Personal tools

Difference between revisions of "VmMrtSrv08 FTP"

From MohidWiki

Jump to: navigation, search
(Configuration)
Line 3: Line 3:
 
= Creation =
 
= Creation =
 
From the '''maretec''' user at the MrtXnSrv, '''192.168.20.125''' with putty was created a virtual machine to handle FTP site:
 
From the '''maretec''' user at the MrtXnSrv, '''192.168.20.125''' with putty was created a virtual machine to handle FTP site:
 +
  
 
==Mounted a ISO==
 
==Mounted a ISO==
Line 9: Line 10:
 
ex: sudo /bin/mount -t cifs -o [credentials] [Folder Origin location] [Folder Destination location]
 
ex: sudo /bin/mount -t cifs -o [credentials] [Folder Origin location] [Folder Destination location]
 
  >sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO
 
  >sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO
 +
  
 
==Created a new Logical Volume (LV) ==
 
==Created a new Logical Volume (LV) ==
Line 15: Line 17:
 
ex: sudo /sbin/lvcreate -n [Name of LV] -L [size of LV] [Volume group where LV will be]
 
ex: sudo /sbin/lvcreate -n [Name of LV] -L [size of LV] [Volume group where LV will be]
 
  >sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01
 
  >sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01
 +
  
 
==Created a new config file==
 
==Created a new config file==
Line 20: Line 23:
 
*[[VmMrtSrv08_1|vmmrtsrv08_1.cfg]]
 
*[[VmMrtSrv08_1|vmmrtsrv08_1.cfg]]
 
It was used command vi to edit the file
 
It was used command vi to edit the file
 +
  
 
==Created the Virtual Machine (VM) and started it ==
 
==Created the Virtual Machine (VM) and started it ==
Line 42: Line 46:
 
  VMMRTSRV07_EINSTEIN                        88  1024    2    -b----  14978.5
 
  VMMRTSRV07_EINSTEIN                        88  1024    2    -b----  14978.5
 
  VMMRTSRV08_FTP                              92  1024    2    -b----    119.9
 
  VMMRTSRV08_FTP                              92  1024    2    -b----    119.9
 +
  
 
==Checked port for VNC connection==
 
==Checked port for VNC connection==
Line 47: Line 52:
 
  >sudo /usr/sbin/xm list -l VMMRTSRV08_FTP
 
  >sudo /usr/sbin/xm list -l VMMRTSRV08_FTP
 
  see in location localhost: 5904
 
  see in location localhost: 5904
 +
  
 
= Configuration =
 
= Configuration =
 
The VM was first installed the OS and then configured.
 
The VM was first installed the OS and then configured.
 +
  
 
==Accessed the domain via a console with VNC==
 
==Accessed the domain via a console with VNC==
 
Access the domain with a [[VNC]] client, such as <goto>TightVNC</goto>. The domain console access port with VNC is '''192.168.20.125:5904'''.  
 
Access the domain with a [[VNC]] client, such as <goto>TightVNC</goto>. The domain console access port with VNC is '''192.168.20.125:5904'''.  
 +
  
 
==OS Installation - in the console==
 
==OS Installation - in the console==
Line 61: Line 69:
  
 
This was made in the installation and caused some problems.
 
This was made in the installation and caused some problems.
 +
  
 
==IP changed - in the console==
 
==IP changed - in the console==
Line 74: Line 83:
  
 
'''Attention this step was not necessary because the machine was to be added to the DMZ'''
 
'''Attention this step was not necessary because the machine was to be added to the DMZ'''
 +
  
 
==Changed the bridging between the LAN and the DMZ==
 
==Changed the bridging between the LAN and the DMZ==
 +
  
 
===Switching from LAN(eth0) to DMZ(eth1) - in the Xen Server===
 
===Switching from LAN(eth0) to DMZ(eth1) - in the Xen Server===
Line 89: Line 100:
 
  > sudo /usr/sbin/xm new -F VMMRTSRV08_2.cfg                                                            (create new machine)
 
  > sudo /usr/sbin/xm new -F VMMRTSRV08_2.cfg                                                            (create new machine)
 
  > sudo /usr/sbin/xm start VMMRTSRV08_FTP                                                              (start new machine)
 
  > sudo /usr/sbin/xm start VMMRTSRV08_FTP                                                              (start new machine)
 +
  
 
===IP change - in the console ===
 
===IP change - in the console ===
Line 100: Line 112:
  
 
Allow Remote Desktop in FireWall Settings
 
Allow Remote Desktop in FireWall Settings
 +
  
 
===Open Ports===
 
===Open Ports===
 
Finally, you need to ask Marco Reis from [[Conexa]] to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (''reverse tunneling'', ''height port'').
 
Finally, you need to ask Marco Reis from [[Conexa]] to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (''reverse tunneling'', ''height port'').
 
You might as well ask also to open up '''ports 21, 20, 80, 443 and 8080'''.
 
You might as well ask also to open up '''ports 21, 20, 80, 443 and 8080'''.
 +
  
 
==FTP configuration==
 
==FTP configuration==

Revision as of 20:54, 13 January 2010

This was a Virtual Machine creation in Xen Server with Windows 2008 Server OS

Creation

From the maretec user at the MrtXnSrv, 192.168.20.125 with putty was created a virtual machine to handle FTP site:


Mounted a ISO

First mounted the Windows OS folder from kepler (192.168.20.131) so that can be used for virtual machine OS install (Windows 2008 Server):

ex: sudo /bin/mount -t cifs -o [credentials] [Folder Origin location] [Folder Destination location]

>sudo /bin/mount -t cifs -o username=Administrator,password=XXXXX,workspace=MARETEC //192.168.20.131/Software/Windows_2008_Server_32bits /home/maretec/mnt/ISO


Created a new Logical Volume (LV)

It was created a LV with 200GB (50 for OS).

ex: sudo /sbin/lvcreate -n [Name of LV] -L [size of LV] [Volume group where LV will be]

>sudo /sbin/lvcreate -n vmmrtsrv08_FTP -L 200GB dados01


Created a new config file

It was created a config file based on vmmrtsrv06-1.0.cfg and adapted to ISO file and LV created.

It was used command vi to edit the file


Created the Virtual Machine (VM) and started it

in /home/maretec/xen_configs the config file was used to create the VM

>sudo /usr/sbin/xm new -F VMMRTSRV08_1.cfg
>sudo /usr/sbin/xm list
Name                                        ID   Mem VCPUs      State   Time(s)
VMMRTSRV02                                  87  1024     1     r----- 111349.5
VMMRTSRV04                                  89  1024     2     -b----     91.5
VMMRTSRV06                                  85  1024     2     -b----   2483.9
VMMRTSRV07_EINSTEIN                         88  1024     2     -b----  14978.5
VMMRTSRV08_FTP                              92  1024     2         


>sudo /usr/sbin/xm start vmmrtsrv08_FTP
>sudo /usr/sbin/xm list
Name                                        ID   Mem VCPUs      State   Time(s)
Domain-0                                     0  2048     2     r----- 749124.7
VMMRTSRV02                                  87  1024     1     r----- 111349.5
VMMRTSRV04                                  89  1024     2     -b----     91.5
VMMRTSRV06                                  85  1024     2     -b----   2483.9
VMMRTSRV07_EINSTEIN                         88  1024     2     -b----  14978.5
VMMRTSRV08_FTP                              92  1024     2     -b----    119.9


Checked port for VNC connection

>sudo /usr/sbin/xm list -l VMMRTSRV08_FTP
see in location localhost: 5904


Configuration

The VM was first installed the OS and then configured.


Accessed the domain via a console with VNC

Access the domain with a VNC client, such as <goto>TightVNC</goto>. The domain console access port with VNC is 192.168.20.125:5904.


OS Installation - in the console

See instructions in How to Install Windows on a new machine These steps include windows updates, antivirus installation, format of non system partition, enable remote desktop.

Attention - do not add the machine to the MARETEC domain!!! As this machine was to be in the DMZ, adding to the maretec domain may cause problems to the domain administrator

This was made in the installation and caused some problems.


IP changed - in the console

Attention this step was not necessary because the machine was to be added to the DMZ IP changed to fixed IP: IP:192.168.20.40

SubNet Mask  : 255.255.255.0

Default Gateway  : 192.168.20.1

Preferred DNS Server: 192.168.20.1

Attention this step was not necessary because the machine was to be added to the DMZ


Changed the bridging between the LAN and the DMZ

Switching from LAN(eth0) to DMZ(eth1) - in the Xen Server

> sudo /usr/sbin/xm shutdown VMMRTSRV08_FTP                                                            (shutdown machine - appears in xm list)
> sudo /usr/sbin/xm list -l VMMRTSRV08_FTP > xen_configs/VMMRTSRV08_1.cfg                              (see actual config)
> sudo /usr/sbin/xm delete VMMRTSRV08_FTP                                                              (delete machine - does not appear in xm list)
> cp xen_configs/VMMRTSRV08_1.cfg xen_configs/VMMRTSRV08_2.cfg                                         (create new config - 2)
> vim xen_configs/VMMRTSRV08_2.cfg                                                                     (start edit config - 2)
08_2.cfg> (bridge eth1) [click insert twice to replace 0 with 1]
08_2.cfg> :w (to write file)
08_2.cfg> ZZ (to save and exit)
> cd /xen_configs                                                                                      (go to config dir)
> sudo /usr/sbin/xm new -F VMMRTSRV08_2.cfg                                                            (create new machine)
> sudo /usr/sbin/xm start VMMRTSRV08_FTP                                                               (start new machine)


IP change - in the console

Then, use TighVNC to enter the domain through console access as ???user???:

  • Network And Sharing Center--> Local Area Connection (view status) --> Properties --> TCP/IPv4
  • Static ip-->192.168.21.30
  • Subnet mask-->255.255.255.0
  • Gateway--> 192.168.21.1
  • Save.


Allow Remote Desktop in FireWall Settings


Open Ports

Finally, you need to ask Marco Reis from Conexa to configure the router firewall so it links the ports between the LAN firewall and the DMZ firewall (reverse tunneling, height port). You might as well ask also to open up ports 21, 20, 80, 443 and 8080.


FTP configuration

See Also

Mount