This shows you the differences between two versions of the page.
sred:milestone_1 [2023/10/26 23:48] horia.stoenescu |
sred:milestone_1 [2024/10/22 18:34] (current) horia.stoenescu Updated for 2024 |
||
---|---|---|---|
Line 1: | Line 1: | ||
========== Milestone 1 ========== | ========== Milestone 1 ========== | ||
- | The final topology for the entire project is the one from below: | + | The final topology for the entire project should look like the one found below: |
{{:sred:sred-topologie_proiect.png?750|}} | {{:sred:sred-topologie_proiect.png?750|}} | ||
- | For the ''first milestone'' (that is between 20th Oct - 4th Nov 2023) we are going to work only with the first 2 branches (Bucharest and IT), the DMZ area (where servers are found), and the router. | + | For the ''first milestone'' we are going to work only with the first 2 branches (Bucharest and IT), the DMZ area (where servers are found), and the router. |
===== Week 1 ===== | ===== Week 1 ===== | ||
Line 11: | Line 11: | ||
{{:sred:sred_topology_lab2.png?750}} | {{:sred:sred_topology_lab2.png?750}} | ||
+ | |||
+ | <note important> | ||
+ | Deadline: 12nd Nov 2024 (weeks 1 and 2 from below) | ||
+ | </note> | ||
<note> | <note> | ||
- | In case you did not attend the last lab, please read firstly this [[https://ocw.cs.pub.ro/courses/sred/setup_lab_remote|page]]. | + | In case you did not attend the last lab, please read firstly this [[https://ocw.cs.pub.ro/courses/sred/setup_lab_on-premise|page]]. |
</note> | </note> | ||
Line 53: | Line 57: | ||
5. Check again that ftp works from it client host. | 5. Check again that ftp works from it client host. | ||
- | 6. At last, let's permit traffic from client to webserver only if it's authenticated to telnet service. Check lock-and-key from chapter 6 from above. Add on router the credentials user=student and password=student, timeout 60, permit tcp port 21 on inbound, and permit tcp from any to any on outbound. | + | 6. At last, let's permit traffic from client to webserver only if it's authenticated to telnet service. Check lock-and-key from chapter 6 from above. Add on router the credentials user=student and password=student, timeout 60, permit tcp port 80 on inbound, and permit tcp from any to any on outbound. |
7. Apply the ACLs to in and out on e1/2, check that access to webserver does not work (using cli), login using telnet, and check again. It should work. | 7. Apply the ACLs to in and out on e1/2, check that access to webserver does not work (using cli), login using telnet, and check again. It should work. | ||