Lab 1 - natekreit/SYS-255 GitHub Wiki

Summary:

This lab focused on setting up and connecting a Windows 10 VM to a PFsense firewall VM. This was a process that included inputs of different routing addresses, altering of default settings, and testing connectivity using a few commands.

Basics of lab:

Snapshots - The very first thing you must do is take snapshots. This will allow you to revert back to when nothing was done to the VM. If you were to mess up when configuring the other pieces of the lab the snapshot can be reverted to where you took it.

Network Adapters - To allow access to the internet you must ensure that your VMs have the right network adapters. This includes a LAN adapter for the workstation VM and both a LAN and WAN adapter for the firewall VM. The firewall needs both so it can connect the workstation on the LAN to the WAN.

Configuring IP Addresses to the network adapters - The IP addresses once connected to the network adapters through both VMs can finally reach out to the internet and begin searching.

Changing Default Settings - Changing the default settings on your machine can prevent potential attackers from finding you and breaking into your system easier. The most important default setting being the password.

Firewall GUI access - The GUI for the firewall can be accessed by using the LAN IP address you assigned it on the workstation. This allows you to continue configuring and changing firewall settings easier by clicking around the website.

Documentation

Connection IP address Description
wks01-nathan 10.0.5.100 IP address of the workstation VM
fw01-nathan LAN 10.0.5.2 IP address of the LAN gateway
dhcp01-nathan 10.0.5.3 IP address of dhcp01-nathan
ad01-nathan 10.0.5.5 IP address of DNS server
WAN 10.0.17.105 IP address of my workstation on the WAN
Upstream GW 10.0.17.2 IP address of the WAN Gateway

Useful commands:

"ping" - used to test connectivity to a specific IP address or domain Modifiers - "-n" - allows you to pick the number of packets sent

"tracert" - used to show all of the hops from your system to the desired destination Modifiers - "/h" - allows you to specify the number of hops traced

"whoami" - shows what user you are signed in as and on what machine

"hostname" - shows the hostname of the machine you are currently on

"ipconfig /all" - Shows large amount of networking information and connections