Personal tools

Difference between revisions of "Creating a FTPServer in VMWare"

From MohidWiki

Jump to: navigation, search
(FTP implementation)
(Configure VM in Server 2008 console)
Line 29: Line 29:
 
Shared this folders with autheticated users for full control
 
Shared this folders with autheticated users for full control
  
===Install FTP Publishing===
+
===Add Service Roles in Server Managementg===
 
# In Server Manager ->Roles->Add Role->Web Server (IIS)->click Next until select FTP Publishing Service->Until Finish
 
# In Server Manager ->Roles->Add Role->Web Server (IIS)->click Next until select FTP Publishing Service->Until Finish
 
# IIS->ClickFTPServer2->RightClick Sites->Add FTPSite
 
# IIS->ClickFTPServer2->RightClick Sites->Add FTPSite
# If in last step Add FTP Site option not available, Install latest FTP publishing service (7.5 at the time) from \\davinci\Software\FTP7_ForIIS_x86 or in http://www.iis.net/download/FTP
+
# If in last step Add FTP Site option not available (Server2008 st), Install latest FTP publishing service (7.5 at the time) from \\davinci\Software\FTP7_ForIIS_x86 or in http://www.iis.net/download/FTP
 +
#Add IIS service role i) under Management Tools "II6 Management compatibility", and ii) under Security "Basic Security" and "Digest Security" (?? saw in old Ftpserver machine) and iii) FTP Publishing service
  
 
===FTP implementation===
 
===FTP implementation===
  
 
====User Accounts====
 
====User Accounts====
 
+
In Computer Management->User and Groups: add FTP users group and add each ftp user with this options
 
+
- General - "user cannot change password" and "password never expires"
 
+
- Member - of "Users" and "FTP users" (the latter only for n)ot maretec users)
 +
- Remote - "Enable Remote Control" and "Require user's session"
 +
Users:
 +
(agro727, anatrancoso, aquapath, clabsa, davidbrito, easy, easyco, estorilcoast, francisco, guillaume, hidromod, jauch, luisfernandes, meteoIST, mmateus, partner,  pedrochambel, rodrigo, user)
 +
Define users passwords with the users
  
 
====IIS====
 
====IIS====
Line 63: Line 68:
  
  
 
+
====Other====
 
+
'''Check Firewall'''
 
+
#Check that Firewall has FTP server selected
see with Rodrigo
+
#In DC (copernico) ftp2.mohid.com needs to be added (IP)
  
 
==Changing the bridging between the LAN and the DMZ==
 
==Changing the bridging between the LAN and the DMZ==

Revision as of 13:10, 3 March 2012

Create VM in VMWare vSphere

1GB RAM
350GB and no partitions to be easier migration (Marco Reis advice in Xen FTPServer)
Windows Server 2008 standard (no need for datacenter edition if not using more than 8 processors and 64bit - Marco Reis advice in Xen FTPServer)
1 CPU

To Install guest OS, edit VM settings, add the Windows ISO to DVD drive and select "connect at power on" so that the drive launches the installation disk. And Start the VM.

Installed VMTools from vSphere: Inventory->Virtual Machine->Guest->Install/Upgrade VM Tools

Configure VM in Server 2008 console

Change Computer Name

Change computer name to FTPServer2

Update Windows

Run Windows Server 2008 sp2 from \\davinci\Software and run updates untill there are no more updates.

Activate Windows

Under Computer->Right.click->Properties->Activate and give windows key.

Install Antivirus

Install Antivirus from \\davinci\Software and schedule scans and automatic updates. In server needs F-Secure for servers.

Copy Folders and Share

Install Second Copy from \\davinci\Software and copy from ftpserver to the VM c:\WebData

ftp.mohid.com
FileRecipient

Shared this folders with autheticated users for full control

Add Service Roles in Server Managementg

  1. In Server Manager ->Roles->Add Role->Web Server (IIS)->click Next until select FTP Publishing Service->Until Finish
  2. IIS->ClickFTPServer2->RightClick Sites->Add FTPSite
  3. If in last step Add FTP Site option not available (Server2008 st), Install latest FTP publishing service (7.5 at the time) from \\davinci\Software\FTP7_ForIIS_x86 or in http://www.iis.net/download/FTP
  4. Add IIS service role i) under Management Tools "II6 Management compatibility", and ii) under Security "Basic Security" and "Digest Security" (?? saw in old Ftpserver machine) and iii) FTP Publishing service

FTP implementation

User Accounts

In Computer Management->User and Groups: add FTP users group and add each ftp user with this options - General - "user cannot change password" and "password never expires" - Member - of "Users" and "FTP users" (the latter only for n)ot maretec users) - Remote - "Enable Remote Control" and "Require user's session" Users: (agro727, anatrancoso, aquapath, clabsa, davidbrito, easy, easyco, estorilcoast, francisco, guillaume, hidromod, jauch, luisfernandes, meteoIST, mmateus, partner, pedrochambel, rodrigo, user) Define users passwords with the users

IIS

Add FTPSite

  1. Name: ftp2.mohid.com
  2. Path: C:\WebData\ftp-mohid.com
  3. Next
  4. IP: MachineIP
  5. SSL: Allow SSL
  6. Next
  7. Authentication: Basic and Anonymous
  8. Done

FTP authorization

  1. Add a allow rule for all users, read and write

FTP user isolation

  1. Select in isolate user radio button "user name physical directory"

Virtual Directories

  1. Add 4 virtual directories from each FileRecipient folder (Ecomanage, Estorilcoast, Sigel and To_WEServer)
  2. Under each private folder define permissions for the effective users


Other

Check Firewall

  1. Check that Firewall has FTP server selected
  2. In DC (copernico) ftp2.mohid.com needs to be added (IP)

Changing the bridging between the LAN and the DMZ

Create New Network Adapter

  • In vSphere add a new network adapter (virtual machine) in the host (the physical machine should have a second physical network adapter).
  • After created new network adapter, edit the vSwithc created and add a new vKernel and define the IP's for the host
  • Static ip-->192.168.21.xx 'xx it was used 15
  • Subnet mask-->255.255.255.0
  • Gateway--> 192.168.21.1
  • In the VM configuration add a new ethernet adpater and choose the second virtual adapter just created.
  • The machine will have now available two virtual network adapters

Switching from LAN to DMZ

  • Connect the network cable from a DMZ exit to the second host physical network port

Edit the second network connection:

  • Static ip-->192.168.21.xx 'xx it was used 35
  • Subnet mask-->255.255.255.0
  • Gateway--> 192.168.21.1
  • DNSserver 192.168.20.10
  • Disconnect the LAN
  • Add in copernico the new IP and name to DNS list


Links

Go Back to VMWare

Xen FTPserver Configuration