Topologie Reseau - Site Vonnas
Derniere MAJ : 2026-02-12 | Source : Config Fortigate + configs FortiSwitch (5/5) + tables MAC (558 entrees) + inventaire NetMapper
1. Topologie logique (VLANs / Zones)
Equipements
| Nom |
IP |
Modele |
Emplacement |
Criticite |
| FIBRE |
185.19.240.246/31 |
WAN_FIBRE (VLAN 23) |
Internet principal |
C1 |
| V4G |
192.168.1.0/24 |
WAN_Backup-4G (VLAN 20) |
Secours 4G |
C1 |
| ADSL |
89.90.120.108/31 |
NET_SYNCHRO (VLAN 21) |
ADSL synchro |
C1 |
| FW |
.254 sur chaque VLAN |
Fortigate 60F |
Routeur inter-VLAN |
C1 |
| ADMIN |
128.55.55.0/24 |
VLAN 1 - LAN_ADMIN |
Postes admin, imprimantes, video, Raspberry Pi |
Standard |
| PC |
10.1.10.0/24 |
VLAN 10 - LAN_PC |
PROJET migration postes |
Standard |
| VISIT |
192.168.0.0/24 |
VLAN 11 - LAN_VISITEUR |
Wifi visiteurs (isole) |
Standard |
| VOIP |
10.1.50.0/24 |
VLAN 50 - LAN_VOIP |
SBC 3CX + telephones |
Standard |
| SERV |
10.1.230.0/24 |
VLAN 230 - LAN_SERVEUR |
VMs, ESXi, vCenter, Backup, ESET |
C1 |
| MGMT |
10.1.250.0/24 |
VLAN 250 - LAN_MGMT |
iLO, SAN01, switches, UPS Riello |
C2 |
| BACKUP |
10.1.240.0/24 |
VLAN 240 - LAN_BACKUP |
PROJET isolation backup |
C1 |
| INDGEST |
10.1.1.0/24 |
VLAN 110 - LAN_INDUS_GEST |
Serveurs usine, postes IT, imprimantes, wifi |
C2 |
| INDAUTO |
10.1.2.0/24 |
VLAN 120 - LAN_INDUS_AUTO |
Postes conduite Nutriciel, 18 Moxa NPort |
C2 |
| AZURE |
10.10.200.0/24 |
VLAN 200 - AZURE |
VPN Azure - AVD |
Standard |
Connexions
| Source |
Port src |
Destination |
Port dst |
Type |
VLANs |
| FIBRE |
— |
FW |
— |
Hard |
23 |
| V4G |
— |
FW |
— |
Soft |
20 |
| ADSL |
— |
FW |
— |
Soft |
21 |
| FW |
— |
ADMIN |
— |
Hard |
1 |
| FW |
— |
PC |
— |
Hard |
10 |
| FW |
— |
VISIT |
— |
Hard |
11 |
| FW |
— |
VOIP |
— |
Hard |
50 |
| FW |
— |
SERV |
— |
Hard |
230 |
| FW |
— |
MGMT |
— |
Hard |
250 |
| FW |
— |
BACKUP |
— |
Hard |
240 |
| FW |
— |
INDGEST |
— |
Hard |
110 |
| FW |
— |
INDAUTO |
— |
Hard |
120 |
| FW |
— |
AZURE |
— |
Hard |
200 |
| SERV |
— |
MGMT |
— |
Soft |
230, 250 |
| INDGEST |
— |
SERV |
— |
Soft |
110, 230 |
| INDAUTO |
— |
INDGEST |
— |
Soft |
120, 110 |
| ADMIN |
— |
SERV |
— |
Soft |
1, 230 |
Legende
| Couleur |
Zone |
Description |
| 🔴 Rouge |
WAN |
Liens Internet (Fibre, 4G, ADSL) |
| 🟡 Jaune |
Firewall |
Fortigate 60F - point central |
| 🟢 Vert |
Bureaux |
Postes utilisateurs, visiteurs, VoIP |
| 🔵 Bleu |
Serveurs |
VMs, management, backup |
| 🟠 Orange |
Usine |
Gestion IT + OT industriel |
| 🟣 Violet |
Cloud |
VPN Azure |
| ⬜ Gris |
Management |
iLO, SAN, switches |
- Trait plein = connexion active
- Trait pointille = dependance logique ou lien backup
2. Topologie physique - Bureaux
Source : configs FortiSwitch 5/5 + tables MAC 558 entrees (2026-02-12)
FortiGate S/N : GT60FTK2109CWPM | MAC : 94:ff:3c:68:8c:b2
Equipements
| Nom |
IP |
Modele |
Emplacement |
Criticite |
| ISP_FIBRE |
— |
Fibre |
WAN |
— |
| ISP_4G |
— |
4G |
WAN |
— |
| ISP_ADSL |
— |
ADSL |
WAN |
— |
| FW |
10.1.250.254 |
Fortigate FG-60F (S/N GT60FTK2109CWPM) |
— |
C1 |
| SWADMIN |
10.255.1.3 |
FortiSwitch S124E (v7.2.3) |
BAIE_ADMINISTRATION, Salle serveur |
C1 |
| SW48 |
10.255.1.6 |
FortiSwitch S148F-FPOE (v7.2.4) |
BAIE_BUREAU_48POE |
C1 |
| SW24 |
10.255.1.4 |
FortiSwitch S124F (v7.2.4) |
BAIE_BUREAU_24 |
Standard |
| SWQUAL |
10.255.1.5 |
FortiSwitch S108F-POE (v7.6.0) |
BUR_QUALITE_8P |
Standard |
| SWINDUS |
10.255.1.2 |
FortiSwitch S108F (v7.2.3) |
BAIE_INDUS |
C1 |
| DGS3120 |
128.55.55.249 |
D-Link DGS-3120 |
— |
Standard |
| SAN |
10.1.250.1 / .2 |
SAN01 - HPE MSA 2040 |
Salle serveur (SPOF cluster) |
C1 |
| ESX1 |
iLO .250.10 / VM .230.10 |
soresx1 - DL380 Gen9 (MAC 38:63:bb:3f:a3:98) |
Salle serveur |
C1 |
| ESX2 |
iLO .250.20 / VM .230.20 |
soresx2 - DL380 Gen9 (MAC 38:63:bb:3f:02:98) |
Salle serveur |
C1 |
| SRVS |
— |
Serveurs V230 |
BAIE_ADMIN port1+20 dual-NIC (6c:1f:f7), port13+14 HPE dual-NIC (d4:f5:ef), port15 serveur (50:9a:4c) |
C1 |
| BACKUP |
— |
SorSauvegarde + srv-backup + NAS Ugreen DXP4800 |
Salle serveur |
C1 |
| MGMT |
— |
Hub mgmt V250 |
BAIE_ADMIN port24 (2x iLO HPE + Onduleur Riello + 2 equip management) |
C2 |
| TRUNK4 |
— |
Trunk non-manage |
BAIE_ADMIN port4 (2x Raspberry Pi + Zebra + equip usine/mgmt) |
Standard |
| WIFI1 |
.250.101 |
FortiAP 231G (MAC 48:3a:02:10:33:40) |
Borne_RdC_Couloir |
Standard |
| WIFI2 |
.250.102 |
FortiAP 231G (MAC 48:3a:02:10:0b:40) |
Borne_Etage_Couloir |
Standard |
| WIFI3 |
.250.104 |
FortiAP 231G (MAC 48:3a:02:0d:7e:20) |
Borne_Salle_Reunion |
Standard |
| SBC |
— |
3CX (MAC 80:ee:73:f8:fd:90) |
Passerelle VoIP |
Standard |
| PHONES |
— |
20 telephones Yealink (MAC 24:9a:d8:a2:xx:xx) |
bureaux + qualite |
Standard |
| BADGE |
— |
Badgeuse Sas (MAC 00:0b:84:0c:cf:fe) |
Sas |
Standard |
| RESP |
— |
HP 1910 + Moxa NPort |
Resp production |
Standard |
| ORPH |
— |
ex-HP ProCurve |
sw_ADMIN ORPHELIN |
— |
| POSTES |
128.55.55.x |
Postes bureaux |
Bureaux |
Standard |
| UPS |
.250.100 |
Onduleur Riello (MAC 00:c0:ff:1e:9a:05) |
Salle serveur |
C1 |
Connexions
| Source |
Port src |
Destination |
Port dst |
Type |
VLANs |
| ISP_FIBRE |
— |
FW |
port3 |
Hard |
23 |
| ISP_4G |
— |
FW |
— |
Soft |
— |
| ISP_ADSL |
— |
FW |
port2 |
Soft |
21 |
| FW |
FortiLink |
SWADMIN |
— |
Hard |
— |
| SWADMIN |
trunk-id 5 |
SW48 |
FortiLink |
Hard |
— |
| SWADMIN |
trunk-id 4 |
SWINDUS |
FortiLink |
Hard |
— |
| SW48 |
trunk-id 1 |
SW24 |
FortiLink |
Hard |
— |
| SW48 |
trunk-id 2 |
SWQUAL |
FortiLink |
Hard |
— |
| FW |
— |
DGS3120 |
— |
Hard |
— |
| SWADMIN |
SAS |
SAN |
— |
Hard |
— |
| SWADMIN |
port5-8 Static (2/4 actifs) |
ESX1 |
Trunk_ESXI1 |
Hard |
— |
| SWADMIN |
port9-12 Static (4/4 actifs) |
ESX2 |
Trunk_ESXI2 |
Hard |
— |
| SAN |
SAS direct |
ESX1 |
— |
Hard |
— |
| SAN |
SAS direct |
ESX2 |
— |
Hard |
— |
| SWADMIN |
— |
SRVS |
— |
Hard |
230 |
| SWADMIN |
— |
BACKUP |
— |
Hard |
— |
| SWADMIN |
port24 |
MGMT |
— |
Hard |
250 |
| SWADMIN |
port4 |
TRUNK4 |
— |
Hard |
— |
| SW48 |
port15 PoE |
WIFI1 |
— |
Hard |
250 |
| SW48 |
port14 PoE |
WIFI2 |
— |
Hard |
250 |
| SW48 |
port17 PoE |
WIFI3 |
— |
Hard |
250 |
| SW24 |
port22 |
SBC |
— |
Hard |
50 |
| SW48 |
— |
PHONES |
— |
Soft |
50, 1 |
| SW48 |
port37 |
BADGE |
— |
Hard |
11 |
| SWADMIN |
port28 SFP Static |
RESP |
TRUNK_RESP_PROD |
Hard |
— |
| SWADMIN |
port21-22 DOWN |
ORPH |
— |
Soft |
— |
| DGS3120 |
— |
POSTES |
— |
Hard |
— |
| UPS |
— |
SWADMIN |
— |
Soft |
— |
| UPS |
— |
SAN |
— |
Soft |
— |
| UPS |
— |
ESX1 |
— |
Soft |
— |
| UPS |
— |
ESX2 |
— |
Soft |
— |
Arbre FortiLink (confirme par tables MAC)
FortiGate FG-60F (GT60FTK2109CWPM)
└── FortiLink
└── BAIE_ADMINISTRATION (S124E, 10.255.1.3) ── coeur
├── BAIE_BUREAU_48POE (S148F, 10.255.1.6) ── 24/48 ports actifs
│ ├── BAIE_BUREAU_24 (S124F, 10.255.1.4) ── 4/24 ports actifs
│ └── BUR_QUALITE_8P (S108F-POE, 10.255.1.5) ── 2/8 ports actifs
└── BAIE_INDUS (S108F, 10.255.1.2) ── 1/8 port actif → usine
3. Topologie physique - Usine
Source : schema topologie usine (Visio Reseau vonnas 220914.pdf) + verification FortiSwitch configs 2026-02-12
Important : chaque emplacement a 2 switches HP 1910 physiques separes (un Gestion V110, un Industriel V120)
Distribution Gestion : S108F → .216 (trunk SFP, port49) → .215 (G0/50) → .214 (G0/49 ↔ G0/25). Puis .215 et .216 distribuent en etoile vers les HP 1910.
Equipements
| Nom |
IP |
Modele |
Emplacement |
Criticite |
| S124 |
— |
FortiSwitch S124 (S/N S124EN5920012779) |
Salle Serveur Gestion (COEUR USINE) |
C1 |
| S108F |
— |
FortiSwitch S108F (S/N S108FNTV21005351) |
Charpente Dosage |
C1 |
| FG60F |
.254 sur chaque VLAN |
Fortigate FG-60F (S/N GT60FTK2109CWPM) |
Charpente Dosage (meme FW que bureaux) |
C1 |
| SW216 |
10.1.1.216 |
HPE 1920s 48+4SFP JL382A |
Charpente Dosage (Distrib .206-.212, .215) |
C1 |
| SW215 |
10.1.1.215 |
HPE 1920s 48+4SFP JL382A |
Poste 3 (Distrib .203, .204, .205, .214) |
C1 |
| SW214 |
10.1.1.214 |
HPE 1920s 24+2SFP JL381A |
Salle Serveurs (Uplink .215 via G0/25) |
Standard |
| G203 |
10.1.1.203 |
HP 1910 |
Magasin |
Standard |
| G204 |
10.1.1.204 |
HP 1910 |
Poste 2 |
Standard |
| G205 |
10.1.1.205 |
HP 1910 |
Poste 1 |
Standard |
| G206 |
10.1.1.206 |
HP 1910 |
Presses |
Standard |
| G208 |
10.1.1.208 |
HP 1910 |
Ensachage |
Standard |
| G209 |
10.1.1.209 |
HP 1910 |
Rec. Nord |
Standard |
| G210 |
10.1.1.210 |
HP 1910 |
Maintenance |
Standard |
| G211 |
10.1.1.211 |
HP 1910 |
Salle ctrl |
Standard |
| G212 |
10.1.1.212 |
HP 1910 |
Mash |
Standard |
| I201 |
10.1.2.201 |
HP 1910 (S/N CN40BX103R) |
Salle Serveur (Feuille) |
Standard |
| I202 |
10.1.2.202 |
HP 1910 (S/N CN4ABX107R) |
Poste 3 - HUB NORD (Distrib .201, .203, .204, .205) |
C2 |
| I203 |
10.1.2.203 |
HP 1910 (S/N CN40BX109H) |
Magasin |
Standard |
| I204 |
10.1.2.204 |
HP 1910 (S/N CN40BX1093) |
Poste 2 |
Standard |
| I205 |
10.1.2.205 |
HP 1910 (S/N CN40BX10TN) |
Poste 1 |
Standard |
| I206 |
10.1.2.206 |
HP 1910 (S/N CN40BX1078) |
Presses |
Standard |
| I207 |
10.1.2.207 |
HP 1910 (S/N CN4ABX107R) |
Charp. Dosage - HUB V120 (Distrib .202, .206-.212) |
C2 |
| I208 |
10.1.2.208 |
HP 1910 |
Ensachage |
Standard |
| I209 |
10.1.2.209 |
HP 1910 |
Rec. Nord |
Standard |
| I210 |
10.1.2.210 |
HP 1910 |
Maintenance |
Standard |
| I211 |
10.1.2.211 |
HP 1910 |
Salle ctrl |
Standard |
| I212 |
10.1.2.212 |
HP 1910 |
Mash |
Standard |
| ESXB |
iLO .250.50 / VM .230.50 |
soresxback - DL360 Gen10 (ESXi 6.7) |
Charpente Dosage |
C1 |
Connexions
| Source |
Port src |
Destination |
Port dst |
Type |
VLANs |
| S124 |
Fibre 1Gb |
S108F |
Fibre 1Gb |
Hard |
Trunk tous VLANs |
| S108F |
G0/1+G0/8 |
FG60F |
Trunk multi-liens |
Hard |
Trunk tous VLANs |
| S108F |
Trunk 1Gb |
SW216 |
— |
Hard |
110 |
| SW216 |
port49 |
SW215 |
G0/50 |
Hard |
110 |
| SW215 |
G0/49 |
SW214 |
G0/25 |
Hard |
110 |
| SW215 |
G0/48 |
G203 |
G0/17 |
Hard |
110 |
| SW215 |
G0/52 |
G204 |
G0/17 |
Hard |
110 |
| SW215 |
G0/51 |
G205 |
G0/17 |
Hard |
110 |
| SW216 |
G0/48 |
G206 |
G0/17 |
Hard |
110 |
| SW216 |
G0/52 |
G208 |
G0/17 |
Hard |
110 |
| SW216 |
G0/51 |
G209 |
G0/17 |
Hard |
110 |
| SW216 |
G0/50 |
G210 |
G0/18 |
Hard |
110 |
| SW216 |
G0/47 |
G211 |
G0/17 |
Hard |
110 |
| G210 |
G0/17 |
G212 |
G0/17 |
Hard |
110 |
| SW216 |
G0/14 |
I207 |
G0/14 |
Hard |
120 |
| I207 |
? |
I202 |
? |
Hard |
120 |
| I202 |
G0/18 |
I201 |
G0/17 |
Hard |
120 |
| I202 |
G0/20 |
I203 |
— |
Hard |
120 |
| I202 |
G0/19 |
I204 |
— |
Hard |
120 |
| I202 |
G0/16 |
I205 |
— |
Hard |
120 |
| I207 |
G0/15 |
I206 |
— |
Hard |
120 |
| I207 |
G0/16 |
I208 |
— |
Hard |
120 |
| I207 |
G0/17 |
I209 |
— |
Hard |
120 |
| I207 |
G0/19 |
I211 |
— |
Hard |
120 |
| I207 |
G0/18 |
I210 |
— |
Hard |
120 |
| I207 |
/17 |
I212 |
— |
Hard |
120 |
| SW216 |
— |
ESXB |
— |
Hard |
— |
Inventaire switches usine
Coeur Fortinet
| # |
Equipement |
Modele |
S/N |
Emplacement |
| 1 |
FortiSwitch S124 |
Fortinet S124 |
S124EN5920012779 |
Salle Serveur Gestion |
| 2 |
FortiSwitch S108F |
Fortinet S108F |
S108FNTV21005351 |
Charpente Dosage |
| 3 |
Fortigate FG-60F |
Fortinet FG-60F |
GT60FTK2109CWPM |
Charpente Dosage (meme FW que bureaux, visible via trunk BAIE_INDUS) |
HPE 1920s - Gestion uniquement
| # |
Modele |
S/N |
IP (.1.x) |
Emplacement |
| 4 |
HPE 1920s 24+2SFP JL381A |
CN98K3L1DJ |
10.1.1.214 |
Salle Serveurs |
| 5 |
HPE 1920s 48+4SFP JL382A |
CN99K3M28P |
10.1.1.215 |
Poste 3 |
| 6 |
HPE 1920s 48+4SFP JL382A |
CN99K3M2M1 |
10.1.1.216 |
Charpente Dosage |
HP 1910-16G - Cote GESTION (V110, 10.1.1.x)
| # |
S/N |
IP |
Emplacement |
| 7 |
CN40BX101V |
10.1.1.203 |
Magasin |
| 8 |
CN4ABX1185 |
10.1.1.204 |
Poste 2 |
| 9 |
CN40BX1099 |
10.1.1.205 |
Poste 1 |
| 10 |
CN40BX1086 |
10.1.1.206 |
Presses |
| 11 |
CN40BX1018 |
10.1.1.208 |
Ensachage |
| 12 |
CN40BX107G |
10.1.1.209 |
Reception Nord |
| 13 |
CN40BX107Q |
10.1.1.210 |
Maintenance |
| 14 |
CN40BX1097 |
10.1.1.211 |
Salle controle |
| 15 |
CN4ABX107B |
10.1.1.212 |
Mash |
HP 1910-16G - Cote INDUSTRIEL (V120, 10.1.2.x)
Topologie en ARBRE : .202 (hub nord) et .207 (hub sud) sont des points de distribution intermediaires
| # |
S/N |
IP |
Emplacement |
Connecte a |
Role |
| 16 |
CN40BX103R |
10.1.2.201 |
Salle Serveur Indus |
.202 (G0/18↔G0/17) |
Feuille |
| 17 |
CN4ABX107R |
10.1.2.202 |
Poste 3 |
.207 (? ↔ ?) |
HUB NORD |
| 18 |
CN40BX109H |
10.1.2.203 |
Magasin |
.202 (G0/20) |
Feuille |
| 19 |
CN40BX1093 |
10.1.2.204 |
Poste 2 |
.202 (G0/19) |
Feuille |
| 20 |
CN40BX10TN |
10.1.2.205 |
Poste 1 |
.202 (G0/16) |
Feuille |
| 21 |
CN40BX1078 |
10.1.2.206 |
Presses |
.207 (G0/15) |
Feuille |
| 22 |
CN4ABX107R |
10.1.2.207 |
Charpente Dosage |
.216 (G0/14↔G0/14, T) |
HUB V120 |
| 23 |
(a relever) |
10.1.2.208 |
Ensachage |
.207 (G0/16) |
Feuille |
| 24 |
(a relever) |
10.1.2.209 |
Reception Nord |
.207 (G0/17) |
Feuille |
| 25 |
(a relever) |
10.1.2.210 |
Maintenance |
.207 (G0/18) |
Feuille |
| 26 |
(a relever) |
10.1.2.211 |
Salle controle |
.207 (G0/19) |
Feuille |
| 27 |
(a relever) |
10.1.2.212 |
Mash |
.207 (/17) |
Feuille |
Total : 27 switches usine (3 coeur + 3 HPE 1920s + 9 HP 1910 Gestion + 12 HP 1910 Industriel)
Legende liens usine
| Type |
Marqueur |
Liens concernes |
| Fibre 1Gb |
(sans marqueur) |
S124↔S108F, S108F↔.216, .216↔.215, .215↔.214, .215↔.204, .215↔.205, .216↔.209, .216↔.211, .216↔.210, .210↔.212 |
| Fibre sur transceiver |
(T) |
.215↔.203, .216↔.206, .216↔.208, .216↔.207 |
| Cuivre 1Gb |
— |
Distribution V120 vers HP 1910 |
4. Points d'attention topologiques
Critique
| # |
Constat |
Risque |
Recommandation |
| 1 |
Fortigate 60F = point central unique |
SPOF reseau total |
Evaluer redondance FW ou au minimum un spare a froid |
| 2 |
BAIE_INDUS port1 = seul lien usine |
~73 equipements derriere 1 port 1 Gbps (SPOF) |
Ajouter un second lien (LAG) ou lien de secours |
| 3 |
Trunk_ESXI1 degrade |
port5+6 DOWN → soresx1 a 2 Gbps au lieu de 4 |
Verifier cablage/SFP port5 et port6 |
| 4 |
SAN01 = SPOF stockage cluster |
Toutes VMs bureaux DOWN |
Dual controllers mitigent, mais pas de second SAN |
Important
| # |
Constat |
Risque |
Recommandation |
| 5 |
Fortigate FG-60F physiquement a Charpente Dosage |
Pas en salle serveur = acces physique moins protege |
Evaluer relocalisation en salle serveur |
| 6 |
Cote Industriel = arbre depuis .207 |
Panne .207 = TOUT V120 coupe (12 switches). Panne .202 = 4 switches coupes (.201,.203,.204,.205) |
.207 = SPOF total V120 |
| 6b |
Cote Gestion V110 = chaine HPE |
Panne .216 = TOUTE l'usine coupee (V110 + V120). Panne .215 = .214 + 3 HP 1910 coupes. .214 = feuille, impact local |
.216 = SPOF usine complet (V110 + V120 via .207) |
| 7 |
sw_ADMIN orphelin |
port21-22 DOWN, 0 MAC, ex-HP ProCurve |
Supprimer la config trunk sw_ADMIN |
| 8 |
3 equip VLAN999 sur BAIE_INDUS |
2 postes HP + 1 equip sur VLAN parking |
Assigner au bon VLAN ou decommissionner |
| 9 |
Trunks tous Static (pas LACP) |
Pas de detection de panne lien |
Evaluer migration LACP sur trunks ESXi |
| # |
Constat |
Detail |
| 10 |
Wifi usine = Linksys WRT54GL |
Materiel obsolete (2005-2010) - planifier remplacement |
| 11 |
Cameras Dahua sur VLAN admin |
Pas de segmentation video - creer VLAN dedie |
| 12 |
BAIE_BUREAU_24 quasi-vide |
4/24 ports (17%) - forte capacite disponible |
| 13 |
BUR_QUALITE_8P minimal |
2/8 ports (25%) |
| 14 |
24 ports libres sur BAIE_BUREAU_48POE |
Capacite extension bureaux disponible |
| 15 |
2 Yealink sans trafic VoIP |
port6 et port9 BAIE_BUREAU_48POE - V1 seul, pas de V50 |
Resolu (9 items)
Encore manquantes
Voir aussi
Document genere par NetMapper (A3) le 2026-02-12 | Inclus dans le Pack Panne