NSP655 – NETWORK SERVERS AND PERIPHERALS Final project description (Summer 2022) Definition: The revised final project i
-
- Site Admin
- Posts: 899603
- Joined: Mon Aug 02, 2021 8:13 am
NSP655 – NETWORK SERVERS AND PERIPHERALS Final project description (Summer 2022) Definition: The revised final project i
NSP655 – NETWORK SERVERS AND PERIPHERALS Final projectdescription (Summer 2022) Definition: The revised final project isbased on a VMware-virtualized Linux server and Linux client setup.The two Linux systems will be based on VMs created using Fedora 24under VMware Workstation 15, and configured with the networking andgeneral requirements outlined below. NETWORKING CONFIGURATIONREQUIREMENTS Computers should be named F24server.nspdomN.localand F24client.nspdomN.local (N is the number next to your name inthe attached student list). Both systems will have two virtualNIC (vNIC) interfaces (ens33 and ens37). The Linux server shouldhave both vNIC interfaces enabled. ens33 allows connection to theInternet through NAT whereas ens37 is connected to a host-onlyprivate virtual network, which both Linux systems connect to. TheLinux server primary vNIC interface (ens33) is set up for DHCP toallow the system to connect to the Internet with NAT. The Linuxclient primary vNIC interface, also setup with DHCP and NAT, willbe shutdown unless it is temporarily required to download softwarefrom the Internet. The Linux client will ultimately connect to theInternet through the Linux server via its secondary vNIC interface. The secondary (host-only) vNIC interface (ens37) on the Linuxserver should have the manually configured IP address192.168.10+N.1/24. The Linux client secondary vNIC interface shouldobtain an IP configuration from the Linux server using DHCP. VMWARE INSTALLATION & NETWORK CONFIGURATION OF LINUX SERVER ANDLINUX CLIENT SYSTEMS From the VMware WS 15 main menu select File– New Virtual Machine – Typical. Select Installer disc image file(iso) and click on Browse to locate and select the Fedora 24Live-x86 ISO you downloaded earlier. Click Next. Specify a VMname (e.g. Fedora 24 server) and click Next. Specify a maximumdisk size of 10GB and click Next. Click Finish to create the VMand then follow the steps in lab 1 (first half of the course) toinstall the Fedora 24 system. Name the systemF24server.nspdomN.local (where N is your unique number as describedabove – this is important, DO NOT JUST USE THE LETTER N, IT HAS TOBE YOUR UNIQUE NUMBER), set the root password as nsp655 and createa user student with password nspstudent as before. Finish theinstallation and reboot. Once logged on as user student, open aterminal and type ifconfig. The ens33 virtual NIC adapter shown isconnected with NAT to share the host OS’s IP address so that thesystem has access to the Internet. Test that by pinging a Webaddress, e.g. www.yahoo.ca. NOTE: Make sure to disable SELinux andthe system firewall, as was done in lab 2. Add an additionalvirtual NIC by selecting VM –Settings from the VMware WS 15 mainmenu. Click on Add at the bottom of the window, select NetworkAdapter and click Finish. On the right hand side select theHost-only mode for this network connection and click OK. Thenewly added adapter (ens37) will have a separate IP address givenby virtual DHCP. To shut down the virtual DHCP server (since wewill set up our own DHCP service on the Linux server), select fromthe VMware WS 15 main menu Edit – Virtual Network Editor, clickChange Settings on the bottom, click Yes to allow VMware to makechanges (NOTE: at this point, the Virtual Network Editor window maydisappear from the foreground, just minimize the VMware WS 15application to reveal the window) and uncheck the box at the bottomof the window (Use local DHCP service…). Click OK to save thesettings and then bring your Fedora 24 VM back to the foregroundagain. From the Fedora network settings applet on the top right,change the ens37 virtual NIC IP mode from DHCP to manual with IPaddress 192.168.10+N.1/24. Repeat the steps above to create aLinux client Fedora 24 VM with hostname F24client.nspdomN.local.Keep the ens33 vNIC interface disabled. As before, disable SELinuxand the system firewall. LINUX SERVER SYSTEM GENERALCONFIGURATION REQUIREMENTS Configure the DHCP server service forthe 192.168.10+N.0 network. Use a DHCP range of 192.168.10+N.50 –192.168.10+N.100. Configure the NFS server service to export the/backups directory (must be created) as read-write to all systemsin the 192.168.10+N.0 network. Configure the Samba server serviceto share the local /docs directory (must be created) as read-onlyfor any user (public share). Configure the DNS server service forthe Internet forward zone nspdomN.local and add host resourcerecords for all systems on the local network 192.168.10+N.0 (i.e.,Linux server and client). Configure Sendmail, Dovecot andSquirrelmail to provide Mail, POP/IMAP and Webmail services forusers. Make sure the Web server is enabled and create a simple HTMLwelcome page (not the default Apache welcome page) with the coursename, domain name and your name. NOTE: Refer to Sobell, chapter 20(pg. 758) on how to set up Squirrelmail (hint: use yum installsquirrelmail to install the required packages). Create localLinux users named engineer and manager (choose appropriatepasswords). Create local Linux user vncuser and configure the VNCserver for remote X display 4 for this user (use connectionpassword vncpass). Configure a local serial printer (use HPLaserJet p1505n) and enable printer sharing and remote printeradministration with CUPS. Configure the Linux firewall to blockall services except SSH, HTTPS, POP3S, SMTP, DNS, NFSv4, IPP, VNCand Samba. Also configure the Linux firewall for SNAT to allow theLinux client to access the Internet (hint: using the FirewallConfiguration utility, add the primary vNIC interface (ens33) tothe external firewall zone and enable masquerading). LINUX CLIENTSYSTEM GENERAL CONFIGURATION REQUIREMENTS Configure the system tomount the shared folder docs from the Linux server using the Filesutility GUI of the Gnome graphical environment. Configure thesystem to automatically mount (use fstab) the Samba share docs onthe Linux server under /mnt/docs. Configure the system toautomatically mount (use fstab) the Linux server NFS share backupsunder /mnt/backups and configure the system to backup the /etcdirectory on the NFS share on a weekly basis using an executablebash script file (hint: use the crond daemon/crontab -e command). Create an executable script to automatically launch the VNC viewerand connect to the Linux server with SSH tunneling (hint: see lab6, part 4). The script should automate any password entry so thatpasswords will not be required to be entered when the script isexecuted. Using the Print Settings GUI, connect to the sharednetwork printer (LaserJet p1505n) on Linux server. Configure theEvolution e-mail client to send/receive mail from the Linux serverusing the engineering or management accounts. Demonstrate thatmail can be sent and received by Webmail on the Linux client byusing the Squirrelmail service on the Linux server. Report andevaluation: Please submit one report per person. The report shouldinclude a simple project introduction, detailed description ofconfiguration parameters/files (including any system commands orconfiguration options used) based on clear, legible screencaptures* and file listings, and any other comments you may want toadd. It should be professionally prepared and well organized, withappropriate formatting, headings, title page, use of color, etc.Total mark for the report quality (7.5 marks), configurationsdetailed in the report (45 marks) and individual performanceevaluation based on your first week performance in the actual lab,i.e., the first week of the original project (7.5 marks) is 60(This is approximate and may vary). The final project is worth 40%of the total course mark. *IMPORTANT NOTE ON SCREEN CAPTURES: Thescreen captures need to be clearly legible and relevant to theconfiguration you are trying to show. For example, to show the IPaddress of a system, you should screen capture the output of thegraphical network configuration utility to show if it is configuredby DHCP or manually and the output of the ifconfig command. Forthings like sendmail configuration, only capture the relevantsections of the configuration files. Marks WILL NOT BE GIVEN ifrelevant screen captures that demonstrate that you completed aspecific configuration or that a requirement is met (e.g., mountingof a network share) are missing or are not legible. Deadline: Theproject report must be submitted on or before Aug 4,2022 by 11:59pmon your BB folder. No late submissions will be accepted. WARNING:As this project is to be carried out at home and independently (itreally must be, given the social distancing recommendation from ourgovernment), I will pay special attention to your report submission(configuration descriptions and screen captures/file listings). Anyobvious similarities in report style/format, configurationdescriptions, scripting details and other unique elements mayconstitute plagiarism, with appropriate action taken. PLEASE WORKON YOUR PROJECT INDEPENDENTLY AND DO NOT SHARE INFORMATION WITHOTHER STUDENTS NO MATTER HOW WELL YOU KNOW THEM!!!