G1 : Advanced Networking Protocol Workshop : Différence entre versions

De Wiki de Projets IMA
(Week 3 (12/10/2015))
(Workshop progress)
Ligne 18 : Ligne 18 :
 
=== Week 2 (05/10/2015) ===
 
=== Week 2 (05/10/2015) ===
 
*ssh pour la machine cordouan
 
*ssh pour la machine cordouan
<pre>ssh root@cordouan.insecserv.deule.net</pre>
+
{| width=10%
 +
|<pre>
 +
ssh root@cordouan.insecserv.deule.net
 +
</pre>
 +
|}
  
 
*configuration de la machine virtuelle XEN
 
*configuration de la machine virtuelle XEN
<pre>xen-create-image --hostname=WESTMALLE --ip=193.48.57.161 --netmask=255.255.255.240 --gateway=193.48.57.174 --nameserver=193.48.57.48 --dir=/usr/local/xen --genpass=0 \
+
{| width=10%
--password=pasglop --dist=stable</pre>
+
|<pre>
 +
xen-create-image --hostname=WESTMALLE --ip=193.48.57.161 --netmask=255.255.255.240 --gateway=193.48.57.174 \
 +
--nameserver=193.48.57.48 --dir=/usr/local/xen --genpass=0 --password=pasglop --dist=stable
 +
</pre>
 +
|}
  
 
*permet de la créer une fois le fichier de config
 
*permet de la créer une fois le fichier de config
<pre>xl create /etc/xen/WESTMALLE.cfg</pre>
+
{| width=10%
 +
|<pre>
 +
xl create /etc/xen/WESTMALLE.cfg
 +
</pre>
 +
|}
  
 
*emplacement fichier de configuration de la machine XEN
 
*emplacement fichier de configuration de la machine XEN
<pre> /etc/XEN/WESTMALLE.cfg</pre>  
+
{| width=10%
 +
|<pre>
 +
/etc/XEN/WESTMALLE.cfg
 +
</pre>
 +
|}
 
[[Fichier:WESTMALLEcfg.txt]]<br>
 
[[Fichier:WESTMALLEcfg.txt]]<br>
 
modification de la taille mémoire, et "bridge=IMA5sc"
 
modification de la taille mémoire, et "bridge=IMA5sc"
  
 
*permet de lancer la machine virtuelle XEN
 
*permet de lancer la machine virtuelle XEN
<pre>xl console WESTMALLE</pre>
+
{| width=10%
 +
|<pre>
 +
xl console WESTMALLE
 +
</pre>
 +
|}
  
 
=== Week 3 (12/10/2015) ===
 
=== Week 3 (12/10/2015) ===
 
This week we started with installing few important packages in the Xen virtual server such as <code>apache2</code>, <code>fail2ban</code>, <code>bind9</code>, <code>dnsutils</code> and <code>openssh-server</code>. To secure the ssh server, we changed the configuration line (as shown below) of the file /etc/ssh/sshd_config:
 
This week we started with installing few important packages in the Xen virtual server such as <code>apache2</code>, <code>fail2ban</code>, <code>bind9</code>, <code>dnsutils</code> and <code>openssh-server</code>. To secure the ssh server, we changed the configuration line (as shown below) of the file /etc/ssh/sshd_config:
{| width=10% align=left
+
{| width=10%  
|<pre>Port 619
+
|<pre>
 +
Port 619
 
PermitRootLogin no-password
 
PermitRootLogin no-password
 
</pre>
 
</pre>
 
|}
 
|}

Version du 21 octobre 2015 à 18:57

The main aim of this workshop is to realize a redundant network infrastructure to ensure maximum availability in case of a device or path failure. The architecture of the network is shown in the diagram given below.

Network architecture.PNG

Scope statement for the specific task

Task overview

We were assigned to configure one of the L3 switches to enable routing protocol(for IPv4 and IPv6) and also to ensure layer 3 redundancy with HSRP.

Materials used for the specific task

  • Layer-3 Switch : Cisco Catalyst 3560-E
  • PC with serial connection

Workshop progress

Week 1 (28/09/2015)

conf files :

Week 2 (05/10/2015)

  • ssh pour la machine cordouan
ssh root@cordouan.insecserv.deule.net
  • configuration de la machine virtuelle XEN
xen-create-image --hostname=WESTMALLE --ip=193.48.57.161 --netmask=255.255.255.240 --gateway=193.48.57.174 \
--nameserver=193.48.57.48 --dir=/usr/local/xen --genpass=0 --password=pasglop --dist=stable
  • permet de la créer une fois le fichier de config
xl create /etc/xen/WESTMALLE.cfg
  • emplacement fichier de configuration de la machine XEN
/etc/XEN/WESTMALLE.cfg

Fichier:WESTMALLEcfg.txt
modification de la taille mémoire, et "bridge=IMA5sc"

  • permet de lancer la machine virtuelle XEN
xl console WESTMALLE

Week 3 (12/10/2015)

This week we started with installing few important packages in the Xen virtual server such as apache2, fail2ban, bind9, dnsutils and openssh-server. To secure the ssh server, we changed the configuration line (as shown below) of the file /etc/ssh/sshd_config:

Port 619
PermitRootLogin no-password