⬡ Topologia di Rete — Cisco Packet Tracer Style
Catena di Hotel con Prenotazioni Online · 192.168.0.0/16
☁ INTERNET
Clienti · Ospiti · Gateway Pagamenti
95.100.50.0/29
SEDE CENTRALE — Milano · 192.168.0.0/24
FIREWALL
Palo Alto / FortiGate
Zone: WAN · DMZ · LAN · VPN
🛡️ ZONA DMZ · 192.168.0.0/28
Server Web
192.168.0.10
prenotazioni.hotel.it
Server Mail
192.168.0.11
mail.hotel.it
WAF
HTTPS
🏢 RETE INTERNA · 192.168.0.16/28
Database
192.168.0.50
MySQL · AES-256
MySQL:3306
Backup
192.168.0.60
Crittografato
PC Uffici
.65-.90
SW-SEDE
🔗 VPN CONCENTRATOR
VPN-HUB
12 tunnel IPsec
VPN IPsec AES-256
VPN IPsec AES-256
HOTEL 1 — Milano Centrale · 192.168.1.0/22
FW-HOTEL1
UTM Firewall
WAN · LAN1 · LAN2 · LAN3
NAT + VPN
SW-HOTEL1
Switch 2960 · 802.1Q
trunk
VLAN 10
Gestionale
192.168.1.0/26
Reception
.10
Ufficio
.11
Stampante
VLAN 20
Wi-Fi Ospiti
192.168.1.64/25
AP-HOTEL1
SSID: Hotel-Guest
Captive Portal
📱
💻
📱
⛔ SOLO Internet
VLAN 30
Videosorveglianza
192.168.1.192/27
CAM1
CAM2
···
×20
NVR
.200
🔒 Solo da Gestionale
HOTEL 2 — Roma Termini
192.168.2.0/22
FW-HOTEL2
VLAN 10
VLAN 20
VLAN 30
HOTEL 3 — Napoli Mare
192.168.3.0/22
FW-HOTEL3
VLAN 10
VLAN 20
VLAN 30
⋯ Hotel 4 – 12 ⋯
192.168.4.0 → 192.168.12.0
💳 Payment
Gateway
Stripe / PayPal
PCI-DSS
Firewall/UTM
Router VPN
Switch L2
Server DMZ
Server/PC Interni
Access Point
Telecamera IP
VPN Tunnel
Ethernet