Skip to content

2.1 Network Management

Jump to bottom
echadbourne edited this page Jan 29, 2024 · 9 revisions

Notes

APIPA - The windows default IP, means that you have a DHCP client that does not have access to a DHCP server

  • Ex. 169.254.x.x

Network Management Lab

The prerequisites for this lab included all of the previous setup we have done, as well as setting up web01 without joining it to the domain

Firewall Setup

The first thing we had to do was enable the SNMP services on the pfSense firewall, I used the GUI and accessed the SMNP service page through the "services" drop down menu. From there I was able to set up the SNMP service on the firewall, using:

  • Polling port 161
  • Set up a community string
  • Bind it to the LAN interface

Then I restarted the SNMP service with the restart button at the top

Nmon01

I had to go through the basic setup the same as web01 for nmon, setting the IP address to the one seen in the IP address entry. To install snmp services I used the command:

  • sudo yum install net-snmp-utils

Then I queried the firewall with snmpwalk -Os -c [community string] -v2c fw01-elizabeth system

Web01 SNMP server

For this I had to use the command: sudo yum install net-snmp-utils net-snmp

Next, while preserving the original config file, I made a new /etc/snmp/snmpd.conf with the following lines the only thing in it:

  • com2sec myNetwork 10.0.5.0/24 [community string]
  • group myROGroup v2c myNetwork
  • view all included .1 80
  • access myROGroup "" any noauth exact all none none

Saved the file, enabled and started the snmpd with systemctl enable snmpd and systemctl start snmpd, also checked the status. Next I needed to let the port through the firewall with

  • firewall-cmd --permanent --add-port=161/udp
  • firewall-cmd reload
  • firewall-cmd --query-port=161/udp - used to check port status, came back "yes"

I then queried web01 from nmon with snmpwalk -Os -c [community string] -v2c web01-elizabeth system

SNMP on AD and MGMT

Next I needed to add snmp tools to AD and MGMT, both were features

  • MGMT got SNMP-Tools under remote administration
  • AD got SNMP Service Feature

At first I did not have all of the things checked that I needed to, so I had to go back and install more things, but it did eventually work

To enable remote management on AD I had to use powershell (on AD, from MGMT) with the following command:

  • Set-NetFirewallRule -DisplayGroup "Remote Event Log Management" -Enabled True - This edits the firewall rules so I can manage AD from MGMT with Computer Manager

SNMP Service Security Properties on AD

Using Computer Management for AD, under services, I had to find the SNMP service and go to the security tab.

  • Add [community string] to the accepted community names
  • Change the "accept SNMP packets from this host" to only have nmon's hostname listed (nmon01-elizabeth)

Then restart the service

Query AD from NMON to test

Clone this wiki locally