Difference between revisions of "VmMrtSrv08 FTP"
From MohidWiki
Davidbrito (talk | contribs) (→Changing the bridging between the LAN and the DMZ) |
Davidbrito (talk | contribs) |
||
| Line 1: | Line 1: | ||
| − | |||
This was a Virtual Machine creation in [[Xen]] Server with Windows 2008 Server OS | This was a Virtual Machine creation in [[Xen]] Server with Windows 2008 Server OS | ||
| − | + | = Creation = | |
From the '''maretec''' user at the MrtXnSrv, '''192.168.20.125''' with putty was created a virtual machine to handle FTP site: | From the '''maretec''' user at the MrtXnSrv, '''192.168.20.125''' with putty was created a virtual machine to handle FTP site: | ||
| − | + | ==Mounted a ISO== | |
First mounted the Windows OS folder from kepler (192.168.20.131) so that can be used for virtual machine OS install (Windows 2008 Server): | First mounted the Windows OS folder from kepler (192.168.20.131) so that can be used for virtual machine OS install (Windows 2008 Server): | ||
| Line 11: | Line 10: | ||
>sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO | >sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO | ||
| − | + | ==Created a new Logical Volume (LV) == | |
It was created a LV with 200GB (50 for OS). | It was created a LV with 200GB (50 for OS). | ||
| Line 17: | Line 16: | ||
>sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01 | >sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01 | ||
| − | + | ==Created a new config file== | |
It was created a config file based on [[VmMrtSrv06-1.0|vmmrtsrv06-1.0.cfg]] and adapted to ISO file and LV created. | It was created a config file based on [[VmMrtSrv06-1.0|vmmrtsrv06-1.0.cfg]] and adapted to ISO file and LV created. | ||
*[[VmMrtSrv08_1|vmmrtsrv08_1.cfg]] | *[[VmMrtSrv08_1|vmmrtsrv08_1.cfg]] | ||
It was used command vi to edit the file | It was used command vi to edit the file | ||
| − | + | ==Created the Virtual Machine (VM) and started it == | |
in /home/maretec/xen_configs the config file was used to create the VM | in /home/maretec/xen_configs the config file was used to create the VM | ||
>sudo /usr/sbin/xm new -F VMMRTSRV08_1.cfg | >sudo /usr/sbin/xm new -F VMMRTSRV08_1.cfg | ||
| Line 44: | Line 43: | ||
VMMRTSRV08_FTP 92 1024 2 -b---- 119.9 | VMMRTSRV08_FTP 92 1024 2 -b---- 119.9 | ||
| − | + | ==Checked port for VNC connection== | |
>sudo /usr/sbin/xm list -l VMMRTSRV08_FTP | >sudo /usr/sbin/xm list -l VMMRTSRV08_FTP | ||
see in location localhost: 5904 | see in location localhost: 5904 | ||
| − | + | = Configuration = | |
The VM was first installed the OS and then configured. | The VM was first installed the OS and then configured. | ||
===Accessed the domain via a console with VNC=== | ===Accessed the domain via a console with VNC=== | ||
Access the domain with a [[VNC]] client, such as <goto>TightVNC</goto>. The domain console access port with VNC is '''192.168.20.125:5904'''. | Access the domain with a [[VNC]] client, such as <goto>TightVNC</goto>. The domain console access port with VNC is '''192.168.20.125:5904'''. | ||
| − | + | ==OS Installation - in the console== | |
See instructions in [[How_to_Install_Windows_on_a_new_computer|How to Install Windows on a new machine]] | See instructions in [[How_to_Install_Windows_on_a_new_computer|How to Install Windows on a new machine]] | ||
These steps include windows updates, antivirus installation, format of non system partition, enable remote desktop. | These steps include windows updates, antivirus installation, format of non system partition, enable remote desktop. | ||
| Line 62: | Line 61: | ||
This was made in the installation and caused some problems. | This was made in the installation and caused some problems. | ||
| − | + | ==IP changed - in the console== | |
'''Attention this step was not necessary because the machine was to be added to the DMZ''' | '''Attention this step was not necessary because the machine was to be added to the DMZ''' | ||
IP changed to fixed IP: | IP changed to fixed IP: | ||
| Line 75: | Line 74: | ||
'''Attention this step was not necessary because the machine was to be added to the DMZ''' | '''Attention this step was not necessary because the machine was to be added to the DMZ''' | ||
| − | + | ==Changed the bridging between the LAN and the DMZ== | |
| − | + | ===Switching from LAN(eth0) to DMZ(eth1) - in the Xen Server=== | |
> sudo /usr/sbin/xm shutdown VMMRTSRV08_FTP (shutdown machine - appears in xm list) | > sudo /usr/sbin/xm shutdown VMMRTSRV08_FTP (shutdown machine - appears in xm list) | ||
> sudo /usr/sbin/xm list -l VMMRTSRV08_FTP > xen_configs/VMMRTSRV08_1.cfg (see actual config) | > sudo /usr/sbin/xm list -l VMMRTSRV08_FTP > xen_configs/VMMRTSRV08_1.cfg (see actual config) | ||
| Line 90: | Line 89: | ||
> sudo /usr/sbin/xm start VMMRTSRV08_FTP (start new machine) | > sudo /usr/sbin/xm start VMMRTSRV08_FTP (start new machine) | ||
| − | + | ===IP change - in the console === | |
Then, use [[TighVNC]] to enter the domain through console access as '''???user???''': | Then, use [[TighVNC]] to enter the domain through console access as '''???user???''': | ||
*Network And Sharing Center--> Local Area Connection (view status) --> Properties --> TCP/IPv4 | *Network And Sharing Center--> Local Area Connection (view status) --> Properties --> TCP/IPv4 | ||
| Line 101: | Line 100: | ||
Allow Remote Desktop in FireWall Settings | Allow Remote Desktop in FireWall Settings | ||
| − | + | ===Open Ports=== | |
Finally, you need to ask Marco Reis from [[Conexa]] to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (''reverse tunneling'', ''height port''). | Finally, you need to ask Marco Reis from [[Conexa]] to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (''reverse tunneling'', ''height port''). | ||
You might as well ask also to open up '''ports 21, 20, 80, 443 and 8080'''. | You might as well ask also to open up '''ports 21, 20, 80, 443 and 8080'''. | ||
| − | + | ==FTP configuration== | |
| − | + | =See Also= | |
[[Mount]] | [[Mount]] | ||
Revision as of 20:51, 13 January 2010
This was a Virtual Machine creation in Xen Server with Windows 2008 Server OS
Contents
Creation
From the maretec user at the MrtXnSrv, 192.168.20.125 with putty was created a virtual machine to handle FTP site:
Mounted a ISO
First mounted the Windows OS folder from kepler (192.168.20.131) so that can be used for virtual machine OS install (Windows 2008 Server):
ex: sudo /bin/mount -t cifs -o [credentials] [Folder Origin location] [Folder Destination location]
>sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO
Created a new Logical Volume (LV)
It was created a LV with 200GB (50 for OS).
ex: sudo /sbin/lvcreate -n [Name of LV] -L [size of LV] [Volume group where LV will be]
>sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01
Created a new config file
It was created a config file based on vmmrtsrv06-1.0.cfg and adapted to ISO file and LV created.
It was used command vi to edit the file
Created the Virtual Machine (VM) and started it
in /home/maretec/xen_configs the config file was used to create the VM
>sudo /usr/sbin/xm new -F VMMRTSRV08_1.cfg >sudo /usr/sbin/xm list Name ID Mem VCPUs State Time(s) VMMRTSRV02 87 1024 1 r----- 111349.5 VMMRTSRV04 89 1024 2 -b---- 91.5 VMMRTSRV06 85 1024 2 -b---- 2483.9 VMMRTSRV07_EINSTEIN 88 1024 2 -b---- 14978.5 VMMRTSRV08_FTP 92 1024 2
>sudo /usr/sbin/xm start vmmrtsrv08_FTP >sudo /usr/sbin/xm list Name ID Mem VCPUs State Time(s) Domain-0 0 2048 2 r----- 749124.7 VMMRTSRV02 87 1024 1 r----- 111349.5 VMMRTSRV04 89 1024 2 -b---- 91.5 VMMRTSRV06 85 1024 2 -b---- 2483.9 VMMRTSRV07_EINSTEIN 88 1024 2 -b---- 14978.5 VMMRTSRV08_FTP 92 1024 2 -b---- 119.9
Checked port for VNC connection
>sudo /usr/sbin/xm list -l VMMRTSRV08_FTP see in location localhost: 5904
Configuration
The VM was first installed the OS and then configured.
Accessed the domain via a console with VNC
Access the domain with a VNC client, such as <goto>TightVNC</goto>. The domain console access port with VNC is 192.168.20.125:5904.
OS Installation - in the console
See instructions in How to Install Windows on a new machine These steps include windows updates, antivirus installation, format of non system partition, enable remote desktop.
Attention - do not add the machine to the MARETEC domain!!! As this machine was to be in the DMZ, adding to the maretec domain may cause problems to the domain administrator
This was made in the installation and caused some problems.
IP changed - in the console
Attention this step was not necessary because the machine was to be added to the DMZ IP changed to fixed IP: IP:192.168.20.40
SubNet Mask : 255.255.255.0
Default Gateway : 192.168.20.1
Preferred DNS Server: 192.168.20.1
Attention this step was not necessary because the machine was to be added to the DMZ
Changed the bridging between the LAN and the DMZ
Switching from LAN(eth0) to DMZ(eth1) - in the Xen Server
> sudo /usr/sbin/xm shutdown VMMRTSRV08_FTP (shutdown machine - appears in xm list) > sudo /usr/sbin/xm list -l VMMRTSRV08_FTP > xen_configs/VMMRTSRV08_1.cfg (see actual config) > sudo /usr/sbin/xm delete VMMRTSRV08_FTP (delete machine - does not appear in xm list) > cp xen_configs/VMMRTSRV08_1.cfg xen_configs/VMMRTSRV08_2.cfg (create new config - 2) > vim xen_configs/VMMRTSRV08_2.cfg (start edit config - 2) 08_2.cfg> (bridge eth1) [click insert twice to replace 0 with 1] 08_2.cfg> :w (to write file) 08_2.cfg> ZZ (to save and exit) > cd /xen_configs (go to config dir) > sudo /usr/sbin/xm new -F VMMRTSRV08_2.cfg (create new machine) > sudo /usr/sbin/xm start VMMRTSRV08_FTP (start new machine)
IP change - in the console
Then, use TighVNC to enter the domain through console access as ???user???:
- Network And Sharing Center--> Local Area Connection (view status) --> Properties --> TCP/IPv4
- Static ip-->192.168.21.30
- Subnet mask-->255.255.255.0
- Gateway--> 192.168.21.1
- Save.
Allow Remote Desktop in FireWall Settings
Open Ports
Finally, you need to ask Marco Reis from Conexa to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (reverse tunneling, height port). You might as well ask also to open up ports 21, 20, 80, 443 and 8080.
