Skip to content

DMZ Installation

The deployment in the DMZ is basically the same as internally, but there are a few points to consider:

  • the commissioning can only be done in the special DMZ commissioning network

Because of this commissioning network we have to change the network configuration after the initial setup.

Preparation

  • get static IP address
  • get MAC address
  • prepare the node in Sysdb/bob with the MAC address
  • for the start the default auto networking setup is required:
networking::setup: 'auto'

Commissioning/Kickstart

  • commission/kickstart the node via network boot
  • for SSH access get assigned IP address from VMWare or Puppet facts or QIP 
    ssh -l root -J mgt-gw.psi.ch $IP
  • change network setup in hiera 
    networking::setup: 'auto_static_ip'
  • add and active new IP on the node 
    nmcli con add con-name dmz ifname ens33 type ethernet ip4 192.33.120.53/24 gw4 192.33.120.1
nmcli con up dmz
  • assign final DMZ network in VMWare vSphere to the VM
  • log into node and run puppet agent -t