Skip to content

2.1 Network Management

Jump to bottom
echadbourne edited this page Jan 29, 2024 · 9 revisions

Notes

APIPA - The windows default IP, means that you have a DHCP client that does not have access to a DHCP server

  • Ex. 169.254.x.x

Network Management Lab

The prerequisites for this lab included all of the previous setup we have done, as well as setting up web01 without joining it to the domain

Firewall Setup

The first thing we had to do was enable the SNMP services on the pfSense firewall, I used the GUI and accessed the SMNP service page through the "services" drop down menu. From there I was able to set up the SNMP service on the firewall, using:

  • Polling port 161
  • Set up a community string
  • Bind it to the LAN interface

Then I restarted the SNMP service with the restart button at the top

Nmon01

I had to go through the basic setup the same as web01 for nmon, setting the IP address to the one seen in the IP address entry. To install snmp services I used the command:

  • sudo yum install net-snmp-utils

Then I queried the firewall with snmpwalk -Os -c [community string] -v2c fw01-elizabeth system

Web01 SNMP server

For this I had to use the command: sudo yum install net-snmp-utils net-snmp

Next, while preserving the original config file, I made a new /etc/snmp/snmpd.conf with the following lines the only thing in it:

  • com2sec myNetwork 10.0.5.0/24 [community string]
  • group myROGroup v2c myNetwork
  • view all included .1 80
  • access myROGroup "" any noauth exact all none none

Saved the file, enabled and started the snmpd with systemctl enable snmpd and systemctl start snmpd, also checked the status. Next I needed to let the port through the firewall with

  • firewall-cmd --permanent --add-port=161/udp
  • firewall-cmd reload
  • firewall-cmd --query-port=161/udp - used to check port status, came back "yes"

I then queried web01 from nmon with `snmpwalk -Os -c [community string] -v2c web01-elizabeth system``

Clone this wiki locally