mirror of
https://github.com/SantaSpeen/kkep-praktic-2022.git
synced 2025-07-03 00:06:10 +00:00
18.04.2022
This commit is contained in:
commit
1cd88cfc76
BIN
Linux_Moscow_2020.docx
Normal file
BIN
Linux_Moscow_2020.docx
Normal file
Binary file not shown.
BIN
No1.2020.pdf
Normal file
BIN
No1.2020.pdf
Normal file
Binary file not shown.
BIN
RC1920_TP39_ABC_Marking_Scheme_v1.8.xlsx
Normal file
BIN
RC1920_TP39_ABC_Marking_Scheme_v1.8.xlsx
Normal file
Binary file not shown.
54
configs/base-config-CentOS.sh
Normal file
54
configs/base-config-CentOS.sh
Normal file
@ -0,0 +1,54 @@
|
||||
# !!!!!
|
||||
# VMWare не может вставить русские буквы, так что исключайте их при копировании
|
||||
# !!!!!
|
||||
|
||||
# Для смены порядка чтения "DNS"
|
||||
|
||||
nano /etc/nsswitch.conf
|
||||
|
||||
# Ответы DNS сервера должны иметь более высокий приоритет.
|
||||
# В строке, которая начинается с "hosts: ", меняем местами слова files и dns.
|
||||
|
||||
CONFIG_FILE_VERSION="1.1"
|
||||
|
||||
# HOSTS config
|
||||
|
||||
HOSTS="/etc/hosts"; rm $HOSTS; touch $HOSTS
|
||||
echo -e "# ${HOSTS} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n\n" >> $HOSTS
|
||||
echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $HOSTS
|
||||
echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $HOSTS
|
||||
echo -e "20.20.20.10\tisp" >> $HOST
|
||||
|
||||
cat $HOSTS
|
||||
|
||||
# SSH config
|
||||
|
||||
SSH_CONFIG="/etc/ssh/sshd_config"
|
||||
cp $SSH_CONFIG $SSH_CONFIG.old
|
||||
sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSH_CONFIG
|
||||
systemctl restart sshd.service
|
||||
|
||||
# YUM config
|
||||
|
||||
cd /media/
|
||||
sh -c "rm -rf *"
|
||||
mkdir CentOS; mkdir cdrom
|
||||
cd /etc/
|
||||
mkdir yum.repos.d-default/
|
||||
mv ./yum.repos.d/CentOS* ./yum.repos.d-default/
|
||||
cd yum.repos.d/
|
||||
sh -c "rm -rf *"
|
||||
REPO_FILE="/etc/yum.repos.d/CentOS-Media.repo"
|
||||
touch $REPO_FILE
|
||||
echo -e "# ${REPO_FILE} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n" >> $REPO_FILE
|
||||
echo -e "[c7-media]\nname=CentOS-$releasever - Media\nbaseurl=file:///media/CentOS/\n\t\tfile:///media/cdrom/\ngpgcheck=1\nenabled=1\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7" >> $REPO_FILE
|
||||
|
||||
cat $REPO_FILE
|
||||
|
||||
# /dev/sr1 CentOS-7-x86_64-DVD-1810.iso
|
||||
# /dev/sr0 Additional.iso
|
||||
|
||||
mount /dev/sr1 /media/CentOS
|
||||
mount /dev/sr0 /media/cdrom
|
||||
|
||||
yum install lynx vim net-tools dhclient bash-completion tcpdump curl nfs-utils cifs-utils sshpass bind-utils openssh -y
|
||||
34
configs/base-config-Debian.sh
Normal file
34
configs/base-config-Debian.sh
Normal file
@ -0,0 +1,34 @@
|
||||
# !!!!!
|
||||
# VMWare не может вставить русские буквы, так что исключайте их при копировании
|
||||
# !!!!!
|
||||
|
||||
# Для смены порядка чтения "DNS"
|
||||
|
||||
nano /etc/nsswitch.conf
|
||||
|
||||
# Ответы DNS сервера должны иметь более высокий приоритет.
|
||||
# В строке, которая начинается с "hosts: ", меняем местами слова files и dns.
|
||||
|
||||
CONFIG_FILE_VERSION="1.1"
|
||||
|
||||
# HOSTS config
|
||||
|
||||
HOSTS="/etc/hosts"; rm $HOSTS; touch $HOSTS
|
||||
echo -e "# ${HOSTS} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n\n" >> $HOSTS
|
||||
echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $HOSTS
|
||||
echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $HOSTS
|
||||
echo -e "10.10.10.10\tisp" >> $HOSTS
|
||||
|
||||
cat $HOSTS
|
||||
|
||||
# SSH config
|
||||
|
||||
SSH_CONFIG="/etc/ssh/sshd_config"
|
||||
cp $SSH_CONFIG $SSH_CONFIG.old
|
||||
sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSH_CONFIG
|
||||
systemctl restart ssh.service
|
||||
|
||||
# APT config
|
||||
|
||||
apt-cdrom add
|
||||
apt-get install tcpdump bind9 ssh nfs-common network-manager curl lynx net-tools vim bind9utils cifs-utils -y
|
||||
219
configs/config-all.sh
Normal file
219
configs/config-all.sh
Normal file
@ -0,0 +1,219 @@
|
||||
# !!!!!
|
||||
# VMWare не может вставить русские буквы, так что исключайте их при копировании
|
||||
# !!!!!
|
||||
|
||||
# Пакеты -> ip -> тунель -> дхцп -> -> ->
|
||||
|
||||
# File version: 2.0
|
||||
CONFIG_FILE_VERSION="2.0"
|
||||
|
||||
HOSTS="/etc/hosts"; rm $HOSTS; touch $HOSTS
|
||||
echo -e "# ${HOSTS} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n\n" >> $HOSTS
|
||||
echo -e "# Default values\n127.0.0.1\tlocalhost\n::1\tip6-localhots ip6-loopback\nff02::1\tip6-allnodes\nff02::2\tip6-allrouters\n" >> $HOSTS
|
||||
echo -e "# Work values\n172.16.20.10\tl-srv l-srv.skill39.wsr\n10.10.10.1\tl-fw l-fw.skill39.wsr\n172.16.50.2\tl-rtr-a l-rtr-a.skill39.wsr\n172.16.55.2\tl-rtr-b l-rtr-b.skill39.wsr\n172.16.200.61\tl-cli-b l-cli-b.skill39.wsr\n20.20.20.5\tout-cli out-cli.skill39.wsr\n20.20.20.100\tr-fw r-fw.skill39.wsr\n192.168.20.10\tr-srv r-srv.skill39.wsr\n192.168.10.2\tr-rtr r-rtr.skill39.wsr\n192.168.100.100\tr-cli r-cli.skill39.wsr">> $HOSTS
|
||||
|
||||
cat $HOSTS
|
||||
|
||||
# echo -e "20.20.20.10\tisp" >> $HOSTS # Organisation RIGHT
|
||||
# echo -e "10.10.10.10\tisp" >> $HOSTS # Organisation LEFT
|
||||
|
||||
# Для смены порядка чтения "DNS"
|
||||
|
||||
nano /etc/nsswitch.conf
|
||||
|
||||
# Ответы DNS сервера должны иметь более высокий приоритет.
|
||||
# В строке, которая начинается с "hosts: ", меняем местами слова files и dns.
|
||||
|
||||
SSH_CONFIG="/etc/ssh/sshd_config"
|
||||
cp $SSH_CONFIG $SSH_CONFIG.old
|
||||
sed -ie 's/#PermitRoot.*/PermitRootLogin yes/' $SSH_CONFIG
|
||||
systemctl restart ssh.service
|
||||
|
||||
# Эта настройка для FW и RTR
|
||||
|
||||
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
|
||||
|
||||
# Настройка debian
|
||||
|
||||
apt-cdrom add
|
||||
apt-get install tcpdump bind9 ssh nfs-common network-manager curl lynx net-tools vim bind9utils cifs-utils -y
|
||||
|
||||
# CentOS yum repo Config
|
||||
|
||||
cd /media/
|
||||
sh -c "rm -rf *"
|
||||
mkdir CentOS
|
||||
mkdir cdrom
|
||||
|
||||
cd /etc/
|
||||
|
||||
mkdir yum.repos.d-default/
|
||||
mv ./yum.repos.d/CentOS* ./yum.repos.d-default/
|
||||
|
||||
cd yum.repos.d/
|
||||
sh -c "rm -rf *"
|
||||
REPO_FILE="/etc/yum.repos.d/CentOS-Media.repo"
|
||||
touch $REPO_FILE
|
||||
|
||||
echo -e "# ${REPO_FILE} file.\n# Configured by Maxim; v${CONFIG_FILE_VERSION}\n" >> $REPO_FILE
|
||||
echo "[c7-media]" >> $REPO_FILE
|
||||
echo -e "name=CentOS-$releasever - Media" >> $REPO_FILE
|
||||
echo "baseurl=file:///media/CentOS/" >> $REPO_FILE
|
||||
echo -e "\t\tfile:///media/cdrom/" >> $REPO_FILE
|
||||
echo "gpgcheck=1" >> $REPO_FILE
|
||||
echo "enabled=1" >> $REPO_FILE
|
||||
echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7" >> $REPO_FILE
|
||||
|
||||
cat $REPO_FILE
|
||||
|
||||
# Проверить устройства можно командой blkid
|
||||
# Имя образа будет указано в lable="<ISO-NAME>"
|
||||
|
||||
# /dev/sr1 Это [datastore1] _ISO/CentOS-7-x86_64-DVD-1810.iso
|
||||
# /dev/sr0 Это [datastore1] _ISO/Additional.iso
|
||||
|
||||
mount /dev/sr1 /media/CentOS
|
||||
mount /dev/sr0 /media/cdrom
|
||||
|
||||
yum install lynx vim net-tools dhclient bash-completion tcpdump curl nfs-utils cifs-utils sshpass bind-utils libcares* -y
|
||||
|
||||
# firewall вырубить на всех, кроме R-FW
|
||||
|
||||
systemctl stop firewalld && systemctl disable firewalld
|
||||
|
||||
# R-FW
|
||||
|
||||
firewall-cmd --permanent --zone=external --add-service=gre
|
||||
firewall-cmd --permanent --zone=external --add-interface=ens160
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=ens192
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=ens224
|
||||
firewall-cmd --permanent --zone=trusted --add-interface=gre1
|
||||
|
||||
firewall-cmd --reload
|
||||
|
||||
# firewall-cmd --permanent --zone=external --add-interface=ens256
|
||||
# firewall-cmd --permanent --zone=external --add-masquerade
|
||||
# firewall-cmd --permanent --zone=trusted --add-interface=tunnel
|
||||
# firewall-cmd --permanent --zone=external --add-forward-port=port=80:proto=tcp:toport=80:toaddr=192.168.20.10
|
||||
# firewall-cmd --permanent --zone=external --add-service=http
|
||||
# firewall-cmd --permanent --zone=external --add-service=https
|
||||
# firewall-cmd --permanent --zone=external --add-service=ssh
|
||||
|
||||
# L-FW
|
||||
|
||||
# iptables -t nat -A POSTROUTING -o ens256 -j MASQUERADE
|
||||
# iptables -t nat -A PREROUTING -i ens256 -p udp --dport 53 -j DNAT --to-destination 172.16.20.10
|
||||
|
||||
echo "AllowUsers ssh_p root ssh_c" >> /etc/ssh/sshd_config
|
||||
|
||||
adduser ssh_p
|
||||
# p_hss
|
||||
|
||||
adduser ssh_c
|
||||
# c_hss
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.20.0/24 area 0
|
||||
# network 172.16.50.0/30 area 0
|
||||
# network 172.16.55.0/30 area 0
|
||||
# network 10.5.5.0/30 area 0
|
||||
# network 5.5.5.0/27 area 0
|
||||
# passive-interface ens160
|
||||
# passive-interface ens256
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
# L-RTR-A
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.50.0/30 area 0
|
||||
# network 172.16.100.0/24 area 0
|
||||
# passive-interface esn224
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
apt install isc-dhcp-server
|
||||
|
||||
# Пишем интерфейсы
|
||||
nano /etc/default/isc-dhcp-server
|
||||
|
||||
# Выставляем ip
|
||||
nano /etc/dhcp/dhcpd.conf
|
||||
|
||||
# # /etc/dhcp/dhcpd.conf file
|
||||
# # L-RTR-A
|
||||
# option domain-name "skill39.wsr";
|
||||
# option domain-name-servers 172.16.20.10;
|
||||
|
||||
# default-lease-time 600;
|
||||
# max-lease-time 7200;
|
||||
# ddns-update-style none;
|
||||
|
||||
# authoritative;
|
||||
|
||||
# subnet 172.16.50.0 netmask 255.255.255.252 {}
|
||||
|
||||
# subnet 172.16.100.0 netmask 255.255.255.0 {
|
||||
# range 172.16.100.65 172.16.100.75;
|
||||
# option routers 172.16.100.1;
|
||||
# }
|
||||
|
||||
# subnet 172.16.200.0 netmask 255.255.255.0 {
|
||||
# range 172.16.200.65 172.16.200.75;
|
||||
# option routers 172.16.200.1;
|
||||
# }
|
||||
|
||||
# host lclib {
|
||||
# hardware ethernet 00:0C:29:1D:2C:06;
|
||||
# fixed-address 172.16.200.61;
|
||||
# }
|
||||
|
||||
# Включаем isc-dhcp-server и переагружаем
|
||||
systemctl start isc-dhcp-server && systemctl enable isc-dhcp-server; shutdown -r 0
|
||||
|
||||
# L-RTR-B
|
||||
|
||||
apt install frr
|
||||
|
||||
# ospfd=no => ospfd=yes
|
||||
nano /etc/frr/daemons
|
||||
|
||||
systemctl restart frr
|
||||
vtysh
|
||||
|
||||
# # frr config
|
||||
# conf t
|
||||
# router ospf
|
||||
# network 172.16.55.0/30 area 0
|
||||
# network 172.16.200.0/24 area 0
|
||||
# passive-interface ens224
|
||||
# exit
|
||||
# exit
|
||||
# write
|
||||
# exit
|
||||
|
||||
apt install isc-dhcp-relay
|
||||
12
configs/sshd_config.sh
Normal file
12
configs/sshd_config.sh
Normal file
@ -0,0 +1,12 @@
|
||||
SSH_CONFIG="/etc/ssh/sshd_config"
|
||||
|
||||
echo "Port 22" >> $SSH_CONFIG
|
||||
echo "ListenAddress 0.0.0.0" >> $SSH_CONFIG
|
||||
echo "PasswordAuthentication yes" >> $SSH_CONFIG
|
||||
echo "PermitEmptyPasswords no" >> $SSH_CONFIG
|
||||
echo "ChallengeResponseAuthentication no" >> $SSH_CONFIG
|
||||
echo "UsePAM yes" >> $SSH_CONFIG
|
||||
echo "X11Forwarding no" >> $SSH_CONFIG
|
||||
echo "PrintMotd no" >> $SSH_CONFIG
|
||||
echo "AcceptEnv LANG LC_*" >> $SSH_CONFIG
|
||||
echo -e "Subsystem\tsftp\t/usr/lib/openssh/sftp-server" >> $SSH_CONFIG
|
||||
BIN
firewalld.docx
Normal file
BIN
firewalld.docx
Normal file
Binary file not shown.
BIN
Программа курса Администрирование CetOS.pdf
Normal file
BIN
Программа курса Администрирование CetOS.pdf
Normal file
Binary file not shown.
BIN
топология.jpg
Normal file
BIN
топология.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 166 KiB |
Loading…
x
Reference in New Issue
Block a user