This shows you the differences between two versions of the page.
|
sred:milestone_1 [2023/10/26 23:48] horia.stoenescu |
sred:milestone_1 [2024/10/22 18:34] (current) horia.stoenescu Updated for 2024 |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ========== Milestone 1 ========== | ========== Milestone 1 ========== | ||
| - | The final topology for the entire project is the one from below: | + | The final topology for the entire project should look like the one found below: |
| {{:sred:sred-topologie_proiect.png?750|}} | {{:sred:sred-topologie_proiect.png?750|}} | ||
| - | For the ''first milestone'' (that is between 20th Oct - 4th Nov 2023) we are going to work only with the first 2 branches (Bucharest and IT), the DMZ area (where servers are found), and the router. | + | For the ''first milestone'' we are going to work only with the first 2 branches (Bucharest and IT), the DMZ area (where servers are found), and the router. |
| ===== Week 1 ===== | ===== Week 1 ===== | ||
| Line 11: | Line 11: | ||
| {{:sred:sred_topology_lab2.png?750}} | {{:sred:sred_topology_lab2.png?750}} | ||
| + | |||
| + | <note important> | ||
| + | Deadline: 12nd Nov 2024 (weeks 1 and 2 from below) | ||
| + | </note> | ||
| <note> | <note> | ||
| - | In case you did not attend the last lab, please read firstly this [[https://ocw.cs.pub.ro/courses/sred/setup_lab_remote|page]]. | + | In case you did not attend the last lab, please read firstly this [[https://ocw.cs.pub.ro/courses/sred/setup_lab_on-premise|page]]. |
| </note> | </note> | ||
| Line 53: | Line 57: | ||
| 5. Check again that ftp works from it client host. | 5. Check again that ftp works from it client host. | ||
| - | 6. At last, let's permit traffic from client to webserver only if it's authenticated to telnet service. Check lock-and-key from chapter 6 from above. Add on router the credentials user=student and password=student, timeout 60, permit tcp port 21 on inbound, and permit tcp from any to any on outbound. | + | 6. At last, let's permit traffic from client to webserver only if it's authenticated to telnet service. Check lock-and-key from chapter 6 from above. Add on router the credentials user=student and password=student, timeout 60, permit tcp port 80 on inbound, and permit tcp from any to any on outbound. |
| 7. Apply the ACLs to in and out on e1/2, check that access to webserver does not work (using cli), login using telnet, and check again. It should work. | 7. Apply the ACLs to in and out on e1/2, check that access to webserver does not work (using cli), login using telnet, and check again. It should work. | ||