Network Protocols Routing Part 3 TDC375 Spring 2009 10 John Kristoff DePaul University 1 VirtualBox Install http www virtualbox org TDC375 Spring 2009 10 John Kristoff DePaul University 2 VM Install Debian or Ubuntu should work well http www debian org http www ubuntu com That s what I ll be using Use bridged adapter need public addr Host OS should already be on the dpu net Boot of CD iso and run through the install Use DHCP Most defaults should be OK TDC375 Spring 2009 10 John Kristoff DePaul University 3 Packages su u apt get install sudo ntp openssh server sysv rc conf binutils rcs lynx make screen tcpdump gcc zlib1g dev vim flex byacc bison zip unzip apt get purge nano TDC375 Spring 2009 10 John Kristoff DePaul University 4 Harden and Prepare VM Check listeners sudo netstat tunap Disable unnecessary ones e g with update rc d or sysv rc conf etc init d superfluous listener stop Adjust etc ntp conf Adjust etc fstab Adjust etc sudoers with visudo Adjust etc apt apt conf Adjust etc ssh sshd config TDC375 Spring 2009 10 John Kristoff DePaul University 5 iptables etc network if pre up d iptables bin sh sbin iptables restore etc iptables conf TDC375 Spring 2009 10 John Kristoff DePaul University 6 Quagga Install http www quagga net Should be a package in your distro for this e g sudo apt get install quagga TDC375 Spring 2009 10 John Kristoff DePaul University 7 Quagga Setup Enable zebra and bgpd etc quagga daemons Setup etc quagga zebra conf hostname hostname password password enable password enable password log file var log quagga zebra log ip route 192 0 2 assigned 32 null TDC375 Spring 2009 10 John Kristoff DePaul University 8 BGP Setup etc quagga bgpd conf hostname hostname password password enable password enable password log file var log quagga zebra log router bgp 655 assigned bgp routerid local addr redistribute static neighbor jtk addr remote as jtk asn neighbor jtk addr ebgp multihop neighbor jtk addr next hop self TDC375 Spring 2009 10 John Kristoff DePaul University 9 Quagga Console Login telnet 127 0 0 1 zebra port bgpd port TDC375 Spring 2009 10 John Kristoff DePaul University 10 Peering exercises Setup peering Receive routes Send routes Filter routes Use authentication etc TDC375 Spring 2009 10 John Kristoff DePaul University 11 FYI RANCID Real router admins use it or an equivalent tool http www shrubbery net rancid TDC375 Spring 2009 10 John Kristoff DePaul University 12 Weeks ahead time permitting BIND9 Apache SSL Postfix Mailman AIDE sshaide Tor OpenSSH Dante Remote syslog and log analysis tools TDC375 Spring 2009 10 John Kristoff DePaul University 13
View Full Document
Unlocking...