Difference between revisions of "SRT210 Assignment1"

From CDOT Wiki
Jump to: navigation, search
(→‎Part 2: Multiple WebServer Setup (10 marks))
(→‎Part 3: Report (10 marks))
Line 35: Line 35:
  
 
Write a report, where you describe (in your own words):
 
Write a report, where you describe (in your own words):
−
* What you were trying to accomplish.
 
−
* What you had to do to set everything up (most important are the networking, routing, and firewall configurations).
 
−
* Describe how the tool you chose for Part 2 works, how you used it, and why it gave you the results that it gave you.
 
−
* Describe at least two ways to make brute-force SSH attacks less likely to be successful.
 
−
* Describe any challenges you ran into and how you solved them.
 
  
−
Screenshots might be helpful but are not required for the report. The report should be at least two pages long, not including screenshots, titles, and other fluff.
+
# The report must be in a PDF format otherwise it will be considered unreadable. The text part of the report can use a Serif or Sans-Serif font (such as Arial or DejaVu Sans) but the configuration file output must be in a fixed-width (such as Courier or MonoType)
 +
# The Very FIRST FEW LINES MUST CONTAIN: Full Name, your MySeneca username, and your student ID.
 +
# What you had to do to set everything up (most important are the networking, routing, and firewall configurations). Screenshots of the configuration files are acceptable, however, the screenshot must be readable. If the font is too small (less than 12 pt) or the screenshot is blurry, you will lose marks. You may take multiple screenshots of a long configuration file provided they show the previous few lines to show continuation. Ideally, it is best (and probably fastest) to use scp to get the configurations out of the VMs and append them into your report.
 +
# Describe any challenges you ran into and how you solved them.
 +
# Screenshots are required for this part of the report. Each screenshot must:
 +
#:  * Clearly be labelled the test you are proving (for example: Connect to http://lin1a2.yourmysenecaid.ops from c7host).
 +
#:  * Show the interaction between c7host (or lin2) in a readable (12 pt) font.
 +
#:  * The prompt on the terminal MUST show the logged in user and hostname of the VM.
 +
#:  * Use curl to connect to the web server. Pipe the output from curl into another Unix utility and restrict that output to a maximum of 4 lines.
  
 
== Submit ==
 
== Submit ==
  
 
Submit the report on Blackboard.
 
Submit the report on Blackboard.

Revision as of 15:58, 31 May 2019

Assignment 1

Due date: 7th of June (Update: May 7 2019): Additional requirements will be added at a later date

Late penalties: 10% per day, including weekends and holidays

Part 1: Set up and routing (10 marks)

  1. Complete labs 1 through 4.
  2. Create a new virtual network named asg1 with subnet 192.168.X where X is the first two digits of your Seneca student number. Do not use DHCP on this network.
  3. Create a new virtual machine and install CentOS on it as a minimal install. Name this virtual machine lin1a1 but set its hostname to yourmysenecaid.lin1a1.
  4. Setup lin1a1 to have two network interfaces where both network interfaces are virtio virtual devices. Next, setup one network interface with IP address 192.168.X.32 and to connect to the asg1 network while the other network interface has IP address 192.168.210.22 and it connects to the network1 network.
  5. Keep in mind in any networked system you can have just one, and only one, default gateway. So configure the default gateway of lin1a1 to be c7host on the 192.168.210 subnet. Confirm lin1a1 can communicate with the Internet and with hosts on network1.
  6. Create another minimal CentOS VM: name it lin2a1; set its hostname to yourmysenecaid.lin2a1; let it have one network interface and IP 192.168.X.33 (X being the first two digits of your student ID). By default, after the install, this second VM should be able to access machines on the asg1 network but it will not be able to communicate with any hosts on the network1 network.
  7. Configure lin2a1, the second VM, to be able to access the Internet and the network1 network via lin1a1. You will need to enable IP forwarding and masquerading on the appropriate interface and the appropriate machine for that to happen.
  8. Configure both VMs (lin1a1 and lin2a1) to be added to your DNS server. able to connect to c7host.yourmysenecaid.ops, lin1.yourmysenecaid.ops, and lin2.yourmysenecaid.ops by their hostnames (don't be tempted to set up another DNS server, use what you already have from your earlier lab)
  9. Ensure you start your firewall setup on each VM from the default iptables-services rules. You'll lose marks if you don't have a functional firewall on lin1a1 and on lin2a1.

Part 2: Multiple WebServer Setup (10 marks)

  1. (2 Marks) Install NGINX on lin1a1 and Caddy on lin2a2. Confirm that each works locally with thier VM and from c7host. Do the testing of NGINX and Caddy in two stages.
  2. (3 Marks) From a browser running on c7host confirm connections using IP addresses:
    * http://192.168.210.11 connects to Apache (from the earlier lab)
    * http://192.168.210.22 connects to NGINX running on lin1a1
    * http://192.168.X.33 connects to Caddy running on lin2a2.
  3. (3 Marks) From a browser running on c7host confirm connections using hostnames:
    * http://lin1.yourmysenecaid.ops connects to Apache (from the earlier lab)
    * http://lin1a1.yourmysenecaid.ops connects to NGINX running on lin1a1
    * http://lin1a2.yourmysenecaid.ops connects to Caddy running on lin2a2.
  4. (1 Mark) From a browser running on lin2 show you can connect to all 3 webservers using their IP addresses and their hostnames.
  5. (1 Mark) From a browser running on Windows show you can connect to each of the 3 webservers using the c7host IP address. NOTE: when doing this test, you will want to turn off the other two VMs.

Part 3: Report (10 marks)

Write a report, where you describe (in your own words):

  1. The report must be in a PDF format otherwise it will be considered unreadable. The text part of the report can use a Serif or Sans-Serif font (such as Arial or DejaVu Sans) but the configuration file output must be in a fixed-width (such as Courier or MonoType)
  2. The Very FIRST FEW LINES MUST CONTAIN: Full Name, your MySeneca username, and your student ID.
  3. What you had to do to set everything up (most important are the networking, routing, and firewall configurations). Screenshots of the configuration files are acceptable, however, the screenshot must be readable. If the font is too small (less than 12 pt) or the screenshot is blurry, you will lose marks. You may take multiple screenshots of a long configuration file provided they show the previous few lines to show continuation. Ideally, it is best (and probably fastest) to use scp to get the configurations out of the VMs and append them into your report.
  4. Describe any challenges you ran into and how you solved them.
  5. Screenshots are required for this part of the report. Each screenshot must:
    * Clearly be labelled the test you are proving (for example: Connect to http://lin1a2.yourmysenecaid.ops from c7host).
    * Show the interaction between c7host (or lin2) in a readable (12 pt) font.
    * The prompt on the terminal MUST show the logged in user and hostname of the VM.
    * Use curl to connect to the web server. Pipe the output from curl into another Unix utility and restrict that output to a maximum of 4 lines.

Submit

Submit the report on Blackboard.

Retrieved from "https://wiki.cdot.senecapolytechnic.ca/w/index.php?title=SRT210_Assignment1&oldid=139238"