LINUXOR.SK ... open source notes ...

Balabit - Connection summary (version 7)

category: solutionz · date: 2018-12-31 · updated: 2026-10-03 · author: LALA

Balabit SCB Solution · Config document · referenced from Modes of operation and connections, Connection and channel policies and End-user access

noteThe site 2 row of ORG_SSH_JumpServer in the ORG sheet gives IPv4 port 2210 and IPv6 port 2201; the exported configuration of the site 2 cluster has 2201, and 2210 is the cloud team's SSH port.

The spreadsheet in which I kept every connection the two SCB clusters had or were meant to have, one sheet per partner and one row per connection target. The design's chapter 9 refers to a summary of all connections "in working state" in an inserted Word object; this spreadsheet is, as I read it, its successor.

ItemValue
WhatThe connection summary spreadsheet, version 7, every sheet
ClustersSite 1 dc1-s-xblb001 (user address 10.11.16.65), site 2 dc2-s-xblb001 (10.12.16.65)
Firmware at the timeSCB 5 LTS; the site 2 cluster ran 5.0.6 in September 2018
Source documentConnection summary spreadsheet, version 7, undated; it already holds the cloud team's connections of late 2018
SheetsPARTNER1, PARTNER1-CLOUD, ORG, PARTNER3, PARTNER4 with rows; PARTNER5 and PARTNER2 with the header only

The listing

output 132 lines
### sheet PARTNER1
 |  |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.11.17.81 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcjmp002 |  | PARTNER1 Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.11.28.56 | 29.0 | 4.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:a1:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.11.30.56 | 29.0 | 4.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:b1:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.12.28.56 | 29.0 | 4.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:a2:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.12.30.56 | 29.0 | 4.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:10DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.1.56 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:215E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.3.56 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-b- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:21DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 3 | B | OOB | dc3-b- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.5.56 | 29.0 | 4.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:315E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.7.56 | 29.0 | 4.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:31DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.9.56 | 29.0 | 4.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:325E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | PARTNER1 OOB Jump Host - SSH
NO | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 10.19.11.56 | 29.0 | 4.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 22.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:32DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | PARTNER1 OOB Jump Host - SSH
YES | NA | PARTNER1_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 3389.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 3389.0 |  | 10.11.16.201 | 28.0 | 4.0 | 3389.0 |  | Site 1 | S | management LAN | dc1-a-vcrdp002 |  | PARTNER1 Jump Host - RDP
YES | NA | PARTNER1_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 222.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 222.0 |  | 10.11.17.129 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcscp001 |  | SHARED Jump Host - SCP, SFTP
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.12.17.81 | 28.0 | 4.0 | 22.0 |  | Site 2 | S | management LAN | dc2-a-vcjmp002 |  | PARTNER1 Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.11.28.56 | 29.0 | 4.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:a1:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.11.30.56 | 29.0 | 4.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:b1:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.12.28.56 | 29.0 | 4.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:a2:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.12.30.56 | 29.0 | 4.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:10DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.1.56 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:215E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.3.56 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-b- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:21DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 3 | B | OOB | dc3-b- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.5.56 | 29.0 | 4.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:315E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.7.56 | 29.0 | 4.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:31DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.9.56 | 29.0 | 4.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:325E:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | PARTNER1 OOB Jump Host - SSH
NA | NO | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 10.19.11.56 | 29.0 | 4.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 22.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 22.0 |  | 2001:db8:32DE:0F94:: | 64.0 | 6.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | PARTNER1 OOB Jump Host - SSH
NA | YES | PARTNER1_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 3389.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 3389.0 |  | 10.12.16.201 | 28.0 | 4.0 | 3389.0 |  | Site 2 | S | management LAN | dc2-a-vcrdp002 |  | PARTNER1 Jump Host - RDP
NA | YES | PARTNER1_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 222.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 222.0 |  | 10.12.17.129 | 28.0 | 4.0 | 22.0 |  | Site 2 | S | management LAN | dc2-a-vcscp001 |  | SHARED Jump Host - SCP, SFTP
### sheet PARTNER1-CLOUD
 |  |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
NO | NA | CLOUD_PARTNER1_SSH_JumpServer | SSH | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2210.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2210.0 |  | 10.19.17.96 / 2001:db8:235e:f94::4 |  |  | 22.0 |  | Site 6 | S | management LAN | dc6-a-vcojp002 |  | PARTNER1-CLOUD Jump Host - SSH
NO | NA | CLOUD_PARTNER1_SCP_SFTP_JumpServer | SCP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2211.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2211.0 |  | 10.19.17.225 / 2001:db8:235e:f8b::4 |  |  | 22.0 |  | Site 6 | S | management LAN | dc6-a-vcscp002 |  | PARTNER1-CLOUD Jump Host - SCP
NO | NA | CLOUD_PARTNER1_RDP_JumpServer | RDP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.11.16.65 | 32.0 | 2212.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2212.0 |  | 10.19.17.33 / 2001:db8:235e:f98::4  |  |  | 3389.0 |  | Site 6 | S | management LAN | dc6-a-vcrdp002 |  | PARTNER1-CLOUD Jump Host - RDP
NA | YES | CLOUD_PARTNER1_SSH_JumpServer | SSH | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2210.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2210.0 |  | 10.19.17.96 / 2001:db8:235e:f94::4 |  |  | 22.0 |  | Site 6 | S | management LAN | dc6-a-vcojp002 |  | PARTNER1-CLOUD Jump Host - SSH
NA | YES | CLOUD_PARTNER1_SCP_SFTP_JumpServer | SCP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2211.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2211.0 |  | 10.19.17.225 / 2001:db8:235e:f8b::4 |  |  | 22.0 |  | Site 6 | S | management LAN | dc6-a-vcscp002 |  | PARTNER1-CLOUD Jump Host - SCP
NA | YES | CLOUD_PARTNER1_RDP_JumpServer | RDP | 10.12.20.128 / 2001:db8:105c:fa5:: | 26 / 64 | 10.12.16.65 | 32.0 | 2212.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2212.0 |  | 10.19.17.33 / 2001:db8:235e:f98::4  |  |  | 3389.0 |  | Site 6 | S | management LAN | dc6-a-vcrdp002 |  | PARTNER1-CLOUD Jump Host - RDP
### sheet ORG
 |  |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.11.16.177 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcjmp001 |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.11.28.48 | 29.0 | 4.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:a1:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.11.30.48 | 29.0 | 4.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:b1:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.12.28.48 | 29.0 | 4.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:a2:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.12.30.48 | 29.0 | 4.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:10DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.1.48 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:215E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.3.48 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-b- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:21DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 3 | B | OOB | dc3-b- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.5.48 | 29.0 | 4.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:315E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.7.48 | 29.0 | 4.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:31DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.9.48 | 29.0 | 4.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:325E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | ORG Jump Host - SSH
NO | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.11.48 | 29.0 | 4.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | ORG Jump Host - SSH
YES | NA | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2201.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:32DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | ORG Jump Host - SSH
YES | NA | ORG_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2202.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2202.0 |  | 10.11.16.193 | 28.0 | 4.0 | 3389.0 |  | Site 1 | S | management LAN | dc1-a-vcrdp001 |  | ORG Jump Host - RDP
YES | NA | ORG_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.11.16.65 | 32.0 | 2203.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2203.0 |  | 10.11.17.129 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcscp001 |  | SHARED Jump Host - SCP, SFTP
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2210.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.12.16.177 | 28.0 | 4.0 | 22.0 |  | Site 2 | S | management LAN | dc2-a-vcjmp001 |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.11.28.48 | 29.0 | 4.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:a1:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 1 | A | OOB | dc1-a- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.11.30.48 | 29.0 | 4.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:b1:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 1 | B | OOB | dc1-b |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.12.28.48 | 29.0 | 4.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:a2:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 2 | A | OOB | dc2-a- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.12.30.48 | 29.0 | 4.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:10DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 2 | B | OOB | dc2-b |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.1.48 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:215E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 3 | A | OOB | dc3-a- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.3.48 | 29.0 | 4.0 | 22.0 |  | Site 3 | A | OOB | dc3-b- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:21DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 3 | B | OOB | dc3-b- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.5.48 | 29.0 | 4.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:315E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 4 | A | OOB | dc4-a- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.7.48 | 29.0 | 4.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:31DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 4 | B | OOB | dc4-b- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.9.48 | 29.0 | 4.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:325E:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 5 | A | OOB | dc5-a- |  | ORG Jump Host - SSH
NA | NO | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 10.19.11.48 | 29.0 | 4.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | ORG Jump Host - SSH
NA | YES | ORG_SSH_JumpServer | SSH | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2201.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2201.0 |  | 2001:db8:32DE:0F95:: | 64.0 | 6.0 | 22.0 |  | Site 5 | B | OOB | dc5-b- |  | ORG Jump Host - SSH
NA | YES | ORG_RDP_JumpServer | RDP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2202.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2202.0 |  | 10.12.16.193 | 28.0 | 4.0 | 3389.0 |  | Site 2 | S | management LAN | dc2-a-vcrdp001 |  | ORG Jump Host - RDP
NA | YES | ORG_SCP_SFTP_JumpServer | SCP | 0.0.0.0 | 0.0 | 10.12.16.65 | 32.0 | 2203.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2203.0 |  | 10.12.17.129 | 28.0 | 4.0 | 22.0 |  | Site 2 | S | management LAN | dc2-a-vcscp001 |  | SHARED Jump Host - SCP, SFTP
### sheet PARTNER3
 |  |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
YES | NA | PARTNER3_SSH_JumpServer | SSH | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2205.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2205.0 |  | 10.11.16.177 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcjmp001 |  | PARTNER3 Jump Host - SSH
YES | NA | PARTNER3_SCP_SFTP_JumpServer | SCP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2206.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2206.0 |  | 10.11.17.129 | 28.0 | 4.0 | 22.0 |  | Site 1 | S | management LAN | dc1-a-vcscp001 |  | Shared Jump Host - SCP, SFTP
YES | NA | PARTNER3_RDP_JumpServer | RDP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2207.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2207.0 |  | 10.11.16.193 | 28.0 | 4.0 | 3389.0 |  | Site 1 | S | management LAN | dc1-a-vcrdp001 |  | PARTNER3 Jump Host - RDP
YES | NA | PARTNER3_RDP_JumpServer | RDP | 10.11.20.192 | 26.0 | 10.11.16.65 | 32.0 | 2207.0 |  | 2001:db8:a1:c0e::f:1 | 128.0 | 2207.0 |  | 10.11.19.177 | 28.0 | 4.0 | 3389.0 |  | Site 1 | S | management LAN | dc1-a-vcrdp003 |  | PARTNER3 Jump Host - RDP
### sheet PARTNER4
 |  |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED / in DC1 | CONFIGURED / in DC2 | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
NA | YES | PARTNER4_RDP_JumpServer | RDP | 10.12.20.0 | 27.0 | 10.12.16.65 | 32.0 | 2208.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2208.0 |  | 10.12.19.209 | 28.0 | 4.0 | 3389.0 |  | Site 2 | S | management LAN | dc2-a-vcrdp004 |  | PARTNER4 Jump Host - RDP
NA | YES | PARTNER4_SCP_SFTP_JumpServer | SCP | 10.12.20.0 | 27.0 | 10.12.16.65 | 32.0 | 2213.0 |  | 2001:db8:a2:c0e::f:1 | 128.0 | 2213.0 |  | 10.12.17.129 | 28.0 | 4.0 | 22.0 |  | Site 2 | S | management LAN | dc2-a-vcscp001 |  | PARTNER4 Jump Host - SCP, SFTP
### sheet PARTNER5
 |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
### sheet PARTNER2
 |  |  |  |  | TO (BALABIT) |  |  |  |  |  |  |  | TARGET |  |  |  |  |  |  |  |  |  | 
 |  |  | FROM |  | TO-IPv4 |  |  |  | TO-IPv6 |  |  |  | NET |  |  |  |  | Location |  |  |  |  | 
CONFIGURED | CONNECTION NAME | PROTOCOL | IP | MASK | IPv4 | MASK | PORT |  | IPv6 | MASK | PORT |  | IP/SEGMENT | MASK/PREFIX | IPv4/6 | PORT |  | Location | Section | Segment | Server |  | NOTES
ColumnMeaning
CONFIGURED in DC1, in DC2Whether the row was configured on the site 1 or site 2 cluster: YES, NO (planned, not configured) or NA (not for that site, as I read it). The PARTNER5 and PARTNER2 sheets have one CONFIGURED column only
CONNECTION NAMEThe connection policy on the SCB; several rows with the same name are the targets of one connection
PROTOCOLSSH, RDP or SCP; SCP rows are the SCP/SFTP connections
FROM IP, MASKThe source network the connection accepts; 0.0.0.0 with mask 0.0 is any source
TO-IPv4, TO-IPv6, PORTThe SCB's user address of that site and the port the connection listens on
TARGET IP/SEGMENT, MASK/PREFIX, IPv4/6, PORTThe target the user names with inband destination selection; 4.0 and 6.0 in IPv4/6 are the address family, out-of-band IPv6 targets are whole /64 ranges
Location, Section, Segment, ServerThe site, the datacenter (A, B) or S for the site's shared management LAN, the network, and the jump server's name; out-of-band jump servers had no names yet
NOTESWhat the target is

The numbers such as 22.0, 32.0 or 3389.0 are spreadsheet cells formatted as decimals; they are plain ports and prefix lengths. All out-of-band IPv4 targets are NO and the IPv6 targets of the same jump servers YES: the out-of-band networks were reached over IPv6 only, those outside site 1 over the backbone. Two cells contradict other rows: the Site 3 rows with target 10.19.3.56 (partner 1) and 10.19.3.48 (the organisation) are in section A but name dc3-b-, and the cloud team's SSH jump server is 10.19.17.96 here and 10.19.17.98 in the user access guide. The PARTNER4 sheet lists PARTNER4_SCP_SFTP_JumpServer (port 2213) and the PARTNER1-CLOUD sheet three connections (2210 to 2212) as configured in site 2, but the site 2 config.xml of September 2018 has none of them; they were probably added later.

Checked against One Identity Safeguard for Privileged Sessions 9.0

As builtToday
One connection per partner and protocol, selected by the port on one addressOrganising connections by port in non-transparent mode is still documented
Targets named by the user with inband destination selectionThe same syntax; a host name used as a target must comply with RFC 5890 since 6.1.0, which does not affect the address targets here
Out-of-band targets as IPv6 /64 rangesThe same rule: a range is a prefix, a single IPv6 address is /128
← solutionz