chr in eve-ng environment for learning/testing purposes · 60-day free trial license is available...
TRANSCRIPT
![Page 1: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/1.jpg)
CHR in EVE-NG environment for learning/testing purposes
Ihor Hreskiv
MUM Hungary
Budapest - May 2019
![Page 2: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/2.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
IHOR HRESKIV
ABOUT ME
�2
System administrator and system architect with over 20 years of experience in different kinds of business from government companies to own coworking space in Cracow, Poland
Experience in: virtualisation (desktop and infrastructure) linux, bsd systems networking routing [email protected]
![Page 3: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/3.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �3
CHR
![Page 4: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/4.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �4
CHR - What’s this?
WHY CHR
Cloud Hosted Router
a RouterOS image specifically tailored for running in virtual environments
![Page 5: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/5.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �5
CHR - minimal requirements
WHY CHR
64-bit CPU with virtualisation support
128 MB RAM for the CHR instance
128 MB disk space for the CHR virtual hard drive
![Page 6: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/6.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �6
CHR - Supported platforms
WHY CHR
• VMware ESXi/Fusion/Workstation/Player
• Microsoft Hyper-V
• QEMU
• VirtualBox
Hypervisors that provide paravirtualization are not supported!
![Page 7: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/7.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �7
licensing
WHY CHR
License Speed limit Price
Free 1Mbit FREE
P1 1Gbit $45
P10 10Gbit $95
P-Unlimited Unlimited $250
60-day free trial license is available for all paid license levels
![Page 8: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/8.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �8
CHR - REAL LIFE CASE SCENARIO
CHR - The Router
• Extends VMware ESXi standard switch functionality
• Adds full featured router for network layer of virtualisation
• Adds VPN and dynamic routing functions for border with advanced firewall
![Page 9: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/9.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �9
CHR - The Dude
CHR - REAL LIFE CASE SCENARIO
• Bandwidth is enough for monitoring with free license usage
• Can be used as backup monitoring system
• In combination with VPN can monitor remote sites/users
![Page 10: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/10.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �10
EVE-NG
![Page 11: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/11.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �11
learning/testing environments
WHY EVE-NG
![Page 12: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/12.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
WHY EVE-NG
�12
learning/testing environments
![Page 13: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/13.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �13
eve-ng some features
• KVM HW acceleration
• Topology designer "click and play"
• Labs in xml file format
• Custom Kernel support for L2 protocols
• Memory optimisation ( UKSM )
• Full HTML5 User Interface
• Ability to use without additional tools
WHY EVE-NG
![Page 14: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/14.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �14
platforms for eve-ng
• .ova template for hypervisors
• Bare metal installation
• Install on Ubuntu system
WHY EVE-NG
![Page 15: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/15.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
WHY EVE-NG
�15
comparing versions
Features/Edition Community Proffesional Learning center
Price Free 99 eur w/o VAT 99 eur + roles
User’s role admin only admin only admin, user, editor
Lab timer X X V
Node limit per lab 63 1024 1024
HTML5 Desktop X V V
Link quality X V V
Multi startup config X V V
Advanced design X V V
Docker support X V V
![Page 16: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/16.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
SETUP
�16
download link for eve-ng community edition
https://www.eve-ng.net/downloads/eve-ng-2
![Page 17: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/17.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
SETUP
�17
integration packs for eve-ng
https://www.eve-ng.net/downloads/windows-client-side-pack
Windows and Linux systems have the client side, which includes:
- Wireshark - UltraVNC - Putty - necessary wrappers
https://www.eve-ng.net/downloads/linux-client-side
![Page 18: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/18.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
SETUP
�18
quick deployment from .ova template:
VmWare player MS Hyper-V under Windows 10 Professional
installing CHR in eve-ng
![Page 19: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/19.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
SETUP
�19
1. Login into eve-ng host by ssh
2. Download CHR image from mikrotik.com/download
3. Create necessary directory, according to docs
4. Unpack and rename [version].img file to hda.qcow2
5. Move image to previously created directory
6. Fix permissions of the files and directories
installing CHR in eve-ng
![Page 20: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/20.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
SETUP
�20
Script for install CHR and labs from presentation are available in GitHub repository
https://github.com/hreskiv/chr-eve-ng
installing CHR in eve-ng
![Page 21: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/21.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �21
QUICK START
![Page 22: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/22.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�22
default credentials: Username: root Password: eve
starting first project in eve-ng
login to your virtual machine
![Page 23: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/23.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�23
get a copy of script chr-eve.sh (from GitHub)
simply run a script for adding CHRsh chr-eve.sh 6.44.3
next steps will be in your browser
wget https://github.com/hreskiv/chr-eve-ng/raw/master/chr-eve.sh
starting first project in eve-ng
![Page 24: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/24.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�24
default credentials: Username: admin Password: eve
http://[ip.address.of.eve.ng]
starting first project
![Page 25: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/25.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�25
creating new lab button
name your project
adding project
![Page 26: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/26.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�26
your workbench in eve-ng
adding nodes/networks
manipulating startup-configs
actions for all nodes like start/stop or wipe
![Page 27: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/27.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�27
adding node to project
quick search field
![Page 28: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/28.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�28
choose version of RouterOS*
select network cards driver*
* you can host multiple versions
* virtio-net-pci consumes less memory
adding node to project
![Page 29: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/29.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�29
add management network for your project
* you can have more than one
adding network to project
![Page 30: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/30.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�30
connecting node and network
![Page 31: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/31.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
FIRST PROJECT
�31
controls of your VM
start/stop your CHR
wipe configuration of your CHR
export configuration of your CHR
delete your CHR
capture traffic on interfaces of your CHR
![Page 32: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/32.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
IMPORT/EXPORT
�32
startup configurations
after clicking Export CFG, you can see and edit in simply text editor configuration of your router
slider ON/OFF allow applying on startup configuration after wiping router
![Page 33: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/33.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
IMPORT/EXPORT
�33
delay 10s command from router os, give a 10 seconds to router for starting up interfaces*
* 10s is experimental value and you can change it according to your needs
startup configurations
![Page 34: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/34.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
IMPORT/EXPORT
�34
import/export buttons allow you transfer your labs between computers with configuration of previously configured routers
import/export configurations in eve-ng
![Page 35: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/35.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
DEMO
�35
DEMO
![Page 36: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/36.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
DEMO 1 - HELLO WORLD
�36
let’s start from «Hello world»
CHR Internet
![Page 37: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/37.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
DEMO 2 - STATIC ROUTING
�37
topology
VPC1
VPC2
R2
R1
192.168.10.0/25 172.16.11.0/27
connection linkbetween routers
![Page 38: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/38.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �38
lab in eve-ng
DEMO 2 - STATIC ROUTING
![Page 39: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/39.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019
DEMO 3 - OSPF MULTI AREA
�39
OSPF multi area topology
backbone
area 3
area 1
area 2
internet
192.168.3.0/24
192.168.2.0/24
192.168.1.0/24
10.0.0.0/8
![Page 40: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/40.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �40
DEMO 3 - OSPF MULTI AREA
OSPF multi area topology
![Page 41: CHR in EVE-NG environment for learning/testing purposes · 60-day free trial license is available for all paid license levels. Budapest - May 2019 Ihor Hreskiv - MUM Hungary 8 CHR](https://reader031.vdocuments.us/reader031/viewer/2022040722/5e3064eda159491782344e9f/html5/thumbnails/41.jpg)
Ihor Hreskiv - MUM HungaryBudapest - May 2019 �41
THANK YOU
Questions?
[email protected] https://github.com/hreskiv/chr-eve-ng