SYS265 Lab 1 - eitan-j/tech-journal GitHub Wiki

  • Connect to web01
  • nmtui to config network and hostname
  • setup user etc.
  • Connect to pfsense
  • Services -> SNMP -> Enable
  • Set settings
  • Set Bind to LAN
  • Restart Service
  • Connect to nmon01
  • setup etc.
  • Add stuff to DNS
  • Troubleshooting
  • Make sure to add "Search domains" eitan.local in nmtui
  • Install and use snmpwalk in nmon01
  • Install with sudo yum install net-snmp-utils
  • Use with snmpwalk -Os -c SYS265 -v2c fw01-eitan system
  • Install and setup SNMPD in web01
  • Install with sudo yum install net-snmp-utils net-snmp
  • Backup /etc/snmp/snmpd.conf
  • Replace with:
com2sec myNetwork 10.0.5.0/24 SYS265
group myROGroup v2c myNetwork
view all included .1 80
access myROGroup "" any noauth exact all none none
  • Enable and start with systemctl enable --now snmpd
  • Check status with systemctl status snmpd
  • Allow through firewall with sudo firewall-cmd --permanent --zone=public --add-port=161/udp and
  • sudo firewall-cmd --reload
  • Install SNMP Service on AD01
  • Server Manager -> AD01-EITAN -> Add Roles and Features -> Next x4 -> SNMP Service -> Next -> Install
  • Install SNMP Remote Administration Tools on MGMT01
  • Server Manager -> MGMT01-EITAN -> Add Roles and Features -> Next x4 -> >Remote Server Administration Tools -> >Feature Administration Tools -> SNMP Tools -> Next -> Install
  • Allow Remote Management on AD01
  • Server Manager -> Windows Powershell -> Set-NetFirewallRule -DisplayGroup "Remote Event Log Management" -Enabled True
  • Configure SNMP on AD01
  • Server Manager -> MGMT01-EITAN -> Computer Management -> Services and Applications -> Services -> SNMP Service -> Security
  • Accepted community names -> Add... -> SYS265 -> Add
  • Accept SNMP packets from these hosts -> Add... -> nmon01-eitan -> Add
  • Apply
  • OK
  • SNMP Service -> Restart
  • More testing