Friday, 25 July 2014

Ubuntu Server 14.04 x64 with VirtualBox

Before setting up the physical servers, I wanted to create a virtualized scenario so that I can replicate what I'll be needing without having to set up independent machines.

I decided to choose Ubuntu thanks to it's wide support and also being free for anyone to use.

Firstly, I needed the ISO's of the Linux build I'd be using as well as the virtualization software, VirtualBox.

Due to a bug with the latest version of VirtualBox I was not able to create a 64 bit virtual computer. The latest version of Ubuntu server 14 however is only available for x64. Because of this I downloaded an older build (13.04) that was compatible with x86. I then downloaded an older version VirtualBox 4.1 that was compatible with x64 and my machine I was running it on.

For the installation of the operating system on to the virtual machine, I also needed a virtual disk drive which I could mount the image to.

I was then able to install the operating system to the virtual machine.

Lastly shows the VirtualBox with the different "machines" I have created along with their settings.


Gantt Chart Update

I have revised and updated my Gantt Chart for keeping track of my time spent/planned.


Thursday, 17 July 2014

Current Progress

So far, the wireless users are able to connect and receive an ip address automatically with the shrunken network. However, when expanding the network in size. I'm having difficulty getting the ip-helper to correctly function, and will require further research. It's having trouble using encapsulation through layer 3 without address.

The other research I did look up was for the exit routers, HSRP vs GLBP. GLBP has the advantage for being able to easily load balance, however it is not supported by the 3650 switches that we have available to use in our network.

Wednesday, 2 July 2014

Multiple SSID's & Network addresses

Using the same layer 2 network I have been teaching myself with, I was finally able to create a multi-addressing scheme with more than one SSID being broadcasted.

In my test network, I created a connection between a router, switch and the wireless access point. Both router and access point were connected to the switch via a trunk-ed connection, which allows multiple network ranges to be transmitted over one connection. I then created 3 DHCP pools on the router, the first one for management connections (& native vlans),  and the second & third being the two test wireless networks that'll be allocated to different SSID's (Network10 & Network20).

The first step was to create an SSID, allocate a Vlan which it's use, along with setting it's authentication method and password.

Dot11 ssid <NetworkName>
>Vlan <ID>
>Authentication open
>Authentication key-management wpa
>wpa-psk ascii <0/7> <password>
>Mbssid Guest-mode

Next was to go on to the wireless interface, and apply the encryption used on each Vlan. Then the SSID's that'll be broadcasted via the wireless interface. Lastly "Mbssid" to tell the interface that there are to be multiple networks broadcasted.

Interface dot11Radio <0/1>
>encryption vlan <ID> mode ciphers tkip
>ssid <NetworkName>
>Mbssid

As there are all multiple wireless networks sharing single interfaces, I had to enable encapsulation. The "bridge-group" command binds the radio interface with the fastEthernet connection. I used the same numbers as what I used on the Vlans to avoid confusion.

Interface dot11Radio <0/1>.<ID>
>encapsulation dot1Q <ID>
>bridge-group <ID>
Interface fastEthernet 0.<ID>
>encapsulation dot1Q <ID>
>bridge-group <ID>

The last commands I needed to apply was "bridge irb", because the access point doesn't do routing and finally to turn on the interface.

bridge irb

Interface dot11Radio <0/1>
>no shutdown

Next I did the testing.


When scanning for wireless connections, both of my networks "Network10" & "Network20" came up with authentication. Like what I set above, the security was "WPA PSK". 

As shown, when I've connected to each of the wireless networks it allocated different IP addresses and default gateways.
Above is a screenshot from the router, showing the addresses that had been given via DHCP. You can see the two different addresses that my phone was allocated, as it has the same MAC address. 

Next step will be to get the same idea working over a layer 3 network.