LAB - OpenSSH, PUTTY and Ultra VNC

http://pigtail.net/LRP/vnc/
http://dingetje.homeip.net/dokuwiki/freesco/howtos/setup_ssh_tunnel_to_connect_with_vnc_server

Case Study 1 Remote Access

installing Opensshb for windows:


here we can download the application: http://sourceforge.net/projects/sshwindows



accept the agreement

Install-------
Run the setup program and accept the defaults (all categories).This will install the OpenSSH server and client in an appropiate place.

Configuration-------------

1. Open a command prompt and change to the installation directory (Program Files\OpenSSH is the default).
2. CD into the bin directory.
3. Use mkgroup to create a group permissions file. For local groups, use the "-l" switch. For domain groups, use the "-d" switch. For both domain and local, it is best to run the command twice (remember to use >>, not >). If you use both, make sure to edit the file to remove any duplicate entires.
mkgroup -l >> ..\etc\group (local groups)

mkgroup -d >> ..\etc\group (domain groups)
4. Use mkpasswd to add authorized users into the passwd file. For local users, use the "-l" switch. For domain users, use the "-d" switch. For both domain and local, it is best to run the command twice (remember to use >>, not >). If you use both, make sure to edit the file to remove any duplicate entires.
mkpasswd -l [-u ] >> ..\etc\passwd (local users)

mkpasswd -d [-u ] >> ..\etc\passwd (domain users)

NOTE: To add users from a domain that is not the primary domain of the machine, add the domain name after the user name. NOTE: Ommitting the username switch adds ALL users from the machine or domain, including service accounts and the Guest account.
5. Start the OpenSSH server.
net start opensshd
6. Test the server. Using a seperate machine as the client is best. If you connect but the connection immediately gets dropped, reboot the machine with the server and try connecting again.

Lab 19 configuring SSH client

LAB-18

configuring an ssh server: on redhat linux

here is the command to run the service to start the SSH

the directory where you have all the files of the SSH directory

here are the permission of all the keys on the SSH dir

Lab ends

Topic-2 2nd Class Notes

http://www.auditmypc.com/port/tcp-port-23.asp


Remote Authentication Dial-in User Service (RADIUS)
Terminal Access Controller Access Control System (TACACS+)
Advantages of TACACS+over RADIUS:

• Addresses need for scalable solution
• Separates authentication, authorisation, and accounting
• Offers multiple protocol support

Point-to-Point Tunneling Protocol
Layer Two Tunneling Protocol
Secure Shell (SSH)
IP Security Protocol --- Encapsulating Security Payload (ESP)

LABs 18 and 19

Case Study:

A) do ssh under windows

1. for ssh server download openssh
2. for ssh client download Putty
3. VNC or Ulra VNC

Open source location sourceforge.org --- (ethereal)

Topic 2 - Lab 391

Lab: 391

setting up a vpn client follow up these pics:

step 1: from control pannel open network connection then start the wizard to create new connection

step 2

Step 3

step4

Step 5

Step 6

Step 7

all setup the connection can be used but u have to have at the other end the service running to get connected

Topic 2 - Telnet

To open a session with any computer using telnet, the other party that you are trying to connect to must start the Telnet service on the windows services so you can be able to telnet any computer around.
the service by default is disabled u can either make it automatically or manual so you can start the service yourself.

look for the firewall after all so the port is allowed (23)

Telnet is weak in security - man in the middle - unless using SSH

do the labs: 391/392/393/400/401