Firewall Switch - Revision history

imported>Jacob at 21:14, 6 March 2020

2020-03-06T21:14:56Z

← Older revision		Revision as of 16:14, 6 March 2020
Line 17:		Line 17:
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="aap.~~eample~~.com"		hostname="aap.example.com"
	ifconfig_em1="inet 192.168.99.10 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.99.10 netmask 255.255.255.0"
	ifconfig_em0="inet 10.9.9.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.9.9.1 netmask 255.255.255.0"
Line 32:		Line 32:
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="noot.~~sjakio~~.com"		hostname="noot.example.com"
	ifconfig_em1="inet 192.168.99.20 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.99.20 netmask 255.255.255.0"
	ifconfig_em0="inet 10.9.9.20 netmask 255.255.255.0"		ifconfig_em0="inet 10.9.9.20 netmask 255.255.255.0"
Line 52:		Line 52:

	Note:		Note:
	Important the only 2 ip addresses open for ssh are 10.0.0.1 and 10.0.0.20. So each of the 2 fire walls need to have one of these ip addresses, otherwise no ssh connection can be made.		Important the only 2 ip addresses open for ssh are 10.9.9.1 and 10.9.9.20. So each of the 2 fire walls need to have one of these ip addresses, otherwise no ssh connection can be made.

	<hr>		<hr>

imported>Jacob: /* Connect to noot */

2020-03-06T21:13:52Z

Connect to noot

← Older revision		Revision as of 16:13, 6 March 2020
Line 17:		Line 17:
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="aap.~~sjakio~~.com"		hostname="aap.eample.com"
	ifconfig_em1="inet 192.168.99.10 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.99.10 netmask 255.255.255.0"
	ifconfig_em0="inet 10.9.9.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.9.9.1 netmask 255.255.255.0"

imported>Jacob at 21:13, 6 March 2020

2020-03-06T21:13:29Z

← Older revision		Revision as of 16:13, 6 March 2020
Line 5:		Line 5:

	== Synopsis ==		== Synopsis ==
	To identify the firewall hardware the 2 firewalls each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "~~fire~~" and the inactive firewall has dns name "~~firebox~~".		To identify the firewall hardware the 2 firewalls each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "aap" and the inactive firewall has dns name "noot".

	Active firewall start point is:		Active firewall start point is:
	Green em0 10.0.0.1		Green em0 10.9.9.1
	Red em1 192.168.9.10		Red em1 192.168.99.10

	To switch firewall use this sequence.		To switch firewall use this sequence.

	== Connect to ~~firebox~~ ==		== Connect to noot ==
	Chance the rc.conf file to make this the active firewall		Chance the rc.conf file to make this the active firewall
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="aap.sjakio.com"		hostname="aap.sjakio.com"
	ifconfig_em1="inet 192.168.9.10 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.99.10 netmask 255.255.255.0"
	ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.9.9.1 netmask 255.255.255.0"
	>$ sudo cp rc.conf_v013 /etc/rc.conf		>$ sudo cp rc.conf_v013 /etc/rc.conf
	Then change the DHCP values for their respective network cards. There are 2 files in the configuration directory one for each firewall copy the name of the active firewall to /usr/local/etc/.		Then change the DHCP values for their respective network cards. There are 2 files in the configuration directory one for each firewall copy the name of the active firewall to /usr/local/etc/.
Line 28:		Line 28:
	>$ sudo cp dhcpd-firewall2.conf_v001 /usr/local/etc/dhcpd-firewall.conf		>$ sudo cp dhcpd-firewall2.conf_v001 /usr/local/etc/dhcpd-firewall.conf

	== Connect to ~~fire~~ ==		== Connect to aap ==
	Chance the rc.conf file to make this the inactive firewall		Chance the rc.conf file to make this the inactive firewall
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="~~firebox~~.sjakio.com"		hostname="noot.sjakio.com"
	ifconfig_em1="inet 192.168.9.20 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.99.20 netmask 255.255.255.0"
	ifconfig_em0="inet 10.0.0.20 netmask 255.255.255.0"		ifconfig_em0="inet 10.9.9.20 netmask 255.255.255.0"
	>$ sudo cp rc.conf_v013 /etc/rc.conf		>$ sudo cp rc.conf_v013 /etc/rc.conf

Line 41:		Line 41:

	== Restart firewalls ==		== Restart firewalls ==
	Restart ~~firebox~~ first.		Restart noot first.
	>$ sudo shutdown -r now && exit		>$ sudo shutdown -r now && exit
	Then when the ssh connection is broken restart ~~fire~~.		Then when the ssh connection is broken restart aap.
	>$ sudo shutdown -r now && exit		>$ sudo shutdown -r now && exit

	==Adapt workstations==		==Adapt workstations==
	The hosts certificates are changed so the knownhosts files on workstations have to be adapted.		The hosts certificates are changed so the knownhosts files on workstations have to be adapted.
	On the workstation edit ~/.ssh/known_hosts and remove entries for ~~fire~~, ~~firebox~~, 10.0.0.1 and 10.0.0.20		On the workstation edit ~/.ssh/known_hosts and remove entries for aap, noot, 10.9.9.1 and 10.9.9.20
	>$ vim ~/.ssh/known_hosts		>$ vim ~/.ssh/known_hosts

imported>Jacob: /* Connect to firebox */

2020-03-06T21:11:03Z

Connect to firebox

← Older revision		Revision as of 16:11, 6 March 2020
Line 17:		Line 17:
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
	>$ vim rc.conf_v013		>$ vim rc.conf_v013
	hostname="~~fire~~.sjakio.com"		hostname="aap.sjakio.com"
	ifconfig_em1="inet 192.168.9.10 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.9.10 netmask 255.255.255.0"
	ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"

imported>Jacob: /* Synopsis */

2020-02-21T14:27:18Z

Synopsis

← Older revision		Revision as of 09:27, 21 February 2020
Line 5:		Line 5:

	== Synopsis ==		== Synopsis ==
	To identify the firewall hardware the 2 ~~firewall~~ each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "fire" and the inactive firewall has dns name "firebox".		To identify the firewall hardware the 2 firewalls each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "fire" and the inactive firewall has dns name "firebox".

	Active firewall start point is:		Active firewall start point is:

imported>Jacob at 03:32, 17 February 2020

2020-02-17T03:32:54Z

← Older revision		Revision as of 22:32, 16 February 2020
Line 47:		Line 47:

	==Adapt workstations==		==Adapt workstations==
	The hosts certificates are changed so the ~~knohosts~~ files on workstations have to be adapted.		The hosts certificates are changed so the knownhosts files on workstations have to be adapted.
	On the workstation edit ~/.ssh/known_hosts and ~~remiove~~ entries for fire, firebox, 10.0.0.1 and 10.0.0.20		On the workstation edit ~/.ssh/known_hosts and remove entries for fire, firebox, 10.0.0.1 and 10.0.0.20
	>$ vim ~/.ssh/known_hosts		>$ vim ~/.ssh/known_hosts

imported>Jacob at 21:37, 1 February 2020

2020-02-01T21:37:10Z

← Older revision		Revision as of 16:37, 1 February 2020
Line 46:		Line 46:
	>$ sudo shutdown -r now && exit		>$ sudo shutdown -r now && exit

			==Adapt workstations==
	The hosts certificates are changed so the knohosts files on workstations have to be adapted.		The hosts certificates are changed so the knohosts files on workstations have to be adapted.
	On the workstation edit ~/.ssh/known_hosts and remiove entries for fire, firebox, 10.0.0.1 and 10.0.0.20		On the workstation edit ~/.ssh/known_hosts and remiove entries for fire, firebox, 10.0.0.1 and 10.0.0.20

imported>Jacob at 21:36, 1 February 2020

2020-02-01T21:36:32Z

← Older revision		Revision as of 16:36, 1 February 2020
Line 4:		Line 4:
	<hr>		<hr>

			== Synopsis ==
	To identify the firewall hardware the 2 firewall each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "fire" and the inactive firewall has dns name "firebox".		To identify the firewall hardware the 2 firewall each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "fire" and the inactive firewall has dns name "firebox".

Line 12:		Line 13:
	To switch firewall use this sequence.		To switch firewall use this sequence.

	Connect to firebox		== Connect to firebox ==
	Chance the rc.conf file to make this the active firewall		Chance the rc.conf file to make this the active firewall
	>$ cd ~/conf/etc		>$ cd ~/conf/etc
Line 27:		Line 28:
	>$ sudo cp dhcpd-firewall2.conf_v001 /usr/local/etc/dhcpd-firewall.conf		>$ sudo cp dhcpd-firewall2.conf_v001 /usr/local/etc/dhcpd-firewall.conf

	Connect to fire		== Connect to fire ==
			Chance the rc.conf file to make this the inactive firewall
			>$ cd ~/conf/etc
			>$ vim rc.conf_v013
			hostname="firebox.sjakio.com"
			ifconfig_em1="inet 192.168.9.20 netmask 255.255.255.0"
			ifconfig_em0="inet 10.0.0.20 netmask 255.255.255.0"
			>$ sudo cp rc.conf_v013 /etc/rc.conf

	~~>$ cd ~/conf/etc~~		>$ cd ../isc-dhcpd/
	~~>$ vim rc.conf_v013~~		>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf
	~~Make active~~
	~~hostname="firebox.sjakio.com"~~
	~~ifconfig_em1="inet 192.168.9.20 netmask 255.255.255.0"~~
	~~ifconfig_em0="inet 10.0.0.20 netmask 255.255.255.0"~~
	~~>$ sudo cp rc.conf_v013 /etc/rc.conf~~

	>$ cd ../isc-dhcpd/
	>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf


	~~In both execute.~~
	~~>$ sudo shutdown -r now && exit~~

			== Restart firewalls ==
			Restart firebox first.
			>$ sudo shutdown -r now && exit
			Then when the ssh connection is broken restart fire.
			>$ sudo shutdown -r now && exit

			The hosts certificates are changed so the knohosts files on workstations have to be adapted.
	On the workstation edit ~/.ssh/known_hosts and remiove entries for fire, firebox, 10.0.0.1 and 10.0.0.20		On the workstation edit ~/.ssh/known_hosts and remiove entries for fire, firebox, 10.0.0.1 and 10.0.0.20
	>$ vim ~/.ssh/known_hosts		>$ vim ~/.ssh/known_hosts

	Note:		Note:

imported>Jacob at 21:31, 1 February 2020

2020-02-01T21:31:11Z

← Older revision		Revision as of 16:31, 1 February 2020
Line 20:		Line 20:
	ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"
	>$ sudo cp rc.conf_v013 /etc/rc.conf		>$ sudo cp rc.conf_v013 /etc/rc.conf
	Then change the DHCP values for their respective network cards. There are 2 files in the configuration directory		Then change the DHCP values for their respective network cards. There are 2 files in the configuration directory one for each firewall copy the name of the active firewall to /usr/local/etc/.
	~~For firewall1 Hardware~~
	>$ cd ../isc-dhcpd/		>$ cd ../isc-dhcpd/
			For firewall1 active this will be:
	>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf		>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf
			For firewall2 active this will be
			>$ sudo cp dhcpd-firewall2.conf_v001 /usr/local/etc/dhcpd-firewall.conf

	Connect to fire		Connect to fire

imported>Jacob at 21:28, 1 February 2020

2020-02-01T21:28:42Z

← Older revision		Revision as of 16:28, 1 February 2020
Line 4:		Line 4:
	<hr>		<hr>

	~~The~~ 2 ~~firewalls~~ have a file in their root directory called either firewall1 or firewall2. The active firewall has always dns name fire and the inactive firewall has dns name firebox.		To identify the firewall hardware the 2 firewall each have a file in their root directory called either "firewall1" or "firewall2". The active firewall has always dns name "fire" and the inactive firewall has dns name "firebox".

	Active firewall start point is:		Active firewall start point is:
Line 19:		Line 19:
	ifconfig_em1="inet 192.168.9.10 netmask 255.255.255.0"		ifconfig_em1="inet 192.168.9.10 netmask 255.255.255.0"
	ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"		ifconfig_em0="inet 10.0.0.1 netmask 255.255.255.0"
			>$ sudo cp rc.conf_v013 /etc/rc.conf
	>$ sudo cp rc.conf_v013 /etc/rc.conf		Then change the DHCP values for their respective network cards. There are 2 files in the configuration directory
			For firewall1 Hardware
	>$ cd ../isc-dhcpd/		>$ cd ../isc-dhcpd/
	>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf		>$ sudo cp dhcpd-firewall1.conf_v001 /usr/local/etc/dhcpd-firewall.conf

	Connect to fire		Connect to fire