5
edits
Docs/OPNsense: Difference between revisions
add section and subnet for pfsync
No edit summary |
(add section and subnet for pfsync) |
||
| (5 intermediate revisions by 2 users not shown) | |||
|
'''For Layer 1 network details, see [[Docs/Cables]].'''
'''For Layer 2 network details, see [[Docs/Switches]].'''
OPNsense is our router/firewall.
We have two OPNsense devices, Lasagna and Ravioli.
== Network ==
{| class="wikitable"
!Subnet
|-
|10.10.0.0/24
|}
OOB Management services like [https://www.dell.com/en-us/lp/dt/open-manage-idrac Dell iDRAC] / [https://www.hpe.com/us/en/hpe-integrated-lights-out-ilo.html HP iLO] and internal networking hardware.
{| class="wikitable"
!Subnet
|-
|10.10.1.0/24
|}
Servers and Virtual Machines.
{| class="wikitable"
!Subnet
|-
|141.219.
|}
Our public IP subnet under Tech's <code>141.219.0.0/16</code> block.
{| class="wikitable"
!Subnet
|-
|10.10.10.0/24
|}
{| class="wikitable"
!Subnet
|-
|10.10.11.0/24
|}
<code>10.10.11.0/25</code> - Wireguard admin range (access to LAN+Management)
Neither wireguard config should have access to the internet.
=== pfsync ===
{| class="wikitable"
!Subnet
|-
|10.10.250.0/24
|}
Interface used for High Availability (HA) sync between the 2 firewalls.
Cannot communicate with any other subnet.
== OPNSense ==
| |||