Lab3.1Segmentation

WKS and MGMT02 Initial Setup

Set up a new admin user with lusrmgr.msc, adding it to the administrators group, set ip configuration according to IP Assignments

FW01 Setup

Set the rules for the new mgmt02

• set nat source rule 30 description "NAT FROM MGMT TO WAN"
• set nat source rule 30 outbound-interface eth0
• set nat source rule 30 source address 172.16.200.0/28
• set nat source rule 30 translation address masquerade

FWMGMT Setup

I set up the interfaces according to the VYOS entry, with the following results:

I also set the static routing and firewall to fw01's LAN interface (172.16.150.2) with the guidelines from the above linked tech journal

Then the DNS forwarding, like so:

Setting RIP protocol

On fw01:

• set protocols rip interface eth2 - enable rip
• set protocols rip network 172.16.50.0/29 - advertise dmz network

On fwmgmt:

• set protocols rip interface eth0
• set protocols rip network 172.16.200.0/28

Other Notes

Install wazuh 4.1, install java (jdk) first

After installing wazuh take a picture of the default password