Move eqiad WIFI subnet to 10.66.1.0/24
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	ayounsi
	Oct 7 2020, 6:58 AM

Description

10.66.0.0/24 is used by both eqiad wifi and some GRE tunnels as none were reserved in DNS (for different reasons).
It's now very visible in Netbox and causing issues with DNS generations.

https://netbox.wikimedia.org/ipam/prefixes/348/ip-addresses/

The easiest is to move eqiad wifi to 10.66.1.0/24

Details

	Subject	Repo	Branch	Lines +/-
	Move eqiad WIFI subnet to 10.66.1.0/24	operations/dns	master	+5 -2
	Renumber eqiad wifi prefix	operations/homer/public	master	+1 -1

Customize query in gerrit

Related Objects

Mentioned In: rOHPU41f13e083f7d: Renumber eqiad wifi prefix

Event Timeline

ayounsi triaged this task as High priority.Oct 7 2020, 6:58 AM

ayounsi created this task.

Restricted Application added a project: SRE. · View Herald TranscriptOct 7 2020, 6:58 AM

Created/renamed: https://netbox.wikimedia.org/ipam/prefixes/357/ and https://netbox.wikimedia.org/ipam/prefixes/348/

Change 632642 had a related patch set uploaded (by Ayounsi; owner: Ayounsi):
[operations/homer/public@master] Renumber eqiad wifi prefix

https://gerrit.wikimedia.org/r/632642

Change 632642 merged by Ayounsi:
[operations/homer/public@master] Renumber eqiad wifi prefix

https://gerrit.wikimedia.org/r/632642

homer diff after above changes

[edit system services dhcp]
+     pool 10.66.1.0/24 {
+         address-range low 10.66.1.64 high 10.66.1.127;
+         maximum-lease-time 2419200;
+         default-lease-time 1209600;
+         domain-search {
+             mgmt.eqiad.wmnet;
+         }
+         router {
+             10.66.1.1;
+         }
+     }
-     pool 10.66.0.0/24 {
-         address-range low 10.66.0.64 high 10.66.0.127;
-         maximum-lease-time 2419200;
-         default-lease-time 1209600;
-         domain-search {
-             mgmt.eqiad.wmnet;
-         }
-         router {
-             10.66.0.1;
-         }
-     }
[edit interfaces ge-0/0/2 unit 0 family inet]
+       address 10.66.1.1/24;
-       address 10.66.0.1/24;
[edit security nat source rule-set access-nat rule r1 match]
-       source-address 10.66.0.0/24;
+       source-address 10.66.1.0/24;