Files
notes/projects/cqse/fw-migration/20250818-migration.md
Petar Cubela 584265c22c 20250907
2025-09-07 13:07:01 +02:00

48 lines
807 B
Markdown

## general
## 20250819 Vor Ort
### Fragen
- esxi?
- Cloud key?
- dmz switch?
### WiFi
SSID: CQSE
Pass: iaKqhunm0P
### Location
- Freiham. Centa-Hafenbrädl-Straße 59
## Pre TODO
- [x] Firewall Aliases
- [x] Firewall Rules
- [x] Firewall NAT
- [x] MGMT VPN for sbx
- [x] DNS Config
- [x] DHCP config (static mappings)
- [x] ACME config
- [x] (optional) IPS/IDS
## TODO
- [x] Set VIPs for all Interfaces
- [x] switch belegung pruefen.
- [x] Firewall beschriften
- ~MFA setzen (?)~
- [x] root ausschalten
## After TODO
- [x] ACME: issue certs.
- [x] Check IPS/IDS
- [x] OPNcentral: connect
- [ ] OPNcentral: Backups konfigurieren
- [x] dns verwaltung -> liegt bei google -> schreibe Herrn Hummel deshalb
- [ ] anleitung - opnsense cluster update
- [ ] opnsense standard in itglue hinterlegen