VirtualBox and GNS3 (Smoothwall Virtual Test Labs)
|
GNS3 Test Labs (Smoothwall Labs):
Lab Scenarios:
(Please add more Lab scenarios that you think could be useful)
1. Cisco IOS Router (7200 series) with NATTing connected to the internet (ACLs configured for specific subnets being used behind the Smoothwall). 2. Smoothwall UTM Master and Failover with Multiple External connections (Primary/Secondary) to test HA and LLB 3. Apache Server on an internal Windows 7 machine to test port-forwarding rules from the internet facing VM. 4. VLANs using NM-16ESW (3725 series router network module) trunk linked to the Smoothwall (VLANs 10, 20 and 1) 5. Child node (bridged) for a Windows 7 machine getting replication from a parent node. 6. Windows 7 machine externally connected to the UTM (between the external router and the Master UTM ) to test L2TP, SSL VPNs, Global Proxy, Mobile Proxy and Syslog server. 7. Solarwinds Real-time SNMP bandwidth monitoring tool for testing SNMP. 8. Hardware WAP (TPLink) connected to virtual switch (NM-16ESW 3725 series) configured with RADIUS (802.1x//WPA Enterprise/BYOD) to test iOS (iPads and iPhones) or android devices (Installed Openwrt firmware on my TPLink that supports not only authentication but also accounting i.e. ports 1812 and 1813)(Smoothwall configured as a DHCP Server)(Will try to find a WAP that support framed IPs to test further RADIUS scenarios) 9. Using two Windows 2012 VMs for testing multi domains AD connection on the Smoothwall. 10. Other VMs include Win 7, Win 8, Win 10, Ubuntu, Mac OS X and Chromium. 11. Wireshark is already integrated in GNS3 and you can capture traffic on any connected links for troubleshooting. 12. Separate lab for testing IPSec VPN connectivity between two Smoothwalls or Smoothwall and ASA. 13. It will be easier with VMs on GNS3 to test further features like IDS/IPS, Upstream Proxy, Bandwidth Management (You might notice some latency), Upstream Firewall, F5 Load Balancer VMs.
14. For Cisco devices you can also use CCP (Cisco Configuration Professional) software to configure using a wizard based GUI instead of CLI.
|
Install GNS3 1.3.0 on Ubuntu 14.10 and 14.04 LTS :
— GNS3 CLI installation —
– After opening a terminal, I recommend changing to your user home directory.
$ cd ~
– Run apt-get update
$ sudo apt-get update
$ sudo apt-get upgrade
$ sudo apt-get dist-upgrade
– Install GNS3 Python dependencies
$ sudo apt‐get install python3‐setuptools
$ sudo apt‐get install python3‐pyqt4
$ sudo apt‐get install python3‐ws4py
$ sudo apt‐get install python3‐netifaces
– Install Dynmips dependencies
$ sudo apt-get install cmake
$ sudo apt‐get install libelf‐dev
$ sudo apt‐get install uuid‐dev
$ sudo apt‐get install libpcap‐dev
– Download and unzip GNS3 Linux source files (Download )
$ unzip GNS3-1.3.7-source.zip
dynamips-0.2.14.zip gns3-server-1.3.7.zip vpcs-0.6.zip
gns3-gui-1.3.7.zip
– Build and Install Dynamips
$ unzip dynamips-0.2.14.zip
$ cd dynamips-0.2.14
$ mkdir build
$ cd build
$ cmake ..
$ make
$ sudo make install
$ sudo setcap cap_net_admin,cap_net_raw=ep /usr/local/bin/dynamips
$ cd ../..
– Install GNS3 Server
$ unzip gns3-server-1.3.7.zip
$ cd gns3-server-1.3.7
$ sudo python3 setup.py install
$ cd ..
– Install GNS3 GUI
$ unzip gns3-gui-1.3.7.zip
$ cd gns3-gui-1.3.7
$ sudo python3 setup.py install
$ cd ..
– Install VPCS
$ unzip vpcs-0.6.zip
$ cd vpcs-0.6/src
$ ./mk.sh
$ sudo cp vpcs /usr/local/bin/
$ cd ../..
– Install VirtualBox
$ sudo apt-get install virtualbox
– Install Wireshark
$ sudo apt-get install wireshark
– Install QEMU – method 1
$ sudo apt-get install qemu
– Install QEMU – method 2 (x86 arch. only)
$ sudo apt-get install qemu-system-x86
$ sudo apt-get install qemu-utils
– Install cpulimit
$ sudo apt-get install cpulimit
– Start GNS3
$ gns3
Network and CyberSecurity Professional 