Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
This is the thread for setting up home labs on a goon budget; where cheeto stained fingers meet enterprise networking

:siren:YOU DO NOT NEED TO GO BUY A DELL POWEREDGE TO RUN VM'S! THEY'RE NOISY, HOT, POWER HUNGRY, AND NOISY. Seriously, you'd be better off with a quad i5/i7 and a lot of RAM.:siren:

I. Where do I get started?!

Right! This depends on what you want to work on. Do you want to work on..

Networks: There are a few ways to do this - via Packet Tracer from Cisco, VIRL from Cisco (New and untested by me so far but runs all Cisco images, not just IOS), and the most popular - GNS3. We'll focus on GNS3 - You install the all-in-one software which provides everything needed to emulate network devices except for the router images. Those you will have to legitimately get from the Cisco site (CCO Login required and tied to a service contract) or you can :filez: it (don't ask where to download them in this thread,however you could ask what version of image you should use). It should be noted that switches can't 100% be emulated, however I will cover workarounds later on in the thread. You can however emulate ASA firewalls and routers, and even tie them to your NIC so that the router/ASA are reachable from the internet! With enough desktop memory you can run some really big virtualized networks:



Systems: System can be emulated with VMware ESXi or Workstation / Microsoft Hypervisor / Oracle VM VirtualBox. You would install one of those products and from there you can install virtual machines. You would need to :filez: an ISO of your target operating system and install it on a blank virtual machine. If you don't have a spare server/workstation to install ESX on, you can run ESX inside of a VM like you would any other virtualized OS, then build VM's into that, effectively making the inception version of server virtualization



Both: Totally doable! Virtualization is cool, and with it you can tie virtual adapters into GNS3 and emulate hosts / Cisco Call Managers / ACS / German Dungeon Porn webservers or whatever else tickles your fancy.

II. Requirements

Any modern PC will do, but for virtualization you generally want to have over 4GB of RAM and a multi-core processor - for multiple server or network device virtualizations you'll want to have 16+ GB (in the above GNS3 network I had to upgrade from 16GB to 32GB to support it)

III. Do I need physical hardware for the XXX exam or can I just use virtualized hardware?

For most entry/mid-level exams, you could virtualize the whole thing for your test bed. The CCNA can definitely be fully virtualized, the CCNP can be half virtualized (switches have their own dedicated exam and you can't emulate all of the config/commands used on the test). For microsoft/RHCE..I would assume so unless someone wants to prove me wrong. I've only taken up to the MCSA and I can't see why any of that can't be virtualized fully.

There are caveats, you can't virtualize a full wireless network so the CCNA Wireless track wouldn't be helpful here except for core routing, and the CCNA Voice is mostly able to be produced in VM/GNS3 but there are some features only a voice card in a router can deliver (hold music for example)

If anything I would get a cheap enterprise switch like a 2950, 2960, or 3750 off ebay for $100+. Just note that enterprise hardware tends to be LOUD and power hungry and at least for servers doesn't offer much if any of a benefit.

IV. Networking Gotchas

Sometimes poo poo stops working in GNS3, like even though two routers are directly connected and configured correctly, you can't ping across. When in doubt, shutdown/start the routers (but make sure you save the config first!)

Switching. It doesn't work with GNS3 because switches use a dedicated piece of hardware to make layer 2 decisions called ASIC's, and GNS3 can't emulate an ASIC. I assume VIRL will be able to because Cisco is boss but VIRL costs money, and goons can't afford anything. The workarounds:

- Use a 3725 IOS image and add NM-16ESW modules to the virtual hardware in GNS3. This gives you 16 switchports and a few switch configuration changes but nothing deep (e.g.: etherchannel or dot1x), the good thing about this switch is this is the most basic "multilayer switch" which are very important in Campus (e.x.: Enterprise) Network Design topologies
- Use the built in "ethernet switch" in GNS3, all it does is move packets between the same vlan or dot1q trunks

V. Server VM Gotchas

Clock rate syncing on RHEL5 and older versions of Windows. Not a problem if VMware tools are installed (or elevator=deadline in Linux, but potentially an issue).

VI. poo poo you can do

Okay so you get VMware ESXi installed on a stolen Dell R720 but now what? Well my first step would be to connect it to a spare NIC on another server/desktop running GNS3 and tie that NIC into GNS3 along with your home network NIC, configure an emulated router to be configured on both interfaces and baby you got yourself a stew! No seriously you now have the most barebones small business network ever and just the tipping point of the poo poo you can do to make yourself a useful person to society!

For the non-networking people, I guess you could just set up a shitload of Windows 2008 R2 or Linux servers and make yourself a AD / DNS / CA authority, tie all your home computers to the domain and lock mom out of farmville when you get grounded.

Sepist fucked around with this message at 20:29 on Aug 7, 2013

Adbot
ADBOT LOVES YOU

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
More info regarding enterprise hardware for your home lab

Dilbert As gently caress posted:

I was about to go to bed but my sperg kicked in, OP here you go

SO YOU WANT TO BY A DELL POWEREDGE: EASY GUIDE TO SAVING A BUTT-TONE OF MONEY

So you want to buy a poweredge for your lab? Cool here are some points to think about prior to buying that waste of money. First of let me say when I was first getting into VMware and such I thought getting a Dell Poweredge/HP Proliant/etc would be the poo poo and be MUCH more valuable learning than a server, then I ran the facts and figures.

:siren:PROTIP: No one gives a poo poo you can install an OS/Hypervisor onto a hardware platform:siren:
Seriously;
installing ESXi is like, Enter, F11, Enter, F11, Enter, and Enter.
Hyper-V 2012 is similar even less clicks.
Citrix is similar to ESXi but feels a bit more linuxy but is incredibly straight forward.

Congratulations, you are not able to install ESXi/hyper-V/Citrix on HP/Dell/IBM/UCS/other.

The important part of a lab is not how to install an OS on a HW platform unless you are shooting for your A+ and A+ job, that is probably the only time an employer will care. The important part of setting up a HyperVisor/Server OS is not the "can you install it" but "can you make it usable and understand what you did". Hardware platform familiarity is becoming less and less of a requirement as we move more and more into the virtualization realm. Today most of my installs are scripted, to the point where I boot off USB and let the .KS/unattend.xml finish it, comeback in 5 minutes and configure anything else. While you may need to understand the importance of auto-deployments of windows/linux/Vmware, realize you can do this all in ESXi running on a Cheap rear end 600 dollar build which will curb stomp your Dell server you are getting that shipped with no HDD's, hope you have some good network storage!

Common misconceptions of LAB environments
  • Installing on Vendor Hardware will work better!
    Mostly not true, most of your server hardware is probably 3-4 years old and won't really compare to what you can get on the desktop market in the way of parts.

  • I can just upgrade the Ram in my Dell Server which was 200 bucks and came with 16GB of Ram with some off newegg!
    Probably not true, most ram for servers isn't your run of the mill desktop ram, most will require ECC and may be vendor specific. Long story short it will cost you much more than you estimate

  • I need to know how to install it onto the Vendor hardware
    No you really need to watch like a few YT videos and blammo done, focus on configuring the Software and Services

  • I can just throw in my Western Digital or Seagate Drives into make up for the fact it shipped with no drives!
    Not always true, most won't accept a drive unless it has a signature from dell/hp/etc and those drives are costly(hence why your server didn't come with any)!

  • There are some Hardware pieces I can't mimic like iDrac, iLO, or Cisco's CMC!
    If you are going to a job where they let you deal with things like multiple VM servers and clusters, and yet you can't be bothered to watch a 5 minute video or understand what it means when it is asking for an IP address and password you have bigger issues. Furthermore, Supermicro offers some similar features on their boards which allow for similar configuration

  • I can't get enough ram/CPU in the Whitebox Servers I NEED a Dell/HP
    True some things just won't fit your needs for ram/cpu in the box, but you shouldn't be building a 1:1 production unless you are going for something like a VCDX, even then 32GB and a 8 Core CPU will take you farther than you think. If you still need more, look at supermicro, most take desktop ram fairly well and run stuff without a hitch.


Remember your lab environment is to teach you the concepts and to familiarize yourself with the Software and Services you are configuring. It does not have to be better than your production environment.

TIPS OF A VIRTUAL ENVIRONMENT
:eng101: Only assign what the VM needs, this is also true in a production environment. If it only is running AD/DNS/DHCP, it could probably run happy on 512MB and 1 vCPU, You'll probably run out of RAM/DISK IOPS BEFORE you congest your CPU. Unless you are doing some really crazy poo poo or have a 2-3 year old server/pc.
:eng101: Invest in SSD's, SATA disks are SLOOOW for VM's that require shared resources, invest in some SSD's
:eng101: Don't overbuy, this is a really common mistake, buy what you need for what you are doing and upgrade as needed.
:eng101: Look into things like VirtualBox or VMwareWorkstation, and updating your Gaming rig, PRIOR to spending 800 on some dell HW. I have built many PoC labs for my VCP/VCP-DT in workstation, it's a bit slower than ESXi white boxing but 100% DOABLE
:eng101: ESXi can run ESXi on top of ESXi, it can also run Hyper-V and Citrix. Often building 1 beefy box can outweigh multiple lower end boxes.


Erkenntnis posted:

Getting into the CCNA world essentially from scratch can be challenging, and learning about the different cisco models / features is almost part of the experience itself.


Questions like these are exactly why a central resource should be made, because anyone building physical labs is going to be looking at these routers on ebay with a random assortment of modules and model numbers.

So to append powercrazy's post - here has the been my experience for the past month (No CCENT/CCNA yet, so feel free to correct my errors).


Switch Models:

2950/2960


3550/3560 (Layer 3)


They most likely be sent to you without any IOS loaded, so you'll be coming to a "Switch:" prompt. Fortunately, Cisco switches generally have publicly available IOS images (behind registration, of course). Unfortunately, there is no way to manage a switch without IOS loaded "in-band" (through telnet or ssh), so you'll need a standard Cisco Console Cable.

What's even more challenging to the prospective student is that you'll have to figure out how to get an IOS image onto the switch without using a tftp server - but there's a nifty thing called XMODEM, which allows you to transfer a file over the console cable.

Here's a decent guide that I followed:

https://www.youtube.com/watch?v=zxTO5qxti-I

The 2950s don't have Auto-MDIX, so you'll have to use crossover cables to connect switch-to-switch. Not sure about the 3550s.

Router Models:

26xx xm (2610/11 xm, 2620/21 xm, 2650/51 xm)

18xx,28xx

Your best bet is going to the 2600xm series. Usually much cheaper than the rest. The 1800 and 2800 are both newer, have higher memory (and use memory cards!). and are more likely to have 12.4/T if you're buying off ebay. For routers, the image you get with it is the one you'll be using. (Outside of :filez:)

The standard 2600xm series router has one FastEthernet port, one console port, and one auxiliary port. The "xm" stands for expandable - so you'll be getting two WAN module ports, and one NM module port (Good for a Frame Relay router). Getting a 2611xm, 2621xm, or 2651xm will give you a second FE port. Here's what a 2600 series looks like:



Some common modules you'll run into:

NM-4T


WIC-1T


WIC-2T


WIC-1DSU-T1-V2


WIC-2AM*


*Not really useful for home labs, as far as I can tell.

Cables

DCE/DTE DB60 Crossover Cable - works with the NM-4T and WIC-1T


Smart Serial Male DTE to Male DCE Crossover Cable - works the WIC-2T


T1 crossover Cable - works with the WIC-1DSU-T1, and can be made from any standard Cat5e, I believe


e:Another cable that might be of use is a Smart Serial to DB/60 crossover. This will allow you to connect a NM-4T or WIC-1T to a WIC-2T

Sepist fucked around with this message at 15:34 on Aug 27, 2013

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
Updated the OP, thanks bros

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k

Thanks, I updated the OP a little bit.

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
Updated the OP with an example of how loud they are

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
I was all excited about a 3750 I got off ebay for my home lab and after they sent me the shipping info they sent me a followup email saying that they didn't actually have the switch and refunded my money :smith:

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
While we're on the topic of network labs, I'll plug my own work here.

Currently I'm building up http://routeandswit.ch/ , it's one-click virtual labs for CCNA, CCNP, and CCIE topics that you can troubleshoot without having to install any hardware emulation software, just use your favorite telnet client to connect to our hosted devices.

While it's not exactly aimed at people studying for certs, it will be useful for those wanting to get exposure to troubleshooting real network issues without having to come up with your own scenarios that you already know the answer to, plus it will be updated frequently with more labs as I come up with more evil ways to break a network.

You need to register on the site to see the "start lab" button, otherwise you can only access the topologies of each scenario and their troubleshooting task list.

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
Eventually. I built that site when working at my previous job which offered a lot more free time to dick around on side projects. Right now I'm busy about 600% of the day so I don't have the time to even finish the dmvpn lab.

If you signed up using a real email I'll probably send out an email when I start adding more labs

Adbot
ADBOT LOVES YOU

Sepist
Dec 26, 2005

FUCK BITCHES, ROUTE PACKETS

Gravy Boat 2k
The ASA sends traffic to firepower using a service policy, outside of that they are basically two different devices with no overlap. That said, if you wanna play around with firepower without an asa you can download NGIPSv, install it on a vm and get a demo license from cisco.

  • Locked thread