'''Due Date''': Ask  * If your professor for exact dateis '''Andrew Smith''': 22 February, 2016* If your professor is '''Murray Saul''': 8 March, 2016 (in class)

Create a new virtual network on your Host Machine. * Assign a newly-created virtual network the name: '''asg1net''', and set '''forwarding to any physical device'''<br>(refer to [http://zenit.senecac.on.ca/wiki/index.php/OPS335_Installation_Lab#INVESTIGATION_2:_VIRTUAL_MACHINE_INSTALLATION lab setup]. You can have have 2 different network names: "asg1net" and "ops335" without causing any problems).* Addresses in this network will start with '''10.161''' followed by the '''last two digits of your student number''' (just as your main virtual network). The subnet mask must be '''255.255.255.0'''* There must '''<u>NOT</u>''' be a DHCP server running for this network!* All the machines for this assignment will be connected to your newly-created virtual network called: '''asg1net''' == Create a "Cloning Source" VM (asg1net Virtual Network) == Create a virtual machine that you will use as a template (i.e. a '''cloning source'''). It should have a command-line interface only. Configure it to be a good cloning source, making certain it has all the following elements prior to cloning: # Don't make the virtual drive too big: you will need space for it as well as space for the clones you from your cloning source<br>(2GB should be enough for any cloning source and clone VM that you create for this assignment).# Make certain that you can login to your cloning source. The minimum commands required are: '''host''', '''dig''', '''netstat''', '''links'''.# Do not install software on your cloning source: you are expected to install other software on your "cloned" VMs instead. For example, if you are required to install bind in a clone, install it in the clone as opposed to the "cloning source".# Configure your network with a static configuration. Refer to the table below for IP address and hostname.# Make certain that you have '''iptables''' services enabled and running instead of ''Firewalld''. The default rules should suffice.# If you have created a regular user when you installed the machine, delete that regular user (you are to use only the root account).# Set up an SSH server on this "cloning source". Make sure that the root account is only permitted to log in using key authentication. If user users are required to be created later, they should be permitted to log in with a their username and password.# Generate a new key pair on your Host Machine (don't delete the existing one), called: '''id_rsa_asg1'''# Make sure you can log in from your regular user on your Host Machine to root on the "cloning source" virtual machine using specifically that key.# Do not place that newly-generated private key on the "cloning source" VM. == Clone "ns1" VM from "Cloning Source" &amp; Perform Setup Tasks== Perform the following steps for this section: #Create a clone called: '''ns1''' from the "cloning source" that will act as your '''master DNS server''' on the '''asg1net''' network. Refer to the table below for address and hostname.#Make certain that your DNS server must has all the records for the zone called: '''ops335a1.org''' listed in that table, including records for machines that do not exist as of yet. It is important to understand that DNS records live independently from the machines that they are "pointing" to.#A default setup for a master DNS server should be sufficient, but make certain that the address of your '''admin contact''' is: '''yoursenecaid@ops335a1.org''', and that slave DNS servers will check for updated records from this master every 30 minutes. == Clone "ns2" VM from "Cloning Source" &amp; Perform Setup Tasks == Perform the following steps for this section: #Create a clone called '''ns2''' from the cloning source that will act as your '''slave DNS server''' on the '''asg1net''' network. Refer to the table below for address and hostname.#The '''ns2''' machine will serve the same records as '''ns1'''.

* Give it the name asg1net, forwarding to any physical device.* Addresses in this network will start with 10.161, followed by the last two digits == Reference Materials: List of your student number (just as your main virtual network). The subnet mask must be 255.255.255.0* There must not be a DHCP server running in this network.* All the machines for this assignment will be connected to this virtual network.Machines / DNS Records ==

Create a virtual {| class="wikitable"! Name !! Address !! Purpose|-| '''host.ops335a1.org''' || 10.161.X.1 || Your host machine you will use as a cloning source|-| '''ns1.ops335a1.org''' || 10.161.X.2 || Master name server|-| '''ns2.ops335a1.org''' || 10.161.X.3 || Slave name server|-| file.ops335a1.org || 10.161.X. It should have a command4 || File server|-line only interface| www.ops335a1.org || 10. Configure it to be a good cloning 161.X.5 || Web server|-| '''source. Since every other machine in this network will be cloned ops335a1.org''' || 10.161.X.254 || Disk image to clone from it - you should set it up to be pleasant to usewhen creating new machines.|}

# Don't make the virtual drive too big - you'll need space for it and clones you make from it. 2GB should be enough for anything you do in this assignment.# Log in and run some commands you expect to be there, and make sure they're installed (minimum commands needed: host, dig, netstat, links).# Don't install software here that you'll only need in one of the cloned VMs. E.g. if you're going to install apache in == Create a clone - install it there, not in the source - since you don't want apache installed everywhere.# Configure your network with a static configuration. See the table below for IP address and hostname.# Make sure you have iptables services enabled running instead of Firewalld. The default rules should suffice.# If you created a user when you installed the machine - delete that user. You'll only have root left.# Set up an SSH server on this machine. Make sure root is only allowed to log in using key authentication. Other users should still be able to log in with a username/password.# Generate a new key pair on your host (don't delete the existing one), called id_rsa_asg1# Make sure you can log in from your regular user on the host to root on the virtual machine using specifically that key.# Do not place the private key on the VM.Test Plan ==

Clone #Create a test plan (Libre Office, MS Word, etc) with '''at least 5 test cases''' to verify that you've completed the souce assignment according to specifications. A good starting point would be to view the test plan that you used in the second DNS lab.<br>'''NOTE:''' These test plans that you create a machine are not required to be exhaustive, but they should successfully demonstrate the completion of this assignment's requirements.<br><br>#The document that will you are required to submit should be your master DNS server on this networkexported into the PDF format. See You are required to submit only the table below for address and hostnamePDF document (along with required screenshots - refer to "Assignment Submission" section).#This document is required to appear professional (although you are not using a "dedicated" testing platform like in industry).

A default setup for a master DNS server is mostly enoughSubmit the following in Blackboard, Moodle, but make sure the address of or whatever your admin contact is yoursenecaid@ops335a1.orgprofessor specifies in class or "class announements" (For Murray Saul, and that slave DNS servers will check for updated records from this master every 30 minutes.also send these in an e-mail (subject line: OPS335 assignment1) with the following attachments):

Clone *Demonstrate working assignment to your instructor in class:**Also you need to show your assignment to the souce professor in a lab period (like you would for any lab for "sign-off"). This requires you to prepare everything ahead of time so that you can quickly demonstrate to create a machine your instructor that will be all required parts of your slave DNS server on this network. See the table below for address and hostnameassignment are working.