documentation/docs/admin-guide/deployment/dmz_installation.md

DMZ Installation

The deployment in the DMZ is basically the same as internally, but there are a few points to consider:

• the commissioning can only be done in the special DMZ commissioning network

Because of this commissioning network we have to change the network configuration after the initial setup.

Preparation

• get static IP address
• get MAC address
• prepare the node in Sysdb/bob with the MAC address
• for the start the default auto networking setup is required:

networking::setup: 'auto'

Commissioning/Kickstart

• commission/kickstart the node via network boot
• for SSH access get assigned IP address from VMWare or Puppet facts or QIP

ssh -l root -J mgt-gw.psi.ch $IP

• change network setup in hiera

networking::setup: 'auto_static_ip'

• add and active new IP on the node

nmcli con add con-name dmz ifname ens33 type ethernet ip4 192.33.120.53/24 gw4 192.33.120.1
nmcli con up dmz

• assign final DMZ network in VMWare vSphere to the VM
• log into node and run puppet agent -t