1,576
edits
Changes
m
Protected "Ops535 online a1": OER transfer ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))
[[Category:OPS535]][[Category:rchan]]
=Due Date=
'''FridaySunday, Feb 2627, 20212022'''
* 15% of you final grade.
= Required VMs =
The four VMs assigned to you in the OPS535 Virtual Lab. Please ask your professor for information on how to access those VMs. The following are the general description for those four VMs:
== DNS servers ==
You need three DNS servers for this assignment:
:* Primary DNS server: running on VM2, pri-dns.<yourdomain>.ops, which is authoritative for your domain. It will be non-recursive, and must allow anyone to request answers to DNS queries of your domain.:* Caching-only DNS server: running on VM3, co-nfs.<yourdomain>.ops, which allows DNS queries only from network devices in your own private network. It will perform recursive DNS queries to the appropriate DNS servers or on its cache for answers.:* Root Name server: running on VM4, rns-ldap.<yourdomain>.ops, which is authoritative for the root zone only. It will answer queries from anyone to request DNS queries for the entire DNS namespace. You need to <b>collaborate</b> other root name server players in the virtual lab environment.You should [[Domainreg| register and/or check your network and domain information here]]
== NFS Server - on VM co-nfs ==
:* This VM will centrally host all of your <b>new network users’</b> home directories, allowing remoteaccess through NFS version 4.:* Use the appropriate export option(s) (pay particular attention to root_squash andno_root_squash) when exporting network users' home directories.:* Superuser on the other VMs should not have root privilege on the exported directory, with theexception of the VM that is running the LDAP server.:* VMs outside your private network must not be able to contact this service. EveryVM in your network (including those that have not yet been created) must have access to this service.
:* Network users should not have read or write access to other network users' home directories.
==Network, firewall, and SELinux==
:* All your VMs must be accessible to each other via the private network.
:* Do not allow DNS queries from any VMs in your network to any DNS servers in the labexcept your caching-only DNS server.:* SELinux must be turned on and run in enforcing mode on all of your VMs. You may need toconfigure the SELinux booleans accordingly.
:* Your VM1 must use iptables.service and VM2 to VM4 must use firewalld.service as their firewall. For firewalld.service, the ens192 interface should be set up in the 'public' zone and the ens224 interface should be set up in the ‘work’ zone. In addition to ssh traffic, your firewalls should only allow the traffic necessary to fulfil the roles described above.
==Method of implementation==
* Do not configure the required services manually with CLI, all the configuration must be done by using any one of the following automation framework:
** customized bash script with ssh, or
** fabric tasks, or
= Changes Log =
Due to the dynamic and volatile nature of the IT industrial, this assignment specification may be changed in a daily basis to reflect the changing environment. All changes and modifications to this assignment requirement will be posted here. This requirement document will be freeze frozen at least three days before the due date.* Released on Feb 10June 4, 2021.
=Grading=
Shortly before the due date I will post a rubric on blackboard. On the due date I will Use:* provide a script that will provided on Blackboard to gather information from your VMs and create a tar file from them. You will upload that tar file Upload the required files to blackboard with your automation scripts/files.:* run a the test script from any machines in the virtual lab to scan and test all the required services you should have provided.
:* perform a disaster recovery test - one of your VMs will be reset to its baseline condition/configuration and you have 30 minutes to apply your automation script(s) to bring it back to the level this assignment required.
=Questions=
If you have any questions about this assignment, please talk to your professor before the due date.
