Open main menu

CDOT Wiki β

Changes

OPS235 Lab 7 - CentOS7

272 bytes removed, 09:57, 5 May 2015
no edit summary
# Confirm the new port is being used with a <code>netstat</code> command.
# Before we can use this new port we must change our firewall to allow traffic through the new port number and block access to port 22:<br /><code>iptables -I INPUT -p tcp -s0/0 --dport 22 -j DROP</code><br /><code>iptables -I INPUT -p tcp -s0/0 --dport 2200 -j ACCEPT</code>
# To test the new port connect to '''centos1 ''' from '''centos2 ''' using the following command:<br /><code>ssh -p 2200 user@centos1</code>
{{Admon/important|Cannot connect via SSH?|To fix issues with the ability to ssh, on both machines:<ul><li>Ensure ssh is running. Systemctl status sshd.service.</li><li>Disable selinux by going into /etc/selinux/config and change "enforcing" to "disabled"; "targeted" to "minimum".</li><li>If your are still encountering problems flush iptables.</li></ul>}}
{{Admon/tip | Tip! | For scp access the option to be used is: <code>scp -P 2200</code>}}
'''Arrange proof of the following on the screen:'''
<ol><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''centos1''' VM:<ul><li>'''Logical Volume''', '''Physical Volume''', and '''Volume Group''' information </li><li>Contents of '''/etc/fstab''' file</li><li>Proof that '''/archive''' has been mounted</li></ul></li><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''centos2''' VM:<ul><li>have tunneled Xwindows application from '''centos1''' via ssh</li></ul></li><li>have tunneled http through firewall using ssh (on web-browser</li><li>have secured ssh against root access</li><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''centos3''' VM:<ul><li>have configured sshd to '''allow connection to centos3 VM'''</li><li>have logged in centos3 VM using '''public key authentication'''</li><li>have scp'd and sftp'd files to centos3 VM</li></ul></li><li><span style="color:green;font-size:1.5em;">&#x2713;</span> '''c7host''' Machine:<ul><li>Confirmation that sshd is running on host machine</li></ul></ol>
Arrange proof of the following on the screen:
# # # # # # have secured ssh against root access
= Preparing for Quizzes =
13,420
edits