0. Поставить тег VLAN на интерфейс.

1. Настроить имя устройства:

hostnamectl hostname hq-srv.au-team.irpo
	exec bash
timedatectl set-timezone Asia/Novosibirsk

2. Настроить внутренние интерфейсы:

echo 'TYPE=eth' > /etc/net/ifaces/ens18/options
echo '192.168.100.2/27' > /etc/net/ifaces/ens18/ipv4address
echo 'default via 192.168.100.1' > /etc/net/ifaces/ens18/ipv4route
echo 'nameserver 8.8.8.8' > /etc/net/ifaces/ens18/resolv.conf
systemctl restart network
ping zz.ru -c3

3. Настроить пользователя SSH :

(sshuser)

useradd -u 2026 sshuser
echo "sshuser:P@ssw0rd" | chpasswd
usermod -aG wheel sshuser
echo "WHEEL_USERS ALL=(ALL:ALL) NOPASSWD: ALL" > /etc/sudoers.d/sshuser
su -l sshuser
sudo id

4. Включить SSH

echo "Authorized access only" > /etc/openssh/banner
echo -e "Port 2026\nMaxAuthTries 2\nAllowUsers sshuser\nBanner /etc/openssh/banner\n" >> /etc/openssh/sshd_config
systemctl restart sshd
ss -ltnp | grep sshd 

ssh sshuser@127.0.0.1 -p 2026

5. Установить необходимое ПО

apt-get update && apt-get install bind bind-utils -y

6. Сменить DNS

echo $'search au-team.irpo\nnameserver 127.0.0.1' > /etc/net/ifaces/ens18/resolv.conf

7. Настроить DNS:

rndc-confgen -a -c /etc/bind/rndc.key
+++

cat <<'EOF' > /etc/bind/options.conf
logging { };
options {
 listen-on { localnets; 127.0.0.1; };
 forwarders { 77.88.8.7; 77.88.8.3; };
 recursion yes;
 allow-recursion { any; };
 allow-query { any; };
 dnssec-validation no;
 
 directory "/etc/bind/zone";
 dump-file "/var/run/named/named_dump.db";
 statistics-file "/var/run/named/named.stats";
 recursing-file "/var/run/named/named.recursing"; 
 secroots-file "/var/run/named/named.scroots";
 pid-file none;
};
zone "au-team.irpo" {
 type master;
 file "au-team.irpo";
};
zone "168.192.in-addr.arpa" {
 type master;
 file "168.192.in-addr.arpa";
};
EOF

Файлы зоны — обратной:

cat <<'EOF' > /etc/bind/zone/168.192.in-addr.arpa
$TTL  1D
@    IN   SOA   au-team.irpo. root.au-team.irpo. (
                2025020600 ; serial
                12H        ; refresh
                1H         ; retry
                1W         ; expire
                1H         ; ncache
            )
      IN   NS    au-team.irpo.
1.100 IN   PTR   hq-rtr.au-team.irpo.
2.100 IN   PTR   hq-srv.au-team.irpo.
2.200 IN   PTR   hq-cli.au-team.irpo.
EOF

Запустить DNS:

chown :named /etc/bind/zone/au-team.irpo /etc/bind/zone/168.192.in-addr.arpa
systemctl enable --now bind

service network restart
host br-rtr
host -t PTR 192.168.100.2

9. Настроить часовой пояс:

timedatectl set-timezone Azia/Novosibirsk