Netzwerk-Inventar
🚀 DevOps
Inventar-Tabelle (Hostname/IP/MAC/Service/Standort/Owner/Notes) plus Subnetze, VLANs und DNS.
---
template_id: network-inventory-de
template_version: 1
template_source: promptopoly-curated
template_mode: live
---
# Netzwerk-Inventar — [Standort / Rechenzentrum / Cloud-Account]
> Letzte Aktualisierung: YYYY-MM-DD · Verantwortlich: [Name] · Änderungen nur nach Freigabe dokumentieren
Dieses Inventar erfasst alle netzwerkrelevanten Assets, IP-Planungen und Segmentierungsregeln. Es ist die verbindliche Grundlage für Troubleshooting, Security-Audits und Capacity-Planung.
---
## Hosts
HOST: fw-core-01 — Core-Firewall, Palo Alto PA-3220, Rack B4, Redundanz-Cluster A
HOST: sw-access-01 — Access-Switch, Cisco Catalyst 9300, Rack A2, Stack-Mitglied 1
HOST: srv-app-01 — Applikationsserver, Dell R650, Rack A1, VMware ESXi-Host
HOST: srv-db-01 — Datenbankserver, Dell R750, Rack A1, RAID-10, Hot-Spare aktiv
HOST: ap-floor-2 — Wireless-Access-Point, Aruba AP-515, Deckenmontage Etage 2
HOST: ups-rack-a1 — USV-Einheit, APC Smart-UPS 3000VA, Rack A1, Autonomie 45 Min
| Hostname | IP-Adresse | MAC-Adresse | Funktion | Standort | Owner | OS / Firmware |
|----------|------------|-------------|----------|----------|-------|---------------|
| [fw-core-01] | [192.168.1.1] | [aa:bb:cc:11:22:33] | Firewall | Rack B4 | NetOps | PAN-OS 11.1 |
| [sw-access-01] | [192.168.1.2] | [aa:bb:cc:11:22:44] | Access-Switch | Rack A2 | NetOps | IOS-XE 17.9 |
| [srv-app-01] | [192.168.1.10] | [aa:bb:cc:11:22:55] | App-Server | Rack A1 | DevOps | Ubuntu 22.04 |
| [srv-db-01] | [192.168.1.11] | [aa:bb:cc:11:22:66] | DB-Server | Rack A1 | DBA | Ubuntu 22.04 |
| [ap-floor-2] | [192.168.1.20] | [aa:bb:cc:11:22:77] | Wi-Fi-AP | Etage 2 | NetOps | ArubaOS 8.10 |
| | | | | | | |
## Subnetze
SUBNET: 192.168.1.0/24 — Produktive Server und Core-Netzwerkdienste, kein DHCP
SUBNET: 192.168.10.0/24 — Management-Schnittstellen, Out-of-Band, eingeschränkter Zugriff
SUBNET: 192.168.20.0/24 — Voice- und Video-Endpunkte, QoS-Priorisierung aktiv
SUBNET: 10.0.0.0/16 — VPN-Remote-Access-Pool, dynamische Zuweisung
SUBNET: 172.16.0.0/24 — Gast-Wi-Fi-Isolationsnetzwerk, Client-Isolation erzwungen
| Netzwerk | CIDR | Gateway | VLAN | Zweck | DHCP |
|----------|------|---------|------|-------|------|
| [Produktion] | [192.168.1.0/24] | [192.168.1.1] | [VLAN 10] | [Server + Dienste] | [Nein] |
| [Management] | [192.168.10.0/24] | [192.168.10.1] | [VLAN 20] | [iDRAC / ILO / IPMI] | [Nein] |
| [Voice/Video] | [192.168.20.0/24] | [192.168.20.1] | [VLAN 30] | [VoIP + Konferenz] | [Ja] |
| [VPN-Pool] | [10.0.0.0/16] | [10.0.0.1] | [VLAN 100] | [Remote-Zugriff] | [Ja] |
| [Gast-Wi-Fi] | [172.16.0.0/24] | [172.16.0.1] | [VLAN 200] | [Client-Isolation] | [Ja] |
| | | | | | |
## VLANs
VLAN: 10 — production-server-vlan, Grün, alle Server-Workloads, Layer-3-Routing
VLAN: 20 — management-vlan, Gelb, eingeschränkt auf Operations-Team, Firewall-only
VLAN: 30 — voice-video-vlan, Blau, QoS-Priorität aktiviert, DSCP-Markierung
VLAN: 100 — vpn-remote-vlan, Orange, Split-Tunnel-Routing, MFA erforderlich
VLAN: 200 — guest-wifi-vlan, Rot, Client-Isolation aktiviert, Bandbreitenbegrenzung
| VLAN ID | Name | Farb-Tag | Zweck | Routing |
|---------|------|----------|-------|---------|
| [10] | [production-server] | [Grün] | [Server-Workloads] | [L3-Switch] |
| [20] | [management] | [Gelb] | [OOB-Management] | [Nur Firewall] |
| [30] | [voice-video] | [Blau] | [VoIP und Konferenz] | [L3 + QoS] |
| [100] | [vpn-remote] | [Orange] | [Remote-VPN-Clients] | [Firewall + NAT] |
| [200] | [guest-wifi] | [Rot] | [Gast-Wireless] | [Firewall + ACLs] |
| | | | | |
## DNS-Records
| FQDN | Typ | Wert | TTL |
|------|-----|------|-----|
| [fw-core-01.standort.example.com] | [A] | [192.168.1.1] | [300] |
| [srv-app-01.standort.example.com] | [A] | [192.168.1.10] | [300] |
| [srv-db-01.standort.example.com] | [A] | [192.168.1.11] | [300] |
| [vpn.standort.example.com] | [A] | [203.0.113.10] | [600] |
| | | | |
## Firewall-Regeln (Zusammenfassung)
| Quelle | Ziel | Port | Protokoll | Aktion | Notiz |
|--------|------|------|-----------|--------|-------|
| [Any] | [srv-app-01] | [443] | [TCP] | [Allow] | [HTTPS-Ingress] |
| [Management] | [Any] | [22] | [TCP] | [Allow] | [SSH vom Jump-Host] |
| [Any] | [srv-db-01] | [5432] | [TCP] | [Deny] | [Kein direkter DB-Zugriff] |
## Änderungsprotokoll
| Datum | Änderung | Autor |
|------|--------|--------|
| YYYY-MM-DD | Erstinventar erstellt | [Name] |
<!--
META
template_id: network-inventory-de
template_version: 1
template_source: promptopoly-curated
template_mode: live
-->
template_id: network-inventory-de
template_version: 1
template_source: promptopoly-curated
template_mode: live
---
# Netzwerk-Inventar — [Standort / Rechenzentrum / Cloud-Account]
> Letzte Aktualisierung: YYYY-MM-DD · Verantwortlich: [Name] · Änderungen nur nach Freigabe dokumentieren
Dieses Inventar erfasst alle netzwerkrelevanten Assets, IP-Planungen und Segmentierungsregeln. Es ist die verbindliche Grundlage für Troubleshooting, Security-Audits und Capacity-Planung.
---
## Hosts
HOST: fw-core-01 — Core-Firewall, Palo Alto PA-3220, Rack B4, Redundanz-Cluster A
HOST: sw-access-01 — Access-Switch, Cisco Catalyst 9300, Rack A2, Stack-Mitglied 1
HOST: srv-app-01 — Applikationsserver, Dell R650, Rack A1, VMware ESXi-Host
HOST: srv-db-01 — Datenbankserver, Dell R750, Rack A1, RAID-10, Hot-Spare aktiv
HOST: ap-floor-2 — Wireless-Access-Point, Aruba AP-515, Deckenmontage Etage 2
HOST: ups-rack-a1 — USV-Einheit, APC Smart-UPS 3000VA, Rack A1, Autonomie 45 Min
| Hostname | IP-Adresse | MAC-Adresse | Funktion | Standort | Owner | OS / Firmware |
|----------|------------|-------------|----------|----------|-------|---------------|
| [fw-core-01] | [192.168.1.1] | [aa:bb:cc:11:22:33] | Firewall | Rack B4 | NetOps | PAN-OS 11.1 |
| [sw-access-01] | [192.168.1.2] | [aa:bb:cc:11:22:44] | Access-Switch | Rack A2 | NetOps | IOS-XE 17.9 |
| [srv-app-01] | [192.168.1.10] | [aa:bb:cc:11:22:55] | App-Server | Rack A1 | DevOps | Ubuntu 22.04 |
| [srv-db-01] | [192.168.1.11] | [aa:bb:cc:11:22:66] | DB-Server | Rack A1 | DBA | Ubuntu 22.04 |
| [ap-floor-2] | [192.168.1.20] | [aa:bb:cc:11:22:77] | Wi-Fi-AP | Etage 2 | NetOps | ArubaOS 8.10 |
| | | | | | | |
## Subnetze
SUBNET: 192.168.1.0/24 — Produktive Server und Core-Netzwerkdienste, kein DHCP
SUBNET: 192.168.10.0/24 — Management-Schnittstellen, Out-of-Band, eingeschränkter Zugriff
SUBNET: 192.168.20.0/24 — Voice- und Video-Endpunkte, QoS-Priorisierung aktiv
SUBNET: 10.0.0.0/16 — VPN-Remote-Access-Pool, dynamische Zuweisung
SUBNET: 172.16.0.0/24 — Gast-Wi-Fi-Isolationsnetzwerk, Client-Isolation erzwungen
| Netzwerk | CIDR | Gateway | VLAN | Zweck | DHCP |
|----------|------|---------|------|-------|------|
| [Produktion] | [192.168.1.0/24] | [192.168.1.1] | [VLAN 10] | [Server + Dienste] | [Nein] |
| [Management] | [192.168.10.0/24] | [192.168.10.1] | [VLAN 20] | [iDRAC / ILO / IPMI] | [Nein] |
| [Voice/Video] | [192.168.20.0/24] | [192.168.20.1] | [VLAN 30] | [VoIP + Konferenz] | [Ja] |
| [VPN-Pool] | [10.0.0.0/16] | [10.0.0.1] | [VLAN 100] | [Remote-Zugriff] | [Ja] |
| [Gast-Wi-Fi] | [172.16.0.0/24] | [172.16.0.1] | [VLAN 200] | [Client-Isolation] | [Ja] |
| | | | | | |
## VLANs
VLAN: 10 — production-server-vlan, Grün, alle Server-Workloads, Layer-3-Routing
VLAN: 20 — management-vlan, Gelb, eingeschränkt auf Operations-Team, Firewall-only
VLAN: 30 — voice-video-vlan, Blau, QoS-Priorität aktiviert, DSCP-Markierung
VLAN: 100 — vpn-remote-vlan, Orange, Split-Tunnel-Routing, MFA erforderlich
VLAN: 200 — guest-wifi-vlan, Rot, Client-Isolation aktiviert, Bandbreitenbegrenzung
| VLAN ID | Name | Farb-Tag | Zweck | Routing |
|---------|------|----------|-------|---------|
| [10] | [production-server] | [Grün] | [Server-Workloads] | [L3-Switch] |
| [20] | [management] | [Gelb] | [OOB-Management] | [Nur Firewall] |
| [30] | [voice-video] | [Blau] | [VoIP und Konferenz] | [L3 + QoS] |
| [100] | [vpn-remote] | [Orange] | [Remote-VPN-Clients] | [Firewall + NAT] |
| [200] | [guest-wifi] | [Rot] | [Gast-Wireless] | [Firewall + ACLs] |
| | | | | |
## DNS-Records
| FQDN | Typ | Wert | TTL |
|------|-----|------|-----|
| [fw-core-01.standort.example.com] | [A] | [192.168.1.1] | [300] |
| [srv-app-01.standort.example.com] | [A] | [192.168.1.10] | [300] |
| [srv-db-01.standort.example.com] | [A] | [192.168.1.11] | [300] |
| [vpn.standort.example.com] | [A] | [203.0.113.10] | [600] |
| | | | |
## Firewall-Regeln (Zusammenfassung)
| Quelle | Ziel | Port | Protokoll | Aktion | Notiz |
|--------|------|------|-----------|--------|-------|
| [Any] | [srv-app-01] | [443] | [TCP] | [Allow] | [HTTPS-Ingress] |
| [Management] | [Any] | [22] | [TCP] | [Allow] | [SSH vom Jump-Host] |
| [Any] | [srv-db-01] | [5432] | [TCP] | [Deny] | [Kein direkter DB-Zugriff] |
## Änderungsprotokoll
| Datum | Änderung | Autor |
|------|--------|--------|
| YYYY-MM-DD | Erstinventar erstellt | [Name] |
<!--
META
template_id: network-inventory-de
template_version: 1
template_source: promptopoly-curated
template_mode: live
-->