-11-30 19:17:43 +01:00
dcb6e40d58 cpe: ap38 lan-access should be pub 2018-11-29 18:51:19 +01:00
eri451
5754b1a806 ap38 boots the first time 2018-11-27 23:53:45 +01:00
eri451
b48ebba4bf add ap38 2018-11-27 23:50:27 +01:00
fab8f200b9 move ap37 back to priv19 2018-11-27 23:35:07 +01:00
44979e6519 move priv19 to larger subnet 2018-11-27 23:33:12 +01:00
a4422a99d1 switch-b1: share priv21 with server1 2018-11-27 22:59:38 +01:00
6d52be114d cpe: fix ap37 net 2018-11-27 22:54:24 +01:00
6908b08da9 lxc-containers: fix iface name 2018-11-27 22:49:56 +01:00
739ccf8ae5 split priv19 into priv{19,21} 2018-11-27 22:41:16 +01:00
6932dcb0f8 switches: share priv20 between switch-c1 and server1 2018-11-27 21:26:13 +01:00
8784122c42 switch-c1: plug ap38 2018-11-27 21:24:00 +01:00
eri451
e1b54cab7f prepare priv20 2018-11-27 20:47:36 +01:00
6bf0687523 switches: deploy ap37 2018-11-12 21:02:10 +01:00
3190ca6121 prepare ap37 2018-11-12 20:36:03 +01:00
b13b9b7dd8 redeploy priv19 2018-11-01 17:29:58 +01:00
841f51d386 switch-d1: plug ap12 into port 7 2018-10-15 00:44:57 +02:00
6a634b7952 cpe: restaurate ap12 2018-10-14 20:50:09 +02:00
4cd6f167fb aps: update c3d2 ap channels, eap, locations 2018-09-23 21:19:54 +02:00
c08135bc13 switches: stop sharing vlan priv19 2018-09-23 21:14:56 +02:00
2e14493363 distribute priv19 everywhere 2018-09-18 23:04:43 +02:00
239aadfb84 switches: share priv18+priv19 with server1 2018-09-14 00:28:12 +02:00
0442556cfa switches: share priv18+19 between switch-b1+b2 2018-09-14 00:23:16 +02:00
7eed954e38 switches: deploy ap35 2018-09-14 00:05:07 +02:00
d83bc3ad19 switches, cpe: update ap26, deploy ap36 2018-09-14 00:03:03 +02:00
b70a961b36 cpe: prepare ap35, doc ap36 2018-09-13 23:46:10 +02:00
3657afdc73 cpe: add ap35, ap36 2018-09-13 22:05:07 +02:00
8bf1935d8f lxc-containers, dhcp: add priv18, priv19 2018-09-13 22:04:40 +02:00
8c2541eeee switches: get vlan c3d2 to switch-c1 2018-09-13 21:52:00 +02:00
ec9987aa8f cpe: update ap18 lan-access to priv9 2018-09-03 18:40:18 +02:00
0019ac59dd cpe: rm all firstboot: True 2018-09-03 16:01:06 +02:00
0251252a2b cpe: swap ap21 for ap18 2018-09-03 16:00:16 +02:00
f1d73f5f62 hosts: add mgmt addrs for ap33..64 2018-08-30 23:15:22 +02:00
2ecf1d9c64 aps: prepare ap33 + ap34 2018-08-30 23:04:54 +02:00
e5c58f246d aps: rename c3d2 SSID on 2.4 GHz to 'C3D2 legacy'
consistency
2018-08-30 23:03:53 +02:00
ce954624c3 double the pub net size 2018-08-19 23:42:21 +02:00
5564244956 prepare ap31 + ap32 2018-08-07 20:37:30 +02:00
Daniel Poelzleithner
3a76cc27ab add server4 with bond 2018-08-01 20:00:41 +02:00
75c80ccb9f switches: finally rm ap2+ap3 from switch-b1 2018-07-30 00:01:18 +02:00
e80ae40426 switches: plug switch-c3d2-main into switch-b1 2018-07-26 22:24:46 +02:00
59667adf30 bind: ctxify 'public-ns' 2018-06-26 22:46:35 +02:00
178d28a7b3 lxc-containers: change priv17-gw to upstream2 2018-06-26 22:31:40 +02:00
498be9d26e bird: enable radv for priv17..24 2018-06-26 22:14:59 +02:00
9287975d37 dhcp: fix priv17 2018-06-26 20:18:29 +02:00
b4c3b7fab7 switches: revert priv17 to access without ap18 2018-06-26 20:09:31 +02:00
5a0204cd93 Merge branch 'feature-priv17' 2018-06-26 20:03:05 +02:00
641db6d07b prepare priv17..24 2018-06-26 20:02:09 +02:00
webzwo0i
9148991841 add vlan17 2018-06-26 14:54:04 +02:00
a3d4a6df90 add Priv17
refurbished ap18 for new priv network priv17
2018-06-25 20:59:00 +02:00
f79cda27da lxc-containers: revert c3d2-anon gw6 to anon1 2018-06-25 00:28:35 +02:00
931ff41d8d upstream: update anon1 shaping 2018-06-24 21:16:33 +02:00
12c151c47a dns: update ns.c3d2.de slave 2018-06-23 03:02:42 +02:00
0258849da2 dns slave updates 2018-06-23 02:57:46 +02:00
72e3718bf5 bind, unbound: prepare dns in ctx 2018-06-23 02:04:35 +02:00
201780d2e2 lxc-containers: add gw6 for c3d2-gw + bgp 2018-06-23 00:45:34 +02:00
9d18fd5a31 lxc-containers: change all gw6 to upstream1 2018-06-23 00:37:05 +02:00
3c6fc16a90 hosts/subnet: add ctx to allow multiple inet6 addrs 2018-06-23 00:12:35 +02:00
6320ad92d0 bird: add 2a02:8106:208:5200::/56 2018-06-22 23:33:10 +02:00
webzwo0i
ad2fd2e018 remove c3d2-mgmt1 2018-06-19 15:28:59 +02:00
2c8f10b2e7 upstream1: bump shaping \o/ 2018-06-18 23:16:50 +02:00
6de70f771b cpe/switches: latest fixes 2018-06-18 23:16:39 +02:00
f122e24004 switches: pass priv15 + priv16 to b1 2018-06-14 16:17:35 +02:00
dad9e1ce27 switches: pass priv15 + priv16 to d1 2018-06-14 16:14:42 +02:00
2823308e5e deploy priv15 + priv16 2018-06-14 15:59:34 +02:00
0b71c1efdc move ap7 up one level 2018-06-12 23:36:15 +02:00
2f288ce64c switches: get vlan c3d2-mgmt1 thru c1 + b1 to server1 2018-06-10 23:10:52 +02:00
e798c4f07d switches: add c3d2-mgmt1 vlan 2018-06-10 23:02:39 +02:00
c499325f63 switches: plug ap30 into switch-b2 2018-05-30 00:21:54 +02:00
03e9afa169 cpe: add switch configuration for TL-WR1043NDv4 2018-05-24 01:13:43 +02:00
88391625b4 cpe: fix ap30 radio path 2018-05-24 00:56:07 +02:00
4fb104af56 prepare priv14 + ap30 2018-05-24 00:40:21 +02:00
9f56bd15a2 prepare switch from zentralwerk.online to zentralwerk.org
Fixes GH issue #37
2018-05-17 17:12:53 +02:00
48418f5909 wireguard: rename mullvad-de1 to mullvad
don't have to change stats now
2018-05-17 16:24:41 +02:00
edeb786ad3 salt-pillar/upstream/anon1: NAT on mullvad-de1 2018-05-17 16:10:43 +02:00
d08139e4ac pillar/wireguard/anon1.sls: add shebang 2018-05-17 15:25:36 +02:00
f0abcb522d prepare switching anon1 from openvpn to wireguard 2018-05-17 15:16:49 +02:00
Daniel Poelzleithner
ef7e548644 add server5 2018-05-08 22:06:17 +02:00
Tony Boston
98f7855133 add monit mgmt v6 address 2018-04-29 19:09:17 +02:00
057038cda9 dhcp: deploy priv13 2018-04-24 22:00:31 +02:00
ddc4077f8b cpe: update ap29 wifi psk 2018-04-24 21:51:02 +02:00
9cf35994ea priv13-gw: change gateway to upstream2 2018-04-24 21:35:28 +02:00
af1cf383af cpe: update ap29 password 2018-04-24 21:26:41 +02:00
562fe53936 cpe: prepare TL-Archer-C7v4 switching config 2018-04-24 21:17:59 +02:00
14c60093cb upstream.ipv6-tunnel: fix ipv6-tunnel-update.sh for upstream2 2018-04-14 23:51:56 +02:00
c941f18f06 password change on ap29 2018-04-14 23:46:25 +02:00
4ec750f083 different ifname prefixes for nightly
related to issue #39
2018-04-14 22:41:59 +02:00
bf6f4ae912 upstream.ipv6-tunnel: add ipv6-tunnel-update.sh for upstream2 2018-04-14 22:32:06 +02:00
d278669f64 corrected path for ap29 2018-04-14 18:52:13 +02:00
772962d738 swtich config for ap29/priv13 2018-04-12 21:49:32 +02:00
3fb3968e7a weil vim :/ 2018-04-12 20:50:49 +02:00
d46304d8da pgp messages are weird in yaml 2018-04-12 20:44:57 +02:00
a8ca6f9071 private network for jungnickel-fotografie 2018-04-12 20:29:24 +02:00
Tony Boston
3abd1d561c changed monit mgmt ip 2018-04-07 22:23:55 +02:00
139cd8434d cpe: fix ap24 2018-03-29 16:44:44 +02:00
34fd4ee758 plug ap24 + ap25 into switch-b2 2018-03-29 16:31:25 +02:00
dba09fbd39 cpe: fix ap24+ap25 lan-access 2018-03-29 15:47:34 +02:00
512c9da8db cpe: prepare deploying ap24 + ap25 2018-03-29 15:35:39 +02:00
16d929532a lxc-containers server1: fix priv12-gw 2018-03-27 19:56:20 +02:00
a9640ec188 deploy priv12 2018-03-27 18:09:21 +02:00
webzwo0i
bc75e99acc server3, server4 2018-02-03 14:46:44 +01:00
82143e532d switches: share vlan 'c3d2' between switch-b1 and switch-b2 2018-01-19 00:28:33 +01:00
b90da80ec8 salt-pillar: fix access syntax 2018-01-18 23:29:06 +01:00
374e48f05e salt-pillar: deploy c3d2-server3 to switch-b2 2018-01-18 23:27:27 +01:00
46da9b56b5 switches: fix c3d2 vlan on switch-b1 2018-01-09 15:44:37 +01:00
b9ca6d2312 switches: change c3d2-thinkbert to mode: access 2018-01-09 15:41:40 +01:00
7e714774e8 cpe: quote a string 2018-01-02 18:28:14 +01:00
2e11699c39 lxc-containers: route priv4 over upstream2 2018-01-02 18:23:24 +01:00
3afba81cbf cpe: update ap status 2017-12-19 20:11:02 +01:00
63aba0f380 cpe: fix TL-WR740N radio hwpath 2017-12-19 18:01:46 +01:00
71cd69fd6d swap broken ap6 with ap26
Fixes GH issue #36
2017-12-19 17:59:26 +01:00
98a4c3b03c lxc-containers: route priv9 over upstream2 2017-12-12 23:19:00 +01:00
ee9c83536a lxc-containers: route priv5 over upstream2 2017-12-11 00:27:33 +01:00
b60bd5cb7a cpe: prepare ap24-ap28 2017-12-11 00:15:55 +01:00
cf53b8d1a5 lxc-containers: change all gw6 to anon1
vodafone sucks
2017-11-12 00:29:20 +01:00
c614a2b8e1 prepare radio network 2017-11-09 23:33:13 +01:00
47d4438aa0 cpe: change ap15 psk 2017-10-30 19:39:00 +01:00
3a65b72561 cpe: change ap15 psk 2017-10-30 15:32:46 +01:00
5dd2d248de ap15: setup ssid 2017-10-30 15:16:29 +01:00
2310701b0e lxc-containers: route priv7 through upstream2 2017-10-28 21:59:18 +02:00
b748fa0b35 ap15 prep 2017-10-28 21:57:04 +02:00
518c43530f aps: optimize wifi channels 2017-10-26 19:03:27 +02:00
c6c1e30366 switches: swap switch-b2 14+15 2017-10-26 17:13:27 +02:00
24c649eff6 deploy priv11 2017-10-26 17:01:05 +02:00
c27b2ed850 lxc-containers: fix priv10-gw hwaddrs 2017-10-24 22:29:40 +02:00
8aef85a49d lxc-containers: fix priv10-gw 2017-10-24 22:07:24 +02:00
c067a2c05f switches: plug priv10 into switch-b2 2017-10-24 22:05:22 +02:00
1c8c2f4483 switches: plug priv9 into switch-b2 priv9 2017-10-24 21:52:08 +02:00
34485d3f51 add priv10 2017-10-24 20:59:54 +02:00
ef7d8a8a33 lxc-containers: change priv8 gw to upstream2 2017-10-24 20:54:53 +02:00
541f70b4ed switch-b2: replace ap20 with ap16 2017-10-20 01:28:02 +02:00
53300ec741 aps: fix ap16/ap20 locations 2017-10-19 20:49:50 +02:00
022399637d contact.md: update 2017-10-09 20:16:36 +02:00
root
1120ae5de7 more static mac addresses 2017-10-07 19:03:17 +02:00
885510e633 commit recent changes 2017-10-07 18:39:01 +02:00
c66d3db93a prepare switch-c3d2-main 2017-10-07 18:30:39 +02:00
c793304a7e C3D2.eap on 2.4GHz band 2017-07-13 23:38:58 +02:00
680c25bae7 cpe: ip-ify radius server 2017-07-13 01:28:17 +02:00
a0eaa2968a cpe: ip-ify radius server 2017-07-13 01:14:31 +02:00
869bfc6c56 due to required auth_server_secret 2017-07-13 01:09:53 +02:00
6bb320a118 cpe: fix whitespace 2017-07-13 00:32:33 +02:00
4323caeed1 aps: add C3D2.eap for ap3 too 2017-07-13 00:22:03 +02:00
2361978c55 configurable server and port 2017-07-03 23:34:45 +02:00
131fc9c73c noauth eap with radius.hq.c3d2
so a network proofs its validity to the subscriber
2017-06-24 05:09:56 +02:00
f44bed1286 aps, switches: deploy ap23 2017-06-13 20:08:19 +02:00
root
07b838a4da Merge branch 'master' of https://github.com/zentralwerk/network 2017-05-29 19:47:45 +02:00
webzwo0i
d59f9672d4 übergangsweise nutzen wir eine ip aus dem mgmt addressbereich damit das
monitoring SNMP machen darf
2017-05-28 20:17:58 +02:00
root
07722b046e Merge branch 'master' of https://github.com/zentralwerk/network 2017-05-28 19:37:16 +02:00
webzwo0i
f7d7938ac9 monitoring needs mgmt vlan 2017-05-28 19:22:32 +02:00
root
d293623c1b Merge branch 'master' of https://github.com/zentralwerk/network 2017-05-27 19:05:39 +02:00
webzwo0i
a5cd1465b9 add raspberry 2017-05-27 19:01:57 +02:00
d52e9e6fe7 ipv6-tunnel: migrate to systemd-networkd 2017-05-18 23:52:24 +02:00
5365eb116e prepare ipv6-tunnel with he.net for upstream2 2017-05-17 01:07:06 +02:00
b46161aea7 move ap22 2017-05-16 16:31:42 +02:00
0c814a7303 switches: create ap2-tmp on switch-b1 2017-05-11 23:11:20 +02:00
12a5cb86ac switches: deploy ap22 2017-05-11 22:02:51 +02:00
4e7e19815a cpe: fix TL-WR740N radio adapter path 2017-05-11 21:16:15 +02:00
317e1f4cac cpe: rm ap22 firstboot 2017-05-11 21:11:00 +02:00
1dfd67725c cpe: fix ap22 password 2017-05-11 21:10:27 +02:00