curs 4 alexandru bujor - bluedrive solutionscurs 4 alexandru bujor ... completat in procesul de...
TRANSCRIPT
![Page 1: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/1.jpg)
Curs 4
Alexandru Bujor
![Page 2: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/2.jpg)
ISO/OSI vs TCP/IP
![Page 3: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/3.jpg)
Conectori folositi
Tipul de cablu
Verificarea link-ului: ip link show
![Page 4: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/4.jpg)
Adresare la nivelul retelei locale
Ethernet (L1 + L2)
Adresa MAC
Practic: ◦ Verificare cu ifconfig
![Page 5: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/5.jpg)
Alte protocoale suportate de Linux: ◦ Ppp
◦ Frame relay
◦ ATM
PPP: legatura punct la punct cablu null-modem
Legatura IP pe 3 sarme
Aplicatia folosita: pppd
![Page 6: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/6.jpg)
Adresa logica la nivel global
Permite rutarea traficului in internet
Identificator: adresa IP (publica/privata)
Protocoale disponibile: IPv4/IPv6
Practic: ◦ Vizualizare: ifconfig
◦ Setari temporare: ifconfig
![Page 7: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/7.jpg)
Setarea statica a adresarii IP ◦ Fisier interfata
◦ Gateway
![Page 8: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/8.jpg)
Descrie modul in care se trimit datele intre aplicatia sursa si cea destinatie
Multiplexarea mai multor fluxuri de date intre aceeasi pereche sursa-destinatie (fluxuri generate de aplicatii diferite)
Reliable sau best-effort
TCP vs UDP
![Page 9: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/9.jpg)
Verificarea conexiunilor in stare listen (servere) ◦ Practic cu netstat
Verificare conexiuni tcp/udp ( netstat )
Socket = adresa IP - Port
![Page 10: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/10.jpg)
Integreaza Layer-ele 5,6,7 din stiva OSI
Aplicatia se ocupa de: ◦ definirea sesiunilor
◦ criptare
◦ prezentarea datelor (forma: binara/text)
![Page 11: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/11.jpg)
Interfete fizice/logice
Lo – interfata loopback ◦ Ping in loopback – verifica functionalitatea stivei de
protocoale tcp/ip
Ethx – interfata ethernet ◦ Asociata unei interfete fizice
◦ Numarul (x) este stabilit de udev printr-un fisier completat in procesul de instalare
![Page 12: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/12.jpg)
Ethx:y – subinterfata logica y de pe interfata x ◦ Permite atasarea mai multor adrese IP pe aceeasi
interfata fizica
Brx – interfata logica de tip bridge ◦ Adresa ip asociata masinii fizice se fixeaza pe brx,
nu pe adresele fizice atasate bridge-ului
◦ Stp – spanning tree protocol
Pppx – interfete point to point
![Page 13: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/13.jpg)
Construirea unui bridge virtual ◦ temporar
◦ persistent
![Page 14: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/14.jpg)
Conceptul de ruta ◦ Ruta = retea destinatie (adresa retea+masca) si
nexthop (urmatorul router catre reteaua respectiva)
Procesul de rutare ◦ Activarea rutarii pe o masina linux
Ruta default
![Page 15: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/15.jpg)
Tabela de rutare: colectia de rute prezente in sistem
Manipularea tabelei de rutare: ◦ Vizualizare
◦ Adaugare ruta
◦ Eliminare ruta
Rutare statica vs rutare dinamica
![Page 16: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/16.jpg)
Rute statice ◦ Temporare
◦ Permanente
![Page 17: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/17.jpg)
Permite manipularea tabelei de rutare locale prin intermediul informatiilor provenite din rularea unor protocoale specifice
Protocoale rutare dinamica ◦ RIPv1/v2, OSPF, EIGRP (?)
Protocoale de rutare ◦ Distance vector
◦ Link-state
![Page 18: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/18.jpg)
Ofera suport pentru o multitudine de protocoale de rutare: ◦ Ospf
◦ Rip v1/2
◦ Bgp
◦ Is-is
Emuleaza CLI-ul de pe routerele Cisco
![Page 19: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/19.jpg)
Arhitectura:
![Page 20: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/20.jpg)
Rutare statica/dinamica
![Page 21: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/21.jpg)
host – resolver dns
dig
ping
traceroute
tcpdump
![Page 22: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/22.jpg)
Virtualizare = simularea unei masini de calcul prin software rulat pe o masina fizica
O masina virtuala = un proces din sistem
Masinile virtuale: ◦ Utilizeaza resursele sistemului fizic
◦ Pot partaja resursele intre ele
◦ Procesele sunt independente
◦ Masinile virtuale pot interactiona prin:
Networking
Pipe-uri
Shared folders
![Page 23: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/23.jpg)
![Page 24: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/24.jpg)
Hardware: resursele disponibile pentru partajare
Host OS: sistemul de operare care ruleaza pe masina fizica
Guest OS: sistemul de operare care ruleaza pe masina virtuala
Hypervisor: interfata intre host os si masina virtuala sau interfata intre hw si masinile virtuale
![Page 25: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/25.jpg)
VMWare (Server,Workstation,Player)
Virtualbox (Oracle)
XEN
HyperV
Qemu-KVM
![Page 26: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/26.jpg)
Infrastructura hardware si software care ofera: ◦ Infrastructure as a service (IaaS)
◦ Platform as a service (PaaS)
◦ Software as a service (SaaS)
◦ Network as a service (NaaS)
◦ Storage as a service (STaaS)
◦ Test environment as a service (TEaaS)
◦ Desktop virtualization
◦ API as a service (APIaaS)
![Page 27: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/27.jpg)
Taxare per utilizare ◦ Trafic de date
◦ Putere de procesare necesara
Elasticitate
Bazat pe solutiile de virtualizare ◦ In spate se folosesc masini virtuale
![Page 28: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/28.jpg)
OpenStack
IBM SmartCloud Enterprise & Provisioning
RH Enterprise Virtualization
![Page 29: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/29.jpg)
Kernel-based Virtual Machine
Pentru procesoare cu suport de virtualizare hardware (INTEL VT-x, AMD-V)
Proiect open source dezvoltat de RedHat
Disponibil din Februarie 2007, kernel 2.6.20
![Page 30: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/30.jpg)
KVM – Type 2
![Page 31: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/31.jpg)
![Page 32: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/32.jpg)
Virtualizare: ◦ 1-160 CPU, diverse arhitecturi
◦ RAM, up to 32 TB
◦ Watchdog
◦ Display VNC
Stocare: ◦ Raw
◦ Qcow
◦ Virtio drives
![Page 33: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/33.jpg)
Networking ◦ Tun/tap
◦ Shared device (bridge based)
◦ Host interface
Monitorizare & administrare
libvirt
![Page 34: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/34.jpg)
IaaS
Multe solutii au la baza KVM ◦ RHEL enterprise virtualization
◦ OpenStack
◦ IBM OpenVirtualization
RHEL Enterprise Virtualization: high availability VMs (cluster based)
Live migration
![Page 35: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/35.jpg)
Instalare suport virtualizare
Activare vt-x
![Page 36: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/36.jpg)
Definire masina virtuala
Virt-manager
Modificare resurse
![Page 37: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/37.jpg)
Masini de baza + qcow2
![Page 38: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/38.jpg)
Siguranta informatiilor care sunt stocate/procesate intr-un sistem
Cateva principii: ◦ Sisteme bastion
◦ Nivele multiple de securitate
![Page 39: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/39.jpg)
Nivelul fizic ◦ Lacate, izolare, conditii speciale de mediu, ups
Hardware ◦ Redundanta, echipamente de calitate, etc.
Sistem de operare ◦ Update-uri
◦ Update de kernel (!!!)
![Page 40: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/40.jpg)
Networking ◦ Firewall (fizic, software)
◦ IPS/IDS
Aplicatii ◦ Update de pachete
◦ Proceduri specifice aplicatiilor
Parole
Selectarea interfetelor pe care “asculta” serverul
![Page 41: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/41.jpg)
Urmarirea log-urilor ◦ Logwatch
Monitorizare ◦ Snmp (net-snmp)
◦ Solutii:
OpenNMS
Zenoss
Cacti
![Page 42: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/42.jpg)
Firewall ◦ Iptables
◦ Ebtables
TCP Wrappers ◦ Pentru aplicatiile care sunt compilate cu suport
libwrap
◦ Ldd <cale executabil>
◦ Firewall aditional
◦ Permite executia unui script / eveniment
![Page 43: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/43.jpg)
Selinux ◦ Dezvoltate de NSA
◦ Componenta in kernel
◦ /var/log/audit/audit.log
◦ Sistem complex de securitate, activate standard de distributiile bazate pe RedHat
◦ Moduri:
Disabled
Enabled
Enforcing
Permissive
![Page 44: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/44.jpg)
![Page 45: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/45.jpg)
Activare/dezactivare selinux
Vizualizare contexte
Restaurare contexte default
![Page 46: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/46.jpg)
Componenta foarte importanta a sistemului
Software-ul utilizat: iptables (netfilter)
Organizat sub forma unor chain-uri pe care pachetele le traverseaza
Poate face NAT
Se pot adauga reguli temporare
![Page 47: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/47.jpg)
![Page 48: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/48.jpg)
PREROUTING: toate pachetele, inainte de a se decide daca se face rutare
INPUT: pachetele care sunt adresate sistemului local
OUTPUT: pachete generate de statia locala
FORWARD: pachete care traverseaza router-ul (sistemul local)
POSTROUTING: toate pachetele dupa ce au fost rutate
![Page 49: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/49.jpg)
nat: modificarea adreselor ◦ Utilizat pentru nat, port-forwarding
filter: filtrarea traficului (accept/drop)
mangle: modificari facute in antetul pachetelor
![Page 50: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/50.jpg)
ACCEPT (pentru chain)
DROP (drop final)
REJECT (iesire din chain)
SNAT (modificarea sursei)
DNAT (modificarea destinatiei)
MASQUERADE (pat)
![Page 51: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/51.jpg)
iptables <adaugare/eliminare> CHAIN –t TABEL <filtru identificare trafic> -j DECIZIE <optiuni decizie>
Listare ◦ iptables –t TABEL –L
Persistenta regulilor: ◦ Service iptables save
![Page 52: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/52.jpg)
Listare reguli iptables
![Page 53: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/53.jpg)
Adaugare regula permisiune tcp:80
Conexiuni: ◦ NEW
◦ RELATED
◦ ESTABLISHED
Eliminare reguli
![Page 54: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/54.jpg)
Iptables ◦ NAT
![Page 55: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/55.jpg)
Numele pc-ului
/etc/sysconfig/network
Diferentierea sistemelor (shell remote)
Comanda hostname
![Page 56: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/56.jpg)
Mapare intre nume si adrese ip
Traficul ip este bazat pe adrese ip si nu pe nume
Pentru rezolvare nume: ◦ Servicii de retea
◦ Fisiere speciale (baza de date locala)
![Page 57: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/57.jpg)
/etc/hosts ◦ Contine mapari statice intre nume si adrese IP
/etc/resolv.conf ◦ Contine serverele DNS utilizate
Lab practic
![Page 58: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/58.jpg)
DHCP
NTP
HTTP
DNS
NFS
Logs
![Page 59: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/59.jpg)
Apache este cel mai popular server de web disponibil
Portul 80, TCP
Yum install httpd
Control: service httpd start|stop|restart|status
Fisier configurare /etc/httpd/conf/httpd.conf
![Page 60: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/60.jpg)
Comportament default: ◦ Asculta pe toate interfetele, portul 80 tcp
◦ Serveste documente din /var/www/htdocs
Se poate integra cu PHP pentru a genera pagini cu continut dinamic
![Page 61: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/61.jpg)
Apache & virtual hosts
![Page 62: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/62.jpg)
Cel mai utilizat server DNS existent
Cum functioneaza sistemul DNS?
Zone DNS
Server autoritar
Forwarder
Server dns caching-only
Foloseste porturile 53 TCP si 53 UDP
![Page 63: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/63.jpg)
Instalarea si configurarea bind ca server caching only
![Page 64: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/64.jpg)
Dynamic Host Configuration Protocol
Ofera: ◦ Adresa ip, masca de retea
◦ Gateway
◦ DNS server
◦ Alte optiuni (server tftp pentru boot prin retea, etc.)
Foloseste porturile 67,68 (UDP)
![Page 65: Curs 4 Alexandru Bujor - Bluedrive SolutionsCurs 4 Alexandru Bujor ... completat in procesul de instalare ... Activarea rutarii pe o masina linux](https://reader030.vdocuments.pub/reader030/viewer/2022040114/5e4bb8588d90841bf17022b2/html5/thumbnails/65.jpg)
Instalare si configurare server DHCP