Exercises pyretic firewall - Revision history

Marumai1: /* Exercise: Pyretic Firewall */

2017-02-24T10:49:26Z

Exercise: Pyretic Firewall

← Older revision		Revision as of 12:49, 24 February 2017
Line 3:		Line 3:
	* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf]		* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf]
	* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples		* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples
	~~$ sudo mn --controller remote --topo=single,3 --mac --arp~~

	== (20P) Run the pyretic hub example ==		== (20P) Run the pyretic hub example ==
			$ sudo mn --controller remote --topo=single,3 --mac --arp
	$ cd pyretic		$ cd pyretic
	$ pyretic.py –v high pyretic.examples.pyretic_hub		$ pyretic.py –v high pyretic.examples.pyretic_hub
Line 39:		Line 40:
	** See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code		** See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code
	** To Test run:		** To Test run:
	~~***~~ sudo mn --controller remote --topo=single,3 --mac --arp		$ sudo mn --controller remote --topo=single,3 --mac --arp
	~~***~~ pyretic.py –v high pyretic.examples.pyretic_firewall		$ pyretic.py –v high pyretic.examples.pyretic_firewall

Marumai1: /* Exercise: Pyretic Firewall */

2017-02-24T10:45:33Z

Exercise: Pyretic Firewall

← Older revision		Revision as of 12:45, 24 February 2017
Line 5:		Line 5:
	$ sudo mn --controller remote --topo=single,3 --mac --arp		$ sudo mn --controller remote --topo=single,3 --mac --arp

	* (20P) Run the pyretic hub example		== (20P) Run the pyretic hub example ==
	$ cd pyretic		$ cd pyretic
	$ pyretic.py –v high pyretic.examples.pyretic_hub		$ pyretic.py –v high pyretic.examples.pyretic_hub
Line 20:		Line 20:
	** Look into the hub code: pyretic/pyretic/examples/pyretic_hub		** Look into the hub code: pyretic/pyretic/examples/pyretic_hub

	* (20P) Run the pyretic switch example		== (20P) Run the pyretic switch example ==
	~~***~~ $ pyretic.py –v high pyretic.examples.pyretic_switch1		$ pyretic.py –v high pyretic.examples.pyretic_switch1
			** restart mininet
			$ sudo mn --controller remote --topo=single,3 --mac --arp
	** Verify that the hosts can ping each other		** Verify that the hosts can ping each other
	~~***~~ > xterm h1 h2 h3		mininet> xterm h1 h2 h3
	~~***~~ h2$ tcpdump -xx -n -i h2-eth0		h2$ tcpdump -xx -n -i h2-eth0
	~~***~~ h3$ tcpdump -xx -n -i h3-eth0		h3$ tcpdump -xx -n -i h3-eth0
	~~***~~ h1$ ping -c1 10.0.0.2		h1$ ping -c1 10.0.0.2
	** Observe what happens when you do		** Observe what happens when you do
	~~***~~ h1$ ping -c1 10.0.0.5		h1$ ping -c1 10.0.0.5
	** Look into the switch code: pyretic/pyretic/examples/pyretic_switch1.py		** Look into the switch code: pyretic/pyretic/examples/pyretic_switch1.py

	* (60P) Implement a layer 2 firewall that runs alongside the MAC learning module on the pyretic OpenFlow Controller.		== (60P) Implement a layer 2 firewall that runs alongside the MAC learning module on the pyretic OpenFlow Controller ==
	** Your firewall should be agnostic to the underlying topology		** Your firewall should be agnostic to the underlying topology
	** Write code to block h1 to h2 and h2 to h1 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02)		** Write code to block h1 to h2 and h2 to h1 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02)

Marumai1: /* Exercise: Pyretic Firewall */

2017-02-24T10:39:45Z

Exercise: Pyretic Firewall

← Older revision		Revision as of 12:39, 24 February 2017
Line 3:		Line 3:
	* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf]		* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf]
	* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples		* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples
	* $ sudo mn --controller remote --topo=single,3 --mac --arp		$ sudo mn --controller remote --topo=single,3 --mac --arp

	* (20P) Run the pyretic hub example		* (20P) Run the pyretic hub example
	~~***~~ $ pyretic.py –v high pyretic.examples.pyretic_hub		$ cd pyretic
			$ pyretic.py –v high pyretic.examples.pyretic_hub
	** Verify that the hosts can ping each other		** Verify that the hosts can ping each other
	*** > xterm h1 h2 h3		$ h1 ping h2
	~~***~~ h2$ tcpdump -xx -n -i h2-eth0		$ h1 ping h3
	~~***~~ h3$ tcpdump -xx -n -i h3-eth0		** then
	~~***~~ h1$ ping -c1 10.0.0.2		$ mininet> xterm h1 h2 h3
			h2$ tcpdump -xx -n -i h2-eth0
			h3$ tcpdump -xx -n -i h3-eth0
			h1$ ping -c1 10.0.0.2
	** Observe what happens when you do		** Observe what happens when you do
	~~***~~ h1$ ping -c1 10.0.0.5		h1$ ping -c1 10.0.0.5
	** Look into the hub code: pyretic/pyretic/examples/pyretic_hub		** Look into the hub code: pyretic/pyretic/examples/pyretic_hub

Marumai1: Created page with "= Exercise: Pyretic Firewall = * Aim: Pyretic based firewall * Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf] * Pu..."

2016-03-15T14:02:55Z

Created page with "= Exercise: Pyretic Firewall = * Aim: Pyretic based firewall * Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf] * Pu..."

New page

= Exercise: Pyretic Firewall =
* Aim: Pyretic based firewall
* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf]
* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples
* $ sudo mn --controller remote --topo=single,3 --mac --arp

* (20P) Run the pyretic hub example
*** $ pyretic.py –v high pyretic.examples.pyretic_hub
** Verify that the hosts can ping each other
*** > xterm h1 h2 h3
*** h2$ tcpdump -xx -n -i h2-eth0
*** h3$ tcpdump -xx -n -i h3-eth0
*** h1$ ping -c1 10.0.0.2
** Observe what happens when you do
*** h1$ ping -c1 10.0.0.5
** Look into the hub code: pyretic/pyretic/examples/pyretic_hub

* (20P) Run the pyretic switch example
*** $ pyretic.py –v high pyretic.examples.pyretic_switch1
** Verify that the hosts can ping each other
*** > xterm h1 h2 h3
*** h2$ tcpdump -xx -n -i h2-eth0
*** h3$ tcpdump -xx -n -i h3-eth0
*** h1$ ping -c1 10.0.0.2
** Observe what happens when you do
*** h1$ ping -c1 10.0.0.5
** Look into the switch code: pyretic/pyretic/examples/pyretic_switch1.py

* (60P) Implement a layer 2 firewall that runs alongside the MAC learning module on the pyretic OpenFlow Controller.
** Your firewall should be agnostic to the underlying topology
** Write code to block h1 to h2 and h2 to h1 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02)
** Start with pyretic_firewall.py
** See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code
** To Test run:
*** sudo mn --controller remote --topo=single,3 --mac --arp
*** pyretic.py –v high pyretic.examples.pyretic_firewall