INTERNET Firewall Requirements

(Allowed by default) Rule # 1 App Servers to SecureLink

Source
Destination
Destination ports

Source
Destination
Destination ports

ISOLATION Requirements Rule # 1 DNS

MWHC Source
Destination
Destionation Ports

MUMH Source
Destination
Destionation Ports

Rule # 2 NTP for QWS

MWHC Source
Destination
Destionation Ports

MUMH Source
Destination
Destionation Ports

Rule # 3 Outbound to GET/GUP Svrs

MWHC Source
Destination
Destionation Ports

MUMH Source
Destination
Destionation Ports

Rule # 4 Nexpose Scanning

MWHC Source
Destination
Destionation Ports
MUMH Source
Destination
Destionation Ports

Rule # 5 QWS/Tablet to App Servers-Scamp Service)

MWHC / MUMH Source
Destination
Destionation Ports

Rule # 6 App Servers-Scamp Service to QWS/Tablet

MWHC / MUMH Source
Destination
Destionation Ports

Rule # 7 Moxa to QWS

MWHC Source
Destination
Destionation Ports

MUMH Source
Destination
Destionation Ports

Rule # 8 App Server to QWS/Tablet Labs Interface

MWHC / MUMH Source
Destination
Destionation Ports

Rule # 9 App Server to Moxa Troubleshooting

MWHC / MUMH Source
Destination
Destionation Ports
WHCMSQLP01VT 10.160.234.186
54.167.173.59
TCP 22, 80, 443

WHCMSQLP01V 10.160.234.185
54.167.173.59
TCP 22, 80, 443

10.164.240.0/24
WHC-DNS
UDP 53

10.56.240.0/24
UMH-DNS
UDP 53

10.164.240.0/24
ntp.medstar.net
UDP 123

10.56.240.0/24
ntp.medstar.net
UDP 123

10.164.240.0/24
10.248.5.102, 10.248.5.103
TCP 2967

10.56.240.0/24
10.248.5.102, 10.248.5.103
TCP 2967

10.164.240.072.27.16.30, 172.27.16.31, 172.27.16.32, 172.27.16.33/24

10.164.240.0/24
TCP All
 UDP All

10.164.240.072.27.16.30, 172.27.16.31, 172.27.16.32, 172.27.16.33/24

10.56.240.0/24
TCP All
UDP All

vers-Scamp Service)
10.141.0.1/20, 10.146.0.1/20
10.160.234.185, 10.160.234.186
TCP 80, 27015

vice to QWS/Tablet
10.160.234.185, 10.160.234.186
10.141.0.1/20, 10.146.0.1/20
TCP 80, 27015

10.164.232.50-10.164.232.63
10.164.240.0/24
TCP 4001-4004

10.164.232.50-10.164.232.63
10.56.240.0/24
TCP 4001-4004

/Tablet Labs Interface

10.160.234.185, 10.160.234.186
10.164.240.0/24, 10.56.240.0/24
TCP 27001-27040

a Troubleshooting
10.160.234.185, 10.160.234.186
10.164.240.0/24, 10.56.240.0/24
TCP 80
VLAN Notes
ENT-PROD VLAN 234 Test SVI is on WHC-V-EB-SVR

ENT-PROD VLAN 234 PROD SVI is on WHC-V-EB-SVR

VLAN Notes
CLIN-NOINT VLAN 840 QTY=14 CLIN_NoINT vlan 601-855
3rd octect = VLAN # - 600
vlan 840 svi's need to created on F/Ws

CLIN-NoINT VLAN 840 QTY=3

VLAN Notes
CLIN-NOINT VLAN 840

CLIN-NoINT VLAN 840

VLAN Notes
CLIN-NOINT VLAN 840
MDC SEP servers

CLIN-NoINT VLAN 840

MDC SEP servers

VLAN Notes

CLIN-NOINT VLAN 840

CLIN-NOINT VLAN 840

VLAN Notes
CLIN_NoINT-WLAN 2261 MUMH, MWHC
App Servers

VLAN Notes
App Servers
CLIN_NoINT-WLAN 2261 MUMH, MWHC

VLAN Notes
Moax Boxes
CLIN-NOINT VLAN 840 MWHC

Moax Boxes
CLIN-NOINT VLAN 840 MUMH

VLAN Notes
App Servers
CLIN-NOINT VLAN 840

VLAN Notes
App Servers
CLIN-NOINT VLAN 840
 RITM0015431

Servers Name IP
Test WHCMSQLP01VT 10.160.234.186
Production WHCMSQLP01V 10.160.234.185

Server Name IP Address

WHCMSQLP01VT 10.160.234.186
WHCMSQLP01V 10.160.234.185

Quantum W/S
IP Address Switch

10.168.80.26

10.164.240.0/24 tbd
10.56.240.0/24 tbd

M15sep01v and m15sep02v are the MDC replacements FOR GEP/GUP SERVERS

m15sep01v.MEDSTAR.AD.MEDSTAR.NET 10.248.5.102
m15sep02v.MEDSTAR.AD.MEDSTAR.NET 10.248.5.103

Requested Wireless Configuration for Viper Tablets –need to CLIN_NoINT-WLAN

GW
MWHC Vlan2261 CLIN-NOINT-WLAN 10.141.0.1 255.255.240.0 CONFIG
MUMH Vlan2261 CLIN-NOINT-WLAN 10.146.0.1 255.255.240.0 CONFIG
 Quantum Workstations
Serial No. MAC Address IP
PH1001913 00:13:95:20:04:36 10.168.80.26
PH1001936 00:13:95:36:08:FA 10.168.80.27
PH1001970 00:13:95:1C:7A:CF 10.168.80.28
PH1001971 00:13:95:38:C5:B8 10.168.80.29
VLAN Category VLAN ID Notes PH1001973 00:13:95:36:4B:35 10.168.132.26
ENT-PROD VLAN 234 Test PH1001975 00:13:95:36:4B:37 10.168.130.26
ENT-PROD VLAN 234 Prod PH1002555 00:13:95:46:21:ED 10.168.130.27

Moxa Boxes
VLAN ID VLAN Category Location OR Serial No. MAC Address IP
TBD* TBZDB1118252 00:90:E8:89:83:9A TBD*
TBD* TBAJB1124016 00:90:E8:9F:35:E3 TBD*
CLIN-NoINT TBD* TBABB1127666 00:90:E8:94:81:74 TBD*
TBD* TBAJB1124026 00:90:E8:9F:35:ED TBD*
840 CLIN-NoINT MWHC
840 CLIN-NoINT MUMH Spectrum to use following Static IP range to program Moxa Bo
and document which device/Serial number is installed in each
10.164.232.50 - 10.164.232.63

nts FOR GEP/GUP SERVERS

CLIN_NoINT-WLAN

255.255.240.0 CONFIG 10.141.0.1/20

255.255.240.0 CONFIG 10.146.0.1/20
tions
IP
36 10.168.80.26
FA 10.168.80.27
CF 10.168.80.28
B8 10.168.80.29
35 10.168.132.26
37 10.168.130.26
ED 10.168.130.27

Boxes
AC Address IP
0:E8:89:83:9A TBD*
0:E8:9F:35:E3 TBD*
0:E8:94:81:74 TBD*
0:E8:9F:35:ED TBD*

P range to program Moxa Box,

al number is installed in each OR:
232.63