50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
# Configuración del sistema NAT industrial
|
|
# Para acceso a PLCs/SCADA a través de VPN corporativa
|
|
|
|
ssh_server:
|
|
host: "91.99.210.72" # PC3 - Servidor Linux intermediario
|
|
port: 22
|
|
user: "root" # Usuario SSH verificado
|
|
key_file: "/app/certs/ssh_private_key"
|
|
|
|
# Reglas NAT predefinidas
|
|
nat_rules:
|
|
- external_port: 9001 # Puerto expuesto en PC3
|
|
target_ip: "10.1.33.11" # IP del PLC/SCADA
|
|
target_port: 5900 # Puerto VNC del PLC
|
|
description: "PLC Principal - VNC"
|
|
active: true
|
|
|
|
- external_port: 9002
|
|
target_ip: "10.1.33.11"
|
|
target_port: 80 # Puerto HTTP del PLC
|
|
description: "PLC Principal - Web Interface"
|
|
active: true
|
|
|
|
- external_port: 9003
|
|
target_ip: "10.1.33.12"
|
|
target_port: 502 # Modbus TCP
|
|
description: "PLC Secundario - Modbus"
|
|
active: false
|
|
|
|
# Configuración del servidor de gestión
|
|
management:
|
|
port: 8080
|
|
enabled: true
|
|
|
|
# Rango de puertos para asignación automática
|
|
auto_port_range:
|
|
start: 9000
|
|
end: 9999
|
|
|
|
# Configuración de logging
|
|
logging:
|
|
level: "INFO"
|
|
file: "/app/logs/nat_proxy.log"
|
|
max_size_mb: 50
|
|
backup_count: 5
|
|
|
|
# ZeroTier y redes
|
|
networks:
|
|
corporate_vpn: "10.1.33.0/24" # Red corporativa con PLCs
|
|
zerotier: "172.22.0.0/16" # Red ZeroTier (ajustar según tu config) |