Skip to content

Latest commit

 

History

History
50 lines (35 loc) · 2.75 KB

ipam.md

File metadata and controls

50 lines (35 loc) · 2.75 KB

IP Address Management

This document describes the allocation of IP addresses.

Routers

This section covers the autonomous system (AS) numbers and IP addresses of the router loopback interfaces.

Hostname IP address (lo) AS number Description
alfa 172.31.255.0/32 65000 Edge router for site dktil01.
bravo 172.31.255.1/32 65001 Edge router for site deflf01.
charlie 172.31.255.2/32 65002 Edge router for site deflf02.
delta 172.31.255.3/32 65003 Edge router for site dksjb01.

Gateway subnets

This section contains the IP addresses of gateway subnets. In the gateway subnets, only the last 4 IPs before the broadcast IP are dynamically allocated via DHCP for disaster recovery purposes. All other IPs are reserved for tunnel link IPs, e.g. wireguard or similar.

STATUS: Pending implementation. Create PoC and then roll out to entire network.

Hostname Network br0 lo Description
alfa 172.17.0.0/27 172.17.0.1 172.17.0.2 Gateway subnet for site dkaar1.
bravo 172.17.0.32/27 172.17.0.33 172.17.0.34 Gateway subnet for site deflf1.
charlie 172.17.0.64/27 172.17.0.65 172.17.0.66 Gateway subnet for site deflf2.
delta 172.17.0.96/27 172.17.0.97 172.17.0.98 Gateway subnet for site dkaar2.

Within the gateway subnets, there are some reserved IPs. following IP addresses are reserved:

Transit networks

This section contains the IP addresses of transit networks.

Network Description
172.31.0.0/31 Wireguard tunnel between alfa wg1 and bravo wg0.
172.31.0.2/31 Wireguard tunnel between alfa wg2 and charlie wg0.
172.31.0.4/31 Wireguard tunnel between alfa wg3 and delta wg0.
172.31.0.6/31 Wireguard tunnel between bravo wg2 and charlie wg1.
172.31.0.8/31 Wireguard tunnel between bravo wg3 and delta wg1.
172.31.0.10/31 Wireguard tunnel between charlie wg3 and delta wg2.

VPN networks

This section contains the IP addresses of VPN networks.

Network Gateway Description
172.30.0.0/24 172.30.0.254 Wireguard peer-to-site VPN network on alfa.