Balabit - Connection summary (version 7)
Balabit SCB Solution · Config document · referenced from Modes of operation and connections, Connection and channel policies and End-user access
ORG_SSH_JumpServer in the ORG sheet gives IPv4 port 2210 and IPv6 port 2201; the exported configuration of the site 2 cluster has 2201, and 2210 is the cloud team's SSH port.The spreadsheet in which I kept every connection the two SCB clusters had or were meant to have, one sheet per partner and one row per connection target. The design's chapter 9 refers to a summary of all connections "in working state" in an inserted Word object; this spreadsheet is, as I read it, its successor.
| Item | Value |
|---|---|
| What | The connection summary spreadsheet, version 7, every sheet |
| Clusters | Site 1 dc1-s-xblb001 (user address 10.11.16.65), site 2 dc2-s-xblb001 (10.12.16.65) |
| Firmware at the time | SCB 5 LTS; the site 2 cluster ran 5.0.6 in September 2018 |
| Source document | Connection summary spreadsheet, version 7, undated; it already holds the cloud team's connections of late 2018 |
| Sheets | PARTNER1, PARTNER1-CLOUD, ORG, PARTNER3, PARTNER4 with rows; PARTNER5 and PARTNER2 with the header only |
The listing
output 132 lines
### sheet PARTNER1 | | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.11.17.81 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcjmp002 | | PARTNER1 Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.11.28.56 | 29.0 | 4.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:a1:0F94:: | 64.0 | 6.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.11.30.56 | 29.0 | 4.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:b1:0F94:: | 64.0 | 6.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.12.28.56 | 29.0 | 4.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:a2:0F94:: | 64.0 | 6.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.12.30.56 | 29.0 | 4.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:10DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.1.56 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:215E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.3.56 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-b- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:21DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 3 | B | OOB | dc3-b- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.5.56 | 29.0 | 4.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:315E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.7.56 | 29.0 | 4.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:31DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.9.56 | 29.0 | 4.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:325E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | PARTNER1 OOB Jump Host - SSH NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 10.19.11.56 | 29.0 | 4.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:32DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | PARTNER1 OOB Jump Host - SSH YES | NA | PARTNER1_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 3389.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 3389.0 | | 10.11.16.201 | 28.0 | 4.0 | 3389.0 | | Site 1 | S | management LAN | dc1-a-vcrdp002 | | PARTNER1 Jump Host - RDP YES | NA | PARTNER1_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 222.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 222.0 | | 10.11.17.129 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcscp001 | | SHARED Jump Host - SCP, SFTP NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.12.17.81 | 28.0 | 4.0 | 22.0 | | Site 2 | S | management LAN | dc2-a-vcjmp002 | | PARTNER1 Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.11.28.56 | 29.0 | 4.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:a1:0F94:: | 64.0 | 6.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.11.30.56 | 29.0 | 4.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:b1:0F94:: | 64.0 | 6.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.12.28.56 | 29.0 | 4.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:a2:0F94:: | 64.0 | 6.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.12.30.56 | 29.0 | 4.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:10DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.1.56 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:215E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.3.56 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-b- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:21DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 3 | B | OOB | dc3-b- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.5.56 | 29.0 | 4.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:315E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.7.56 | 29.0 | 4.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:31DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.9.56 | 29.0 | 4.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:325E:0F94:: | 64.0 | 6.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | PARTNER1 OOB Jump Host - SSH NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 10.19.11.56 | 29.0 | 4.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 | | 2001:db8:32DE:0F94:: | 64.0 | 6.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | PARTNER1 OOB Jump Host - SSH NA | YES | PARTNER1_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 3389.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 3389.0 | | 10.12.16.201 | 28.0 | 4.0 | 3389.0 | | Site 2 | S | management LAN | dc2-a-vcrdp002 | | PARTNER1 Jump Host - RDP NA | YES | PARTNER1_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 222.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 222.0 | | 10.12.17.129 | 28.0 | 4.0 | 22.0 | | Site 2 | S | management LAN | dc2-a-vcscp001 | | SHARED Jump Host - SCP, SFTP ### sheet PARTNER1-CLOUD | | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES NO | NA | CLOUD_PARTNER1_SSH_JumpServer | SSH | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2210.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2210.0 | | 10.19.17.96 / 2001:db8:235e:f94::4 | | | 22.0 | | Site 6 | S | management LAN | dc6-a-vcojp002 | | PARTNER1-CLOUD Jump Host - SSH NO | NA | CLOUD_PARTNER1_SCP_SFTP_JumpServer | SCP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2211.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2211.0 | | 10.19.17.225 / 2001:db8:235e:f8b::4 | | | 22.0 | | Site 6 | S | management LAN | dc6-a-vcscp002 | | PARTNER1-CLOUD Jump Host - SCP NO | NA | CLOUD_PARTNER1_RDP_JumpServer | RDP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2212.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2212.0 | | 10.19.17.33 / 2001:db8:235e:f98::4 | | | 3389.0 | | Site 6 | S | management LAN | dc6-a-vcrdp002 | | PARTNER1-CLOUD Jump Host - RDP NA | YES | CLOUD_PARTNER1_SSH_JumpServer | SSH | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2210.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2210.0 | | 10.19.17.96 / 2001:db8:235e:f94::4 | | | 22.0 | | Site 6 | S | management LAN | dc6-a-vcojp002 | | PARTNER1-CLOUD Jump Host - SSH NA | YES | CLOUD_PARTNER1_SCP_SFTP_JumpServer | SCP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2211.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2211.0 | | 10.19.17.225 / 2001:db8:235e:f8b::4 | | | 22.0 | | Site 6 | S | management LAN | dc6-a-vcscp002 | | PARTNER1-CLOUD Jump Host - SCP NA | YES | CLOUD_PARTNER1_RDP_JumpServer | RDP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2212.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2212.0 | | 10.19.17.33 / 2001:db8:235e:f98::4 | | | 3389.0 | | Site 6 | S | management LAN | dc6-a-vcrdp002 | | PARTNER1-CLOUD Jump Host - RDP ### sheet ORG | | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.11.16.177 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcjmp001 | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.11.28.48 | 29.0 | 4.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:a1:0F95:: | 64.0 | 6.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.11.30.48 | 29.0 | 4.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:b1:0F95:: | 64.0 | 6.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.12.28.48 | 29.0 | 4.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:a2:0F95:: | 64.0 | 6.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.12.30.48 | 29.0 | 4.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:10DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.1.48 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:215E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.3.48 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-b- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:21DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 3 | B | OOB | dc3-b- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.5.48 | 29.0 | 4.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:315E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.7.48 | 29.0 | 4.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:31DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.9.48 | 29.0 | 4.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:325E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | ORG Jump Host - SSH NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 10.19.11.48 | 29.0 | 4.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | ORG Jump Host - SSH YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:32DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | ORG Jump Host - SSH YES | NA | ORG_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2202.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2202.0 | | 10.11.16.193 | 28.0 | 4.0 | 3389.0 | | Site 1 | S | management LAN | dc1-a-vcrdp001 | | ORG Jump Host - RDP YES | NA | ORG_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2203.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2203.0 | | 10.11.17.129 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcscp001 | | SHARED Jump Host - SCP, SFTP NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2210.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.12.16.177 | 28.0 | 4.0 | 22.0 | | Site 2 | S | management LAN | dc2-a-vcjmp001 | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.11.28.48 | 29.0 | 4.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:a1:0F95:: | 64.0 | 6.0 | 22.0 | | Site 1 | A | OOB | dc1-a- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.11.30.48 | 29.0 | 4.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:b1:0F95:: | 64.0 | 6.0 | 22.0 | | Site 1 | B | OOB | dc1-b | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.12.28.48 | 29.0 | 4.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:a2:0F95:: | 64.0 | 6.0 | 22.0 | | Site 2 | A | OOB | dc2-a- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.12.30.48 | 29.0 | 4.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:10DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 2 | B | OOB | dc2-b | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.1.48 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:215E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 3 | A | OOB | dc3-a- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.3.48 | 29.0 | 4.0 | 22.0 | | Site 3 | A | OOB | dc3-b- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:21DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 3 | B | OOB | dc3-b- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.5.48 | 29.0 | 4.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:315E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 4 | A | OOB | dc4-a- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.7.48 | 29.0 | 4.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:31DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 4 | B | OOB | dc4-b- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.9.48 | 29.0 | 4.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:325E:0F95:: | 64.0 | 6.0 | 22.0 | | Site 5 | A | OOB | dc5-a- | | ORG Jump Host - SSH NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 10.19.11.48 | 29.0 | 4.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | ORG Jump Host - SSH NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 | | 2001:db8:32DE:0F95:: | 64.0 | 6.0 | 22.0 | | Site 5 | B | OOB | dc5-b- | | ORG Jump Host - SSH NA | YES | ORG_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2202.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2202.0 | | 10.12.16.193 | 28.0 | 4.0 | 3389.0 | | Site 2 | S | management LAN | dc2-a-vcrdp001 | | ORG Jump Host - RDP NA | YES | ORG_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2203.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2203.0 | | 10.12.17.129 | 28.0 | 4.0 | 22.0 | | Site 2 | S | management LAN | dc2-a-vcscp001 | | SHARED Jump Host - SCP, SFTP ### sheet PARTNER3 | | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES YES | NA | PARTNER3_SSH_JumpServer | SSH | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2205.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2205.0 | | 10.11.16.177 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcjmp001 | | PARTNER3 Jump Host - SSH YES | NA | PARTNER3_SCP_SFTP_JumpServer | SCP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2206.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2206.0 | | 10.11.17.129 | 28.0 | 4.0 | 22.0 | | Site 1 | S | management LAN | dc1-a-vcscp001 | | Shared Jump Host - SCP, SFTP YES | NA | PARTNER3_RDP_JumpServer | RDP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2207.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2207.0 | | 10.11.16.193 | 28.0 | 4.0 | 3389.0 | | Site 1 | S | management LAN | dc1-a-vcrdp001 | | PARTNER3 Jump Host - RDP YES | NA | PARTNER3_RDP_JumpServer | RDP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2207.0 | | 2001:db8:a1:c0e::f:1 | 128.0 | 2207.0 | | 10.11.19.177 | 28.0 | 4.0 | 3389.0 | | Site 1 | S | management LAN | dc1-a-vcrdp003 | | PARTNER3 Jump Host - RDP ### sheet PARTNER4 | | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES NA | YES | PARTNER4_RDP_JumpServer | RDP | 10.12.20.0 | 27.0 | 10.12.16.65 | 32.0 | 2208.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2208.0 | | 10.12.19.209 | 28.0 | 4.0 | 3389.0 | | Site 2 | S | management LAN | dc2-a-vcrdp004 | | PARTNER4 Jump Host - RDP NA | YES | PARTNER4_SCP_SFTP_JumpServer | SCP | 10.12.20.0 | 27.0 | 10.12.16.65 | 32.0 | 2213.0 | | 2001:db8:a2:c0e::f:1 | 128.0 | 2213.0 | | 10.12.17.129 | 28.0 | 4.0 | 22.0 | | Site 2 | S | management LAN | dc2-a-vcscp001 | | PARTNER4 Jump Host - SCP, SFTP ### sheet PARTNER5 | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES ### sheet PARTNER2 | | | | | TO (BALABIT) | | | | | | | | TARGET | | | | | | | | | | | | | FROM | | TO-IPv4 | | | | TO-IPv6 | | | | NET | | | | | Location | | | | | CONFIGURED | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT | | IPv6 | MASK | PORT | | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT | | Location | Section | Segment | Server | | NOTES
| Column | Meaning |
|---|---|
| CONFIGURED in DC1, in DC2 | Whether the row was configured on the site 1 or site 2 cluster: YES, NO (planned, not configured) or NA (not for that site, as I read it). The PARTNER5 and PARTNER2 sheets have one CONFIGURED column only |
| CONNECTION NAME | The connection policy on the SCB; several rows with the same name are the targets of one connection |
| PROTOCOL | SSH, RDP or SCP; SCP rows are the SCP/SFTP connections |
| FROM IP, MASK | The source network the connection accepts; 0.0.0.0 with mask 0.0 is any source |
| TO-IPv4, TO-IPv6, PORT | The SCB's user address of that site and the port the connection listens on |
| TARGET IP/SEGMENT, MASK/PREFIX, IPv4/6, PORT | The target the user names with inband destination selection; 4.0 and 6.0 in IPv4/6 are the address family, out-of-band IPv6 targets are whole /64 ranges |
| Location, Section, Segment, Server | The site, the datacenter (A, B) or S for the site's shared management LAN, the network, and the jump server's name; out-of-band jump servers had no names yet |
| NOTES | What the target is |
The numbers such as 22.0, 32.0 or 3389.0 are spreadsheet cells formatted as decimals; they are plain ports and prefix lengths. All out-of-band IPv4 targets are NO and the IPv6 targets of the same jump servers YES: the out-of-band networks were reached over IPv6 only, those outside site 1 over the backbone. Two cells contradict other rows: the Site 3 rows with target 10.19.3.56 (partner 1) and 10.19.3.48 (the organisation) are in section A but name dc3-b-, and the cloud team's SSH jump server is 10.19.17.96 here and 10.19.17.98 in the user access guide. The PARTNER4 sheet lists PARTNER4_SCP_SFTP_JumpServer (port 2213) and the PARTNER1-CLOUD sheet three connections (2210 to 2212) as configured in site 2, but the site 2 config.xml of September 2018 has none of them; they were probably added later.
Checked against One Identity Safeguard for Privileged Sessions 9.0
| As built | Today |
|---|---|
| One connection per partner and protocol, selected by the port on one address | Organising connections by port in non-transparent mode is still documented |
| Targets named by the user with inband destination selection | The same syntax; a host name used as a target must comply with RFC 5890 since 6.1.0, which does not affect the address targets here |
Out-of-band targets as IPv6 /64 ranges | The same rule: a range is a prefix, a single IPv6 address is /128 |