|
This is the thread for setting up home labs on a goon budget; where cheeto stained fingers meet enterprise networking YOU DO NOT NEED TO GO BUY A DELL POWEREDGE TO RUN VM'S! THEY'RE NOISY, HOT, POWER HUNGRY, AND NOISY. Seriously, you'd be better off with a quad i5/i7 and a lot of RAM. I. Where do I get started?! Right! This depends on what you want to work on. Do you want to work on.. Networks: There are a few ways to do this - via Packet Tracer from Cisco, VIRL from Cisco (New and untested by me so far but runs all Cisco images, not just IOS), and the most popular - GNS3. We'll focus on GNS3 - You install the all-in-one software which provides everything needed to emulate network devices except for the router images. Those you will have to legitimately get from the Cisco site (CCO Login required and tied to a service contract) or you can it (don't ask where to download them in this thread,however you could ask what version of image you should use). It should be noted that switches can't 100% be emulated, however I will cover workarounds later on in the thread. You can however emulate ASA firewalls and routers, and even tie them to your NIC so that the router/ASA are reachable from the internet! With enough desktop memory you can run some really big virtualized networks: Systems: System can be emulated with VMware ESXi or Workstation / Microsoft Hypervisor / Oracle VM VirtualBox. You would install one of those products and from there you can install virtual machines. You would need to an ISO of your target operating system and install it on a blank virtual machine. If you don't have a spare server/workstation to install ESX on, you can run ESX inside of a VM like you would any other virtualized OS, then build VM's into that, effectively making the inception version of server virtualization Both: Totally doable! Virtualization is cool, and with it you can tie virtual adapters into GNS3 and emulate hosts / Cisco Call Managers / ACS / German Dungeon Porn webservers or whatever else tickles your fancy. II. Requirements Any modern PC will do, but for virtualization you generally want to have over 4GB of RAM and a multi-core processor - for multiple server or network device virtualizations you'll want to have 16+ GB (in the above GNS3 network I had to upgrade from 16GB to 32GB to support it) III. Do I need physical hardware for the XXX exam or can I just use virtualized hardware? For most entry/mid-level exams, you could virtualize the whole thing for your test bed. The CCNA can definitely be fully virtualized, the CCNP can be half virtualized (switches have their own dedicated exam and you can't emulate all of the config/commands used on the test). For microsoft/RHCE..I would assume so unless someone wants to prove me wrong. I've only taken up to the MCSA and I can't see why any of that can't be virtualized fully. There are caveats, you can't virtualize a full wireless network so the CCNA Wireless track wouldn't be helpful here except for core routing, and the CCNA Voice is mostly able to be produced in VM/GNS3 but there are some features only a voice card in a router can deliver (hold music for example) If anything I would get a cheap enterprise switch like a 2950, 2960, or 3750 off ebay for $100+. Just note that enterprise hardware tends to be LOUD and power hungry and at least for servers doesn't offer much if any of a benefit. IV. Networking Gotchas Sometimes poo poo stops working in GNS3, like even though two routers are directly connected and configured correctly, you can't ping across. When in doubt, shutdown/start the routers (but make sure you save the config first!) Switching. It doesn't work with GNS3 because switches use a dedicated piece of hardware to make layer 2 decisions called ASIC's, and GNS3 can't emulate an ASIC. I assume VIRL will be able to because Cisco is boss but VIRL costs money, and goons can't afford anything. The workarounds: - Use a 3725 IOS image and add NM-16ESW modules to the virtual hardware in GNS3. This gives you 16 switchports and a few switch configuration changes but nothing deep (e.g.: etherchannel or dot1x), the good thing about this switch is this is the most basic "multilayer switch" which are very important in Campus (e.x.: Enterprise) Network Design topologies - Use the built in "ethernet switch" in GNS3, all it does is move packets between the same vlan or dot1q trunks V. Server VM Gotchas Clock rate syncing on RHEL5 and older versions of Windows. Not a problem if VMware tools are installed (or elevator=deadline in Linux, but potentially an issue). VI. poo poo you can do Okay so you get VMware ESXi installed on a stolen Dell R720 but now what? Well my first step would be to connect it to a spare NIC on another server/desktop running GNS3 and tie that NIC into GNS3 along with your home network NIC, configure an emulated router to be configured on both interfaces and baby you got yourself a stew! No seriously you now have the most barebones small business network ever and just the tipping point of the poo poo you can do to make yourself a useful person to society! For the non-networking people, I guess you could just set up a shitload of Windows 2008 R2 or Linux servers and make yourself a AD / DNS / CA authority, tie all your home computers to the domain and lock mom out of farmville when you get grounded. Sepist fucked around with this message at 20:29 on Aug 7, 2013 |
# ¿ Jul 25, 2013 22:54 |
|
|
# ¿ Apr 26, 2024 00:32 |
|
More info regarding enterprise hardware for your home labDilbert As gently caress posted:I was about to go to bed but my sperg kicked in, OP here you go Erkenntnis posted:Getting into the CCNA world essentially from scratch can be challenging, and learning about the different cisco models / features is almost part of the experience itself. Sepist fucked around with this message at 15:34 on Aug 27, 2013 |
# ¿ Jul 25, 2013 22:55 |
|
Updated the OP, thanks bros
|
# ¿ Jul 26, 2013 15:58 |
|
Thanks, I updated the OP a little bit.
|
# ¿ Aug 5, 2013 20:19 |
|
Updated the OP with an example of how loud they are
|
# ¿ Aug 7, 2013 20:24 |
|
I was all excited about a 3750 I got off ebay for my home lab and after they sent me the shipping info they sent me a followup email saying that they didn't actually have the switch and refunded my money
|
# ¿ Aug 27, 2013 15:32 |
|
While we're on the topic of network labs, I'll plug my own work here. Currently I'm building up http://routeandswit.ch/ , it's one-click virtual labs for CCNA, CCNP, and CCIE topics that you can troubleshoot without having to install any hardware emulation software, just use your favorite telnet client to connect to our hosted devices. While it's not exactly aimed at people studying for certs, it will be useful for those wanting to get exposure to troubleshooting real network issues without having to come up with your own scenarios that you already know the answer to, plus it will be updated frequently with more labs as I come up with more evil ways to break a network. You need to register on the site to see the "start lab" button, otherwise you can only access the topologies of each scenario and their troubleshooting task list.
|
# ¿ May 13, 2016 20:48 |
|
Eventually. I built that site when working at my previous job which offered a lot more free time to dick around on side projects. Right now I'm busy about 600% of the day so I don't have the time to even finish the dmvpn lab. If you signed up using a real email I'll probably send out an email when I start adding more labs
|
# ¿ Aug 12, 2016 12:48 |
|
|
# ¿ Apr 26, 2024 00:32 |
|
The ASA sends traffic to firepower using a service policy, outside of that they are basically two different devices with no overlap. That said, if you wanna play around with firepower without an asa you can download NGIPSv, install it on a vm and get a demo license from cisco.
|
# ¿ Aug 14, 2016 14:41 |