Syllabus for Computer Systems

687 views
614 views

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
687
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
4
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Syllabus for Computer Systems

  1. 1. Name: ______________________________________________ ELEC205 Introduction to Network Operating Systems Lab Activity Linux NOS (Linux – working with Network Connections, Users and Groups, System Password File and Protocols in Linux) On your Linux Server perform the following: Record the steps necessary to perform each step and be sure to answer any questions posed. Log in as the Root user. Explain what capabilities the Root user has on your Linux system. Navigate around using the GUI in Linux. Explain some of the things you see with your load of Everything in Linux. What are some of the important areas for Networking tools, Network administration, User and Group Administration, and Server Administration located? Explain how the command line is accessed to open a virtual terminal window. As root user what exactly do you see when you open the terminal window? Within the terminal window type ifconfig. What information do you get? Could you reconfigure your interface from the terminal with ifconfig? Go to the Network Card configuration from the GUI. Where do you find this? Change the settings to a static IP with 10.217.Your PC#.1 as the address. Use 255.255.0.0 as the mask and 10.217.0.1 as the gateway and 209.173.18.21 as the DNS. Can you still get to the Internet? Disable and Re-enable the card and see if access is accepted. Using Ethereal run some sniffing of web site visitations, pings to other room machines and the 10.217.0.1 gateway, download a file from ftp.dell.com and visit a secure website login. What protocols do you see at work? Go to the GUI User Manager and add three users and create three additional groups. Explain how this is done. What do you see when you create a new user? How is it identified? Explain how a user password can be reset by the administrator. Also examine and explain other things the administrator can do with each user account properties.
  2. 2. Explain how a user is added to a group. What specifically does the password info. Tab allow the administrator to do? Logout as Root and log back in as one of the users. Can you use User Manager now? Open the Terminal Window. What do you see now? How does it differ from Root Terminal? In the terminal window type su Root. What appears? What does this command do? What command in Win2003 Server is similar? Log back in as root and open the terminal window. Type ssh IP# where the IP# is an address of your neighbor’s machine. What does this do? Run ethereal to capture the communication. What do you see? Enter the username and password and can you find it in plaintext in Ethereal? Why or why not? Login as a user and try to locate the system password file. Copy the file to a drive location or floppy that is easily accessed by any user. Open the password file with a text editor. What does it look like? Where is it found? Name: ______________________________________________ ELEC205 Introduction to Network Operating Systems Lab Activity Linux NOS (Linux – Using Networking Tools in Linux)
  3. 3. On your Linux Server perform the following: Record the steps necessary to perform each step and be sure to answer any questions posed. Log in as the Root user and open a terminal window. How is this done? Type hostname –v in the terminal window. What is displayed? Next type ifconfig -a in the terminal window. What is displayed? What does ifconfig – le0 display? Run a ping from the terminal window. Type ping –vc 20 10.217.0.1. What is performed? What happens if you remove the c 20? Look up the Linux command to display the characteristics of a wireless NIC adapter. Run traceroute 10.1.1.1 from the command line. What does this command look like on a Windows system? Lookup whether netstat can be used with Fedora Core 4 Linux. Try the netstat –a command at the terminal window. What is displayed? As Root user run the tcpdump command. Try some options from Page 467 of you text and explain what the options –a, -tt, -v, and tcpdump host (yourhostname) from command 1 from the first line of this lab. Start the Daemon for DHCP on your server. First navigate to the Services presently running on your server through the GUI. Where do you find this? If your server is not running the DHCP Daemon type “service dhcp start”. Check the Services again and see if the DHCP service has been started. Will this be serving any addresses? Why or why not? To have the dhcp service start each time your Server is started type chkconfig dhcpd on in the terminal. This will start the service each time you start the server. We have not configured a scope for DHCP and thus should not be serving any addresses. See if you locate a GUI tool to administer scopes for a DHCP server. Where is this found?
  4. 4. Navigate to the /etc/dhcpd.conf file and open it with a text editor. Add the following to the file: Ddns-update-style interim; Ignore client-updates; Subnet 10.217.PC#.1 netmask 255.255.0.0 { Option routers 10.217.0.1 Option domain-name-servers 209.173.18.21 Option subnet mask 255.255.0.0 Option domain-name “yourdomainname.local”; Range dynamic-bootp 10.217.pc#.100 10.217.pc#.200 Default-lease-time 21600; Max-lease-time 43200; } } Save this back to the dhcpd.conf file Explain what each of the option settings are doing above. Try to re-start a client PC with DHCP set to automatically obtain an IP and see if the client gets an IP from your Linux DHCP server. Check the /var/lib/dhcp/dhcp.leases file to see if any leases have been obtained. Open this file with a text editor. Next you will activate the Web Server portion of your Linux server. Open the httpd.conf file in /etc/httpd/conf/http.conf and search for the line containing name ServerName new.host.name:80 and uncomment it. How do you know it has been commented? Next open Mozilla and type either your IP address or http://localhost/ in the location box. Do you see anything? Now type /etc/init.d/httpd/ start. What happens? Check the Services to see that the httpd Service is started. Next type chkconfig httpd on and this will do what?
  5. 5. Now open Mozilla and type either your IP address or http://localhost/ in the location box. Do you see anything? If you navigate to the /var/ww/html directory and open index.html and edit it you can replace the web test page with a modified page of your own. Are there tools to do this in Linux? Can you just edit the text file opened to change and customize the appearance? Navigate to another student’s machine and view their web page. How can this be done using the browser? Go to www.nessus.org and download both the Nessus client and the Nessus server. Review the online demo and any “how-to-use” documentation. Working with a partner configure a Nessus client and a Nessus server on the network. Take one of your Windows 2003 server drives and install it into a PC. Record the IP information of the Windows 2003 Server location. Run a Nessus vulnerability scan against the Windows 2003 server. What are the results? Explain the report results. Name: ______________________________________________ ELEC205 Introduction to Network Operating Systems Lab Activity Linux NOS (Linux – Using the Firewall Feature in Linux) On your Linux Server perform the following: Record the steps necessary to perform each step and be sure to answer any questions posed. Log in as the Root user and find where you can set and configure your server’s Firewall feature. Where is this done? Look up the command used to set Firewall
  6. 6. filters using the terminal windows. What is the command that access ACL’s configuration for the Firewall? If you were to load Linux to configure as just a router or firewall you would be working from just the command line. This is because the Firewall/Router install is the minimal installation. Where is this choice made? Configure your Firewall to deny all incoming traffic on ports 80 and 22. What services would this prohibit? Since you have configured Apache and SSH you could test this out. Explain how to test this Firewall from a partner Linux machine. What happens? Re-enable port 80 for http. What happens when you access the server using the browser and it’s IP now? Explain how you can enable other ports and applications using the GUI for Firewall configuration. How would you deny ports like 161, 23, 49, 79, and 1234 or 12345 and what would they deny? Try to dent all but port 80. Can you access your webpage from a client? If we would like to configure our Linux machine to be a multihomed Router/Firewall device spanning a 10.1 and 10.2 subnet, how would the machine’s NIC cards be configured? Can you do this with your machine? How? Name: ______________________________________________ ELEC205 Introduction to Network Operating Systems Lab Activity Linux NOS (Linux – Running Nessus Server using Linux) On your Linux Server perform the following: After downloading and installing Nessus you want to team with a partner to have a Nessus client and a Nessus Server on the network. You may also wish to download and try the Nessus Windows client as well for this lab. You might find its use a bit easier for scanning.
  7. 7. Get either your or your partner’s Windows 2003 Server drive, or both, (from the first half of the semester) and load them into the PC’s. You will be scanning for vulnerabilities of the Windows 2003 Servers using Nessus. Write down the IP address information for your Linux Nessus Server, Linux/Windows Nessus Client, and Windows Server 2003 machines. Make sure all have separate IP’s. Use 10.217.PC#.1 and 2 and 3 and 4 as necessary with mask 255.255.0.0 and gateway 10.217.0.1 and DNS 209.173.18.21 for your addressing scheme.

×