Changes

Newer edit →

OSL740 Lab 6

28,225 bytes added, 18:27, 2 March 2022

Creating initial copy

=LAB PREPARATION=
[[Image:my-network.png|thumb|right|350px|Setting up networks is an essential operation for a system administrator. Maintaining network connectivity and securing the network are also essential operations. In this lab, we will '''configure a private virtual network using static IP addresses''' (eg. wired workstation connections). We will learn how to setup a DHCP network (eg. for notebook, table and smartphones) in lab 8.]]
===Purpose / Objectives of Lab 6===

In this lab, you will learn the basics of networking by using your '''Virtual Machines'''. You will first set up a '''virtual network''' among those machines. In addition, you will learn to set up '''network names''' (to associate with server's IP Addresses), '''associate network services with port numbers''' for troubleshooting purposes, and use shell scripts with arrays to store network configuration data.

Main Objectives

# Configure a private virtual network for your '''VMs''' and your '''c7host''' machine
# Configure network interfaces for your Virtual Machines using both '''graphical''' and '''command-line''' utilities.
# Use '''local hostname resolution''' to resolve simple server names with their corresponding IP Addresses
# Use common networking utilities to associate network services with port numbers for troubleshooting purposes


{|cellpadding="15" width="80%" cellspacing="0"

|- valign="top"

|colspan="3" style="font-size:16px;font-weight:bold;border-bottom: thin solid black;border-spacing:0px;"|Minimum Required Materials 

|colspan="2" style="font-size:16px;font-weight:bold;border-bottom: thin solid black;border-spacing:0px;padding-left:20px;"|Linux Command Reference 

|- valign="top"

|style="padding-left:20px;" |[[Image:ssd.png|thumb|left|85px|Solid State Drive]]

|style="padding-left:20px;" |[[Image:ubs-key.png|thumb|left|85px|USB key (for backups)]]

|style="padding-left:20px;" |[[Image:log-book.png|thumb|left|70px|Lab6 Log Book]]

|style="padding-left:20px;" | Networking Utilities 
[http://man7.org/linux/man-pages/man8/ip.8.html ip] 
[http://www.serverlab.ca/tutorials/linux/administration-linux/configure-centos-6-network-settings/ system-config-network] 
[http://man7.org/linux/man-pages/man8/ping.8.html ping] 
[http://man7.org/linux/man-pages/man8/arp.8.html arp] 
[http://man7.org/linux/man-pages/man8/ss.8.html ss]
|style="padding-left:20px;" | Networking Configuration Files 
[https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-networkscripts-interfaces.html Interface Configuration] 
[https://linux.die.net/man/5/resolv.conf resolv.conf] 
|style="padding-left:20px;" |Additional Utilities 
[http://man7.org/linux/man-pages/man1/find.1.html find] 
[http://man7.org/linux/man-pages/man1/tail.1.html tail] 
[http://man7.org/linux/man-pages/man1/cp.1.html cp]
|}

=INVESTIGATION 1: CONFIGURING A VIRTUAL NETWORK =

For the remainder of this course, we will focus on networking involving our VMs. This lab will focus on setting up a virtual network, connecting our VMs and c7host machine to the network, and configuring our private network to make more convenient to use, troubleshoot and protect. '''Lab 7''' will focus on configuring SSH and making access to the private network more secure. Finally, '''lab 8''' will focus on configuring mobile (as well as wired devices) via DHCP to automatically assign an IP address.

There are several reasons for creating virtual networks. The main reason is to '''safely connect servers together''' (i.e. to safely limit but allow the sharing of information among computer network users). This allows for a secure connection of computers yet controlling access to and monitoring (protecting) access to permitted users (discussed later in '''lab7''').

[[Image:network-config-centos.png|thumb|400px|right|This diagram shows the current network configuration of your '''c7host''' machine in relation to your '''Virtual Machines'''. In this section, you will be learning to change the default network settings for both your '''c7host''' machine and '''VMs''' to belong to a '''virtual network''' using fixed IP Addresses. ]]
===Part 1: Configuring a Private Network (Via Virtual Machine Manager) ===

If we are going to setup a private network, there are a number of steps to perform: First, '''define a new private network in the Virtual Manager application'''; and second, '''configure each of our VMs to connect to this new private network'''. In Part 1, we will be perform the first operation. In part 2, we will be performing the second operation for all VMS (graphical and command-line).

Before configuring our network, we want to '''turn off dynamic network configuration for our Virtual Machines''' by turning off the '''"default"''' virtual network. We will then define our private network.

:'''Perform the following steps:'''

# Launch your '''c7host VM''' and start the Virtual Machine Manager.
# Make certain that the '''centos1''', '''centos2''', and '''centos3''' virtual machines are '''powered off'''.
# In the Virtual Machine Manager dialog box, select '''Edit'''-> '''Connection Details'''.
# In the '''Connection Details''' dialog box, select the '''Virtual Networks''' tab
# Click to de-select the '''Autostart (on boot)''' check-box options and click the '''Apply''' button.
# Stop the default network by clicking on the '''stop''' button at the bottom left-side of the dialog box.
# Click the '''add''' button (the button resembles a "plus sign") to add a new network configuration.
# Type the network name called: '''network1''', and then click the '''Forward''' button.
# In the next screen, enter the '''new network IP address space''' called: '''192.168.245.0/24'''
# Disable the '''DHCP4''' check box and click the '''Forward''' button.
# Click the '''Forward''' button again to accept the default in the next screen.
# Enable Network Forwarding by Selecting '''Forwarding to physical network''', the destination should be '''Any physical device''' and the mode should be '''NAT'''
# Proceed with changes, and click '''Finish'''.
<ol>
<li value="14">We will now reconfigure each of our VMs to use our new virtual network '''network1'''
<ol type="a">
<li value="1">Let's start with our '''centos1 VM'''. Double-click on your '''centos1''' VM, but instead of running the VM, click on the '''view''' menu, and select: '''Details''' (Note: the Virtual Machine window will appear - do not start virtual machine)</li>
<li>In the '''left pane''' of the Virtual Machine window, select '''NIC:''' and note that this NIC is on the "default" virtual network</li>
<li>Change it to '''Virtual Network network1: NAT''' (i.e. the network that you just created) and click the '''Apply''' button.</li>
</ol>
</li>
</ol>

[[Image:new_network_dialog.png|right|thumb|300px|Although the private network has been setup via the '''Virtual Machine Manager''', each virtual machine requires to change its own network setting individually (either '''graphically''' or by '''command line''').]]

=== Part 2: Configuring Network For centos1 VM===

In this section, we will be using a graphical tool to connect our '''centos1''' VM to our private network.

:'''Perform the following steps:'''

# On your '''c7host''' machine, run ip address show and make note of the IP address assigned to the '''virbr1''' (i.e. "Virtual Bridge) interface. This will be the default gateway and DNS server for your VMs.
# Select the '''Console''' view (instead of Details), start your '''centos1''' VM and login.
# Within your '''centos1 VM''', click '''Applications''' menu, then select '''System Tools''', and then '''Settings'''.
# In the ''Settings'' Dialog Box, click on the '''Network''' icon.
# For the '''Wired''' connection, click the '''settings''' button (The icon appears as a gear located at the bottom right-hand corner of the dialog box).
# Select the '''IPv4''' tab. Change Address from ''Automatic (DHCP)'' to '''Manual'''.
# In the Addresses section, enter the following information:
#: IP Address: '''192.168.245.11'''
#: Subnet Mask: '''255.255.255.0'''
#: Default Gateway: The IP address of '''virbr1''' on your centos host (c7host).
# Click on the '''DNS''' field and add The IP address (''virbr1''' on your centos host) as the primary DNS server.
# When finished, check your settings, and then click the '''Apply''' button.
# Open a terminal and issue the '''ip address show''' command to confirm the change to the IP ADDRESS settings.
# Verify that '''centos1'''VM is now connected to the private network by issuing the following command from your '''c7host''' machine: <code>ping 192.168.245.11</code>

[[Image:network-scripts.png|thumb|right|250px|Although you can use the '''ifconfig''' command to temporarily create a static IP address connection to a network, you need to add the network settings in the '''/etc/sysconfig/network-scripts''' directory to automatically connect to the network upon Linux system boot-up.]]

=== Part 3: Configuring VM Network Setup via Command Line ('''centos2''' and '''centos3''') ===

The centos2 and centos3 VMs are '''text-based only''' systems, thus we cannot use a graphical tool to configure centos3 to connect to our private network. Therefore we will learn how to perform this task by using command-line tools.

:'''Perform the following steps:'''

# Configure your '''centos3''' VM (in the '''View''' -> '''Details''' menu of Virtual Machine Manager) to configure the NIC interface to '''network1''', click '''Apply''', and switch your centos3 VM view from ''details'' to '''console'''.
# Start your '''centos3''' VM, login, and use '''ip address show''' to check the current address.

# To configure your card with a static address from the command line, you will have to modify that interface's configuration file.
# Change to the '''/etc/sysconfig/network-scripts''' directory [[Image:new-network-config.png|thumb|400px|right|This diagram should show the newer network configuration of your '''c7host''' machine in relation to your '''Virtual Machines'''.]]
# List the contents of this directory. You should see 2 different types of files, network config scripts and network configuration files.
# Look for the configuration file for your original interface, it should be named '''ifcfg-eth0'''
# Edit the file for your interface and give it the following settings (remember you will need elevated permissions to edit this file):
#::DEVICE=eth0
#::IPADDR=192.168.245.13
#::PREFIX=24
#::GATEWAY=192.168.245.1
#::HWADDR=xx:xx:xx:xx:xx:xx <-- '''# Use YOUR centos3 VM's MAC ADDRESS!!!
#::DNS1=192.168.245.1
#::BOOTPROTO=static
#::ONBOOT=yes
#::NM_CONTROLLED=yes
#::IPV6INIT=no
{|width="50%" cellspacing="0"

|- valign="top"

|{{Admon/important|Keep consistent with Quotation or no Quotation|You have the option to either place quotation marks around the values, or no to use quotation at all. Regardless of the method you chose, KEEP CONSISTENT. For example, if beginning value with a double-quote, end value with a double-quote. If beginning value without a double-quote, do not end with any quotation. }}
|}
<ol>
<li value="15">Save the file and then restart the network connection by issuing the commands: <code>sudo ifdown eth0</code> and <code>sudo ifup eth0</code></li>
<li>Verify your configuration as you did before.</li>
<li>Restart the '''centos3''' VM.</li>
<li>Use the '''ip''' and '''ping''' commands to verify your network connection to other VMs.</li>
<li>Login and attempt to '''ssh''' to your matrix account to verify the settings. We need to also configure your centos2 VM for a persistent network connection as well: </li>
<li>Configure the centos2 VM (in the '''View''' -> '''Details''' menu of Virtual Machine Manager) to configure the NIC interface to '''network1''', click '''Apply''', and switch your centos2 VM view from details to '''console'''.</li>
<li>Start your '''centos2''' VM, login, and issue the command: <code>ip address show</code> and write down the '''MAC address''' for your eth0 network interface.</li>
<li>Edit the '''/etc/sysconfig/network-scripts/ifcfg-eth0''' file using the IPADDR: '''192.168.245.12''' , and the same '''PREFIX''', '''GATEWAY''', '''DNS1''' and '''MAC address''' information for you centos2 VM (i.e. recorded previously).</li>
<li>Save changes, re-issue the '''ifdown''' and '''ifup''' commands, and then issue the '''ip address''' and '''ping''' commands to verify that you can connect to other VMs on your network.</li>
</ol>

'''Answer INVESTIGATION 1 observations / questions in your lab log book.'''

=INVESTIGATION 2: MANAGING YOUR NEWLY-CREATED NETWORK=

Creating private networks are an important task, but a system administrator also needs to manage the network to make it '''convenient to use''', and '''troubleshoot''' network connectivity problems.

This investigation will expose you to useful "tweaks" and utilities to help accomplish this task. '''Lab 7''' requires that you understand these concepts and have a good general understanding how to use troubleshooting utilities (like '''ss''').

{| width="40%" align="right" cellpadding="10"
|- valign="top"
|{{Admon/note | Hosts files vs. the Domain Name System | On large public networks like the Internet or even large private networks we use a network service called [http://en.wikipedia.org/wiki/Domain_Name_System Domain Name System (DNS)] to resolve the human friendly hostnames like '''centos.org''' to the numeric addresses used by the IP protocol. On smaller networks we can use the <code>/etc/hosts</code> on each system to resolve names to addresses.}}
|}
=== Part 1: Using /etc/hosts File for Local Hostname Resolution ===

After setting up a private network, it can be hard to try to remember IP addresses. In this section, we will setup your network to associate easy-to-remember server names with IP ADDRESSES.

:'''Perform the following steps:'''

# Complete this investigation on '''all of your VMs''' and the '''c7host''' machine.
# Use the <code>hostname</code> and <code>ip</code> commands on your '''c7host''' machine and all of your 3 VM's to gather the information needed to configure the '''/etc/hosts''' file on all of your Linux systems.
# Edit the '''/etc/hosts''' file for the '''c7host''', '''centos1''', '''centos2''' and '''centos3''' VMs. Add the following contents to the bottom of the '''/etc/hosts''' file: 
#::'''192.168.245.1 c7host'''
#::'''192.168.245.11 centos1'''
#::'''192.168.245.12 centos2'''
#::'''192.168.245.13 centos3''' 
#Verify that you can now ping any VM by their hostname instead of the IPADDR.

=== Part 2: Network Connectivity & Network Service Troubleshooting Utilities===
{| width="40%" align="right" cellpadding="10"
|- valign="top"
|
<table cellspacing="0" cellpadding="5" style="border-top: thin solid black;margin-left:60px;">
<caption>'''Common Network Troubleshooting Tools'''</caption>
<tr valign="top>

<td style="border-bottom: thin solid black;font-weight:bold;background-color:#ffffff;">Purpose</td>
<td style="border-bottom: thin solid black;font-weight:bold;background-color:#ffffff;padding-left:100px;">Command(s)</td>

</tr>
<tr valign="top">
<td style="border-bottom: thin solid black;">Network Connectivity</td>
<td style="border-bottom: thin solid black;padding-left:100px;"><code>ping</code> <code>arp</code> <code>ip</code></td>

</tr>
<tr valign="top">
<td style="border-bottom: thin solid black;">Network Service Status</td>
<td style="border-bottom: thin solid black;padding-left:100px;"><code>ss'''</code></td>

</tr>

</table>
|}

Troubleshooting network problems is an extremely important and frequent task for a Linux/Unix system administrator. Since network services (such as file-server, print-servers, web-servers, and email-servers) depend on network connectivity, as Linux/Unix sysadmin must be able to quickly and effectively pin-point sources of network problems in order to resolve them.

Network service problems may not be entirely related to a "broken" network connection, but a service that is not running or not running correctly. The following table lists the most common listing of utilities to assist with detection of network connectivity or network service problems to help correct the problem.

:'''Perform the following steps:'''

#Switch to your '''c7host''' machine.
#Issue the '''ping''' command to test connectivity to your '''centos1''', '''centos2''', and '''centos3''' VMs.
#Examine the contents of the ARP cache by using the command: <code>arp</code> What is the purpose of ARP?
#Check the contents of the cache again by using the command: <code>arp -n</code> What was the difference in output?
#Issue the following command: <code>ss -at</code> This command will list all active TCP ports. Note the state of your ports.

'''TCP''' is a connection oriented protocol that uses a handshaking mechanism to establish a connection. Those ports that show a state of LISTEN are waiting for connection requests to a particular service. For example you should see the ssh service in a LISTEN state as it is waiting for connections.

<ol><li value="6">From one of your VM's login to your host using the '''ssh''' command.</li>
<li>On your c7host VM rerun the <code>ss -at</code> command and in addition to the '''LISTEN''' port it should list a 2nd entry with a state of ESTABLISHED. This shows that there is a current connection to your ssh server.</li>
<li>Exit your ssh connection from the VM and rerun the command on the CentOS host. Instead of '''ESTABLISHED''' it should now show a state of '''CLOSE_WAIT'''. Indicating that the TCP connection is being closed.</li>
<li>On your c7host VM, try the command: <code>ss -atn</code> How is this output different?
Without the -n option ss attempts to resolve IP addresses to host names (using /etc/hosts) and port numbers to service names (using /etc/services)</li>
<li>Examine the '''/etc/services''' file and find which ports are used for the services: ssh, sftp, http</li>
<li>Now execute the command ss -au What is the difference between the options: -at and -au? When examining UDP ports why is there no state?</li>
</ol>



'''Answer INVESTIGATION 2 observations / questions in your lab log book.'''

=INVESTIGATION 3: USING PYTHON TO MODIFY FILES=

In this investigation you will write a python script that will allow a user to interactively configure a network interface's configuration file. Before beginning, make a backup of your ifcfg files. '''Store the python script in ~/bin/''' on c7host.

Write a script called '''netconfig.py''' that will prompt the user for the following values, and write their answers into an ifcfg file stored in the '''/etc/sysconfig/network-scripts''' directory.

#The name of the interface
#The interface's MAC address
#Whether the interface should automatically turn on when the machine boots.
#Whether the interface should get a static or DHCP address
::Note: Only prompt the user for the following values if they chose a static address.
::*The static ip address
::*The network prefix
::*The default gateway
::*The primary DNS server

Note that your script should make use of loops and try-except statements to make sure the user provided semi-reasonable data. You are not expected to create the regular expressions necessary to confirm the format of the IP address, but should be able handle simpler issues like forcing the user to give the interface a name (since you will need it for the filename), determining if it will start automatically, and the address type.

Remember to test your script to make sure it works.

= LAB 6 SIGN-OFF (SHOW INSTRUCTOR) =
Follow the submission instructions for lab 6 on Blackboard.
{{Admon/important|Time for a new backup!|If you have successfully completed this lab, make a new backup of your virtual machines as well as your host machine.}}

:'''Perform the Following Steps:'''

# Make certain that ALL of your VMs are running.
# Switch to your '''c7host''' VM.
# Change to your user's '''bin''' directory.
# Issue the Linux command: <code>wget https://www.dropbox.com/s/fmhcsezezx1j8li/lab6-check.bash</code>
# Give the '''lab6-check.bash''' file execute permissions (for the file owner).
# Run the shell script and if there are any warnings, make fixes and re-run shell script until you receive "congratulations" message.
#Arrange proof of the following on the screen: <blockquote>✓ '''centos2''' VM:<blockquote><ul><li>'''ssh''' from '''centos2''' to '''c7host''' VM.</li></ul></blockquote>✓'''c7host''' machine<blockquote><ul><li>Run the '''lab6-check.bash''' script in front of your instructor (must have all <code> OK </code> messages)</li></ul></blockquote>✓ '''Lab6''' log-book filled out.
#Upload a screen of the proof from the previous step, along with the file generated by '''lab6-check.bash''', your log book, and your '''netconfig.py''' script to blackboard.

= Practice For Quizzes, Tests, Midterm & Final Exam =

# What is a port?
# What command will set your IP configuration to 192.168.55.22/24 ?
# What is the difference between UDP and TCP?
# What port number is used for DHCP servers?
# What is the function of the file <code>/etc/hosts</code> ?
# What is the purpose of the file <code>/etc/sysconfig/network-scripts/ifcfg-eth0</code> ?
# What tool is used to show you a list of current TCP connections?

[[Category:OSL740]]
[[Category:OSL740 Labs]]
[[Category:CentOS 7]]
[[Category:peter.callaghan]]

Peter.callaghan

932

edits

Changes

OSL740 Lab 6

Navigation menu

Personal tools

Namespaces

Variants

Views

More

Search

Navigation

get involved with CDOT

courses

course projects

links

Tools