Differences
This shows you the differences between two versions of the page.
|
sred:milestone_2 [2023/11/17 00:30] horia.stoenescu [Week 4] |
sred:milestone_2 [2025/01/14 17:56] (current) horia.stoenescu |
||
|---|---|---|---|
| Line 16: | Line 16: | ||
| 5. Create a new Linux node (like done previously here: https://ocw.cs.pub.ro/courses/sred/setup_lab_remote#virtual_machine_access) and connect it to e1 from pfsense. | 5. Create a new Linux node (like done previously here: https://ocw.cs.pub.ro/courses/sred/setup_lab_remote#virtual_machine_access) and connect it to e1 from pfsense. | ||
| - | 6. Look over the commands from console menu: https://docs.netgate.com/pfsense/en/latest/config/console-menu.html. Go to shell and find the ip address for interface vtnet0 (it should be in subnet 10.6.0.0/16). | + | 6. Look over the commands from console menu: https://docs.netgate.com/pfsense/en/latest/config/console-menu.html. Go to shell and find the ip address for interface vtnet0 (it should be in subnet configured for Cloud1 - remember step 6 from here: https://ocw.cs.pub.ro/courses/sred/setup_lab_openstack). |
| 7. Change the mac address to a custom one, from cli: | 7. Change the mac address to a custom one, from cli: | ||
| Line 33: | Line 33: | ||
| 10. Go to Interfaces > WAN > MAC Address, add also there the mac address from above, then Save and apply changes. This way your mac will be permanently saved. | 10. Go to Interfaces > WAN > MAC Address, add also there the mac address from above, then Save and apply changes. This way your mac will be permanently saved. | ||
| - | 11. Add a new rule to permit traffic to WAN interface from your tunnel ip address (check GlobalProtect). Revert steps done previously, on step 6 (hint: use again shell and same binary). | + | 11. Add a new rule to permit traffic to WAN interface from your ip address (check eve-ng pnet0). Revert steps done previously, on step 6 (hint: use again shell and same binary). |
| - | 12. Start Linux machine and make sure it receives a private ip from ''192.168.1.0/24''. | + | 12. Start Linux machine and make sure it receives a private ip from range ''192.168.1.0/24''. |
| - | 13. At last, add a new NAT rule to have Internet access from that computer. | + | 13. At last, add a new NAT rule to have Internet access for that internal computer. |
| ======= Week 4 ======= | ======= Week 4 ======= | ||
