1 1 00:00:00,180 --> 00:00:01,700 So in this section of the course, 2 2 00:00:01,700 --> 00:00:04,910 we've talked a lot about virtualization in the cloud. 3 3 00:00:04,910 --> 00:00:06,400 And you may be wondering, 4 4 00:00:06,400 --> 00:00:09,380 why do I really care here in Network+? 5 5 00:00:09,380 --> 00:00:11,240 Because as a network technician, 6 6 00:00:11,240 --> 00:00:12,210 we're not really going to be doing 7 7 00:00:12,210 --> 00:00:14,800 a lot of cloud or virtualization, right? 8 8 00:00:14,800 --> 00:00:17,519 Well, that's true, but there is some things 9 9 00:00:17,519 --> 00:00:19,310 you just want to be comfortable with 10 10 00:00:19,310 --> 00:00:22,730 because we keep moving more and more into virtualization 11 11 00:00:22,730 --> 00:00:24,710 and more and more into the cloud. 12 12 00:00:24,710 --> 00:00:29,120 So, in this lesson, I want to show you a tool called GNS3. 13 13 00:00:29,120 --> 00:00:32,560 Now, this tool is a virtualized networking environment 14 14 00:00:32,560 --> 00:00:35,487 and it allows you to connect different virtual machines 15 15 00:00:35,487 --> 00:00:39,100 or even physical machines together using this tool. 16 16 00:00:39,100 --> 00:00:41,740 Now, you don't need to be an expert on this tool. 17 17 00:00:41,740 --> 00:00:44,050 I'm just showing you that the tool exists 18 18 00:00:44,050 --> 00:00:46,540 and some of the things you can do with the tool. 19 19 00:00:46,540 --> 00:00:50,720 For the Network+ Exam, no one is going to ask you about GNS3. 20 20 00:00:50,720 --> 00:00:52,370 It's not on the objectives. 21 21 00:00:52,370 --> 00:00:54,930 This is just for you to get a little bit of experience 22 22 00:00:54,930 --> 00:00:56,170 to see how it works, 23 23 00:00:56,170 --> 00:00:59,580 and if it interests you, you can go to gns3.com, 24 24 00:00:59,580 --> 00:01:01,150 download the tool for free, 25 25 00:01:01,150 --> 00:01:03,940 and start playing with it and using their tutorials. 26 26 00:01:03,940 --> 00:01:07,470 So, let's jump onto the computer and take a look at GNS3. 27 27 00:01:07,470 --> 00:01:10,757 All right, so here we are inside of GNS3. 28 28 00:01:10,757 --> 00:01:14,340 Now, you'll notice at the center of my screen is a router. 29 29 00:01:14,340 --> 00:01:16,837 This is actually a VyOS router, 30 30 00:01:16,837 --> 00:01:19,530 and I can go in and configure this router 31 31 00:01:19,530 --> 00:01:21,396 as if it was a physical device. 32 32 00:01:21,396 --> 00:01:24,180 Everything you see here on my screen right now 33 33 00:01:24,180 --> 00:01:25,478 are virtual devices. 34 34 00:01:25,478 --> 00:01:27,270 Over on the left side of the screen, 35 35 00:01:27,270 --> 00:01:30,637 I have Firefox, Kali Linux, and a Network Defense Appliance. 36 36 00:01:30,637 --> 00:01:35,450 All of those are virtual machines that exist within GNS3. 37 37 00:01:35,450 --> 00:01:37,520 They're just a piece of software. 38 38 00:01:37,520 --> 00:01:38,840 Then, I have these switches, 39 39 00:01:38,840 --> 00:01:41,814 the Network Outside and the DMZ Switch. 40 40 00:01:41,814 --> 00:01:44,150 Both of those are virtual devices 41 41 00:01:44,150 --> 00:01:47,280 that are emulating a real piece of hardware 42 42 00:01:47,280 --> 00:01:48,880 that would normally be something that would cost you 43 43 00:01:48,880 --> 00:01:51,030 hundreds or thousands of dollars. 44 44 00:01:51,030 --> 00:01:54,540 And here in GNS3, you get to use them for free. 45 45 00:01:54,540 --> 00:01:56,640 The same thing with the router here in the center. 46 46 00:01:56,640 --> 00:01:58,480 It's connecting my two networks, 47 47 00:01:58,480 --> 00:02:00,657 my Outside Network and my DMZ. 48 48 00:02:00,657 --> 00:02:03,376 And then in my DMZ, I have a Snort machine, 49 49 00:02:03,376 --> 00:02:05,526 a LAMP, which is a web server, 50 50 00:02:05,526 --> 00:02:09,730 Metasploitable2, which has a web server, an SSH server. 51 51 00:02:09,730 --> 00:02:11,927 It has an FTP server, a Send Mail server, 52 52 00:02:11,927 --> 00:02:13,640 and all sorts of other stuff, 53 53 00:02:13,640 --> 00:02:15,720 and then DVWA, which, again, 54 54 00:02:15,720 --> 00:02:18,082 is another vulnerable web application. 55 55 00:02:18,082 --> 00:02:22,010 This particular lab is one I use in my PenTest+ course. 56 56 00:02:22,010 --> 00:02:25,140 But I just want to pull it up here to show you how it works. 57 57 00:02:25,140 --> 00:02:26,720 So, what I'm going to do is show you 58 58 00:02:26,720 --> 00:02:29,020 that we can actually go into this router 59 59 00:02:29,020 --> 00:02:31,040 and we can run configurations on it, 60 60 00:02:31,040 --> 00:02:34,380 just as if we were doing it on a real piece of hardware. 61 61 00:02:34,380 --> 00:02:35,660 The great thing about this 62 62 00:02:35,660 --> 00:02:37,350 is if you really want to get in depth 63 63 00:02:37,350 --> 00:02:39,610 and practice your on-the-job skills, 64 64 00:02:39,610 --> 00:02:42,730 you can download GNS3, load up some routers, 65 65 00:02:42,730 --> 00:02:45,659 connect them together, and make your own virtual network. 66 66 00:02:45,659 --> 00:02:47,170 To access the router, 67 67 00:02:47,170 --> 00:02:49,489 you just right-click on it and go to Console. 68 68 00:02:49,489 --> 00:02:51,410 This will launch the Console, 69 69 00:02:51,410 --> 00:02:53,790 which is a terminal for you to configure the router. 70 70 00:02:53,790 --> 00:02:55,930 So, here we are at the prompt, 71 71 00:02:55,930 --> 00:02:58,030 and it's going to say Welcome to VyOs, 72 72 00:02:58,030 --> 00:03:01,028 which is the operating system that runs this virtual router. 73 73 00:03:01,028 --> 00:03:03,570 For me to be able to use it, I need to log in, 74 74 00:03:03,570 --> 00:03:07,718 and the default is vyos, and the password is vyos. 75 75 00:03:07,718 --> 00:03:09,670 Now, once I'm logged in, 76 76 00:03:09,670 --> 00:03:12,990 I can run any command that this router supports. 77 77 00:03:12,990 --> 00:03:14,470 The first one I want to run 78 78 00:03:14,470 --> 00:03:17,030 is actually called show configuration. 79 79 00:03:17,030 --> 00:03:19,208 And if I do show configuration, 80 80 00:03:19,208 --> 00:03:20,610 you're going to be able to see 81 81 00:03:20,610 --> 00:03:22,725 the configuration of this router. 82 82 00:03:22,725 --> 00:03:26,420 Currently, there are three interfaces or plugs 83 83 00:03:26,420 --> 00:03:29,040 that would be plugged into this router or Ethernet cords, 84 84 00:03:29,040 --> 00:03:30,790 and those are eth0, eth1, and eth2. 85 85 00:03:32,693 --> 00:03:35,626 eth0 is my Outside Network, 86 86 00:03:35,626 --> 00:03:39,854 so this has the address of 10.1.1.1. 87 87 00:03:39,854 --> 00:03:42,023 So, if I go back to my diagram, 88 88 00:03:44,359 --> 00:03:46,980 you can see my Outside Network is here. 89 89 00:03:46,980 --> 00:03:49,480 So, that address, 10.1.1.1, 90 90 00:03:49,480 --> 00:03:52,280 is this Ethernet, Ethernet Zero, 91 91 00:03:52,280 --> 00:03:54,720 that's connected on this side of the router. 92 92 00:03:54,720 --> 00:03:56,470 Now, if I want to figure out what's on this side 93 93 00:03:56,470 --> 00:03:59,230 of the router, I'm looking for the DMZ Switch. 94 94 00:03:59,230 --> 00:04:01,090 And you can see that is right here. 95 95 00:04:01,090 --> 00:04:03,900 That is 10.10.10.1. 96 96 00:04:03,900 --> 00:04:05,419 That's its IP address. 97 97 00:04:05,419 --> 00:04:08,240 And then, we have eth2, which will be its connection 98 98 00:04:08,240 --> 00:04:10,880 to the outside world, which is currently off, 99 99 00:04:10,880 --> 00:04:14,250 but it would be 172.16.10.1, 100 100 00:04:14,250 --> 00:04:15,570 and that would be another connection 101 101 00:04:15,570 --> 00:04:16,530 that would come out here, 102 102 00:04:16,530 --> 00:04:19,410 connecting us to a modem or a switch 103 103 00:04:19,410 --> 00:04:20,860 or something that would give us connectivity 104 104 00:04:20,860 --> 00:04:22,040 out to the Internet. 105 105 00:04:22,040 --> 00:04:23,270 Right now, I have this set up, 106 106 00:04:23,270 --> 00:04:26,890 so this all works in a Local Area Network with two networks, 107 107 00:04:26,890 --> 00:04:29,100 my left-side network and my right-side network, 108 108 00:04:29,100 --> 00:04:31,372 which is my Outside and my DMZ. 109 109 00:04:31,372 --> 00:04:34,340 Now, we used nmap earlier with Kali 110 110 00:04:34,340 --> 00:04:35,810 so I'm going to use that again, 111 111 00:04:35,810 --> 00:04:37,350 and we're going to go ahead and take a look 112 112 00:04:37,350 --> 00:04:40,430 at this particular machine called the LAMP Server. 113 113 00:04:40,430 --> 00:04:43,852 The IP address for this is 10.10.10.10, 114 114 00:04:43,852 --> 00:04:45,840 and that comes off of this switch, 115 115 00:04:45,840 --> 00:04:48,800 which was the 10.10.10.1. 116 116 00:04:48,800 --> 00:04:50,681 And so, when I go over to Kali, 117 117 00:04:50,681 --> 00:04:53,378 I'm going to be able to log into that Kali machine, 118 118 00:04:53,378 --> 00:04:58,250 and we're just going to use nmap 10.10.10.10. 119 119 00:04:58,250 --> 00:05:00,370 Now, I assume this is a web server 120 120 00:05:00,370 --> 00:05:02,660 because it was called a LAMP Server, 121 121 00:05:02,660 --> 00:05:06,237 which stands for Linux, Apache, MySQL, and PHP, 122 122 00:05:06,237 --> 00:05:09,370 which are four core technologies to run a web server. 123 123 00:05:09,370 --> 00:05:11,170 When I run that nmap scan, 124 124 00:05:11,170 --> 00:05:13,840 it comes back with three ports that are open. 125 125 00:05:13,840 --> 00:05:16,450 We have Port 22, which is ssh, 126 126 00:05:16,450 --> 00:05:18,220 which allows me to have a connection 127 127 00:05:18,220 --> 00:05:20,812 through the Console like you see here on Linux. 128 128 00:05:20,812 --> 00:05:23,550 You have Port 80, which is http, 129 129 00:05:23,550 --> 00:05:26,220 which is the web browser that we'd be loading that website. 130 130 00:05:26,220 --> 00:05:29,770 And we have Port 880, which is a web proxy. 131 131 00:05:29,770 --> 00:05:32,550 Again, these are ports that should look familiar to you. 132 132 00:05:32,550 --> 00:05:34,120 Now, what this proves 133 133 00:05:34,120 --> 00:05:36,130 is that I have all of these virtual machines 134 134 00:05:36,130 --> 00:05:38,030 and they are networked together properly. 135 135 00:05:38,030 --> 00:05:41,340 Because I was able to send a command from Kali 136 136 00:05:41,340 --> 00:05:43,940 through this switch, through this router, 137 137 00:05:43,940 --> 00:05:46,690 through this switch, and all the way up to the LAMP Server 138 138 00:05:46,690 --> 00:05:48,470 to say what ports are you running, 139 139 00:05:48,470 --> 00:05:50,205 and then bringing that all the way back 140 140 00:05:50,205 --> 00:05:52,180 over to the Kali machine. 141 141 00:05:52,180 --> 00:05:53,170 We can do the same thing 142 142 00:05:53,170 --> 00:05:55,390 over to this Metasploitable2 machine, 143 143 00:05:55,390 --> 00:05:58,810 which is 10.10.10.11. 144 144 00:05:58,810 --> 00:06:03,100 So, I'm just going to do nmap 10.10.10.11, 145 145 00:06:03,100 --> 00:06:05,210 and you'll see the exact same thing happen. 146 146 00:06:05,210 --> 00:06:07,850 We went out, we pulled all of those ports and said 147 147 00:06:07,850 --> 00:06:09,990 which ones are open, tell me about them, 148 148 00:06:09,990 --> 00:06:12,100 and then, they give that information back to Kali. 149 149 00:06:12,100 --> 00:06:14,930 So, this is just a very simple demonstration 150 150 00:06:14,930 --> 00:06:17,452 of what you can do inside the GNS3. 151 151 00:06:17,452 --> 00:06:19,040 The point of this lesson 152 152 00:06:19,040 --> 00:06:21,150 isn't to make you an expert in GNS3. 153 153 00:06:21,150 --> 00:06:23,210 In fact, I didn't teach you how to install it 154 154 00:06:23,210 --> 00:06:24,910 or even how to operate it, really. 155 155 00:06:24,910 --> 00:06:26,430 I just want to show you the fact 156 156 00:06:26,430 --> 00:06:29,830 that you can have one machine made up of software. 157 157 00:06:29,830 --> 00:06:32,550 All of these was running inside of my own work station. 158 158 00:06:32,550 --> 00:06:34,170 There were seven different machines, 159 159 00:06:34,170 --> 00:06:35,970 two different switches, and a router, 160 160 00:06:35,970 --> 00:06:38,950 and all of them were just a series of ones and zeros. 161 161 00:06:38,950 --> 00:06:40,580 It was no cost to set up 162 162 00:06:40,580 --> 00:06:42,550 because there's no physical hardware. 163 163 00:06:42,550 --> 00:06:43,886 It's all virtualized. 164 164 00:06:43,886 --> 00:06:47,130 We could take this same lab and I could put it up on AWS. 165 165 00:06:47,130 --> 00:06:49,140 And if I did that, it would be in the cloud 166 166 00:06:49,140 --> 00:06:50,820 and I can operate it from there. 167 167 00:06:50,820 --> 00:06:52,780 This is the idea with virtualization. 168 168 00:06:52,780 --> 00:06:54,550 It's bringing the costs down 169 169 00:06:54,550 --> 00:06:56,570 and increasing our capabilities. 170 170 00:06:56,570 --> 00:06:59,300 I hope this got you a little bit interested in GNS3. 171 171 00:06:59,300 --> 00:07:00,210 If you have some time, 172 172 00:07:00,210 --> 00:07:02,320 I recommend downloading it and playing it. 173 173 00:07:02,320 --> 00:07:03,470 It's really interesting, 174 174 00:07:03,470 --> 00:07:05,743 the things you can do inside of GNS3.