# DMZ Installation

The deployment in the DMZ is basically the same as [internally](basic_installation), but there are a few points to consider:

- the commissioning can only be done in the special DMZ commissioning network

Because of this commissioning network we have to change the network configuration after the initial setup.

## Preparation

- get static IP address
- get MAC address
- prepare the node in Sysdb/`bob` with the MAC address
- for the start the default `auto` networking setup is required:

```yaml
networking::setup: 'auto'
```

## Commissioning/Kickstart

- commission/kickstart the node via network boot
- for SSH access get assigned IP address from VMWare or Puppet facts or QIP
```
ssh -l root -J mgt-gw.psi.ch $IP
```
- change network setup in hiera
```yaml
networking::setup: 'auto_static_ip'
```
- add and active new IP on the node
```
nmcli con add con-name dmz ifname ens33 type ethernet ip4 192.33.120.53/24 gw4 192.33.120.1
nmcli con up dmz
```
- assign final DMZ network in VMWare vSphere to the VM
- log into node and run `puppet agent -t`