Orion Consulting Group
Two-site corporate infrastructure with network segmentation, centralised identity, monitoring, asset management and replication between the two sites.
- Scope
- 9 virtual machines
- Type
- Complete IT infrastructure
- Deliverable
- 50-page technical report
- Goal
- Segmentation and continuity
The need
Connect two sites, segment the network by department and keep working if the main site goes down.
What I did
Architecture and IP addressing plan, deployment of the 9 VMs, hardening (segmentation, permissions, policies) and writing the technical report.
The outcome
A working, tested and reproducible infrastructure, delivered with a 50-page technical report (version 2.0).
The detailed write-up and documents for this project are in French.
Architecture
L’infrastructure s’organise en étoile autour de deux pare-feu pfSense. ORION protège le site principal (DMZ et LAN), LYRA le site secondaire. Les deux sites sont reliés par un tunnel VPN IPsec site à site.
Site 1 · DMZ + LAN
ORION
MEISSA · Nginx en DMZ
RIGEL · AD DS, DNS, DHCP
BELLATRIX · GLPI, portail
PC-CLIENT-01
VPN IPsec
Site 2 · LAN
LYRA
VEGA · AD DS, DFS-R
SULAFAT · Zabbix
PC-CLIENT-02
Décisions techniques
- Architecture en étoile autour de deux pare-feu pfSense (ORION et LYRA).
- Interconnexion sécurisée par tunnel VPN IPsec site à site.
- Segmentation VLAN 802.1Q avec filtrage inter-VLAN au pare-feu.
- Réplication AD et fichiers (DFS-R) pour la résilience inter-sites.