Exercises pyretic firewall: Difference between revisions
Jump to navigation
Jump to search
| Line 3: | Line 3: | ||
* Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf] | * Topology [https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex3/1.firewall-fig.pdf] | ||
* Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples | * Put the following files([https://dl.dropboxusercontent.com/u/1652374/SDN_course_WS2015-2016/Exercises/ex4/pyretic_firewall_students.zip]) in folder: pyretic/pyretic/examples | ||
== (20P) Run the pyretic hub example == | == (20P) Run the pyretic hub example == | ||
$ sudo mn --controller remote --topo=single,3 --mac --arp | |||
$ cd pyretic | $ cd pyretic | ||
$ pyretic.py –v high pyretic.examples.pyretic_hub | $ pyretic.py –v high pyretic.examples.pyretic_hub | ||
| Line 39: | Line 40: | ||
** See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code | ** See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code | ||
** To Test run: | ** To Test run: | ||
$ sudo mn --controller remote --topo=single,3 --mac --arp | |||
$ pyretic.py –v high pyretic.examples.pyretic_firewall | |||
Latest revision as of 11:49, 24 February 2017
Exercise: Pyretic Firewall
- Aim: Pyretic based firewall
- Topology [1]
- Put the following files([2]) in folder: pyretic/pyretic/examples
(20P) Run the pyretic hub example
$ sudo mn --controller remote --topo=single,3 --mac --arp $ cd pyretic $ pyretic.py –v high pyretic.examples.pyretic_hub
- Verify that the hosts can ping each other
$ h1 ping h2 $ h1 ping h3
- then
$ mininet> xterm h1 h2 h3 h2$ tcpdump -xx -n -i h2-eth0 h3$ tcpdump -xx -n -i h3-eth0 h1$ ping -c1 10.0.0.2
- Observe what happens when you do
h1$ ping -c1 10.0.0.5
- Look into the hub code: pyretic/pyretic/examples/pyretic_hub
(20P) Run the pyretic switch example
$ pyretic.py –v high pyretic.examples.pyretic_switch1
- restart mininet
$ sudo mn --controller remote --topo=single,3 --mac --arp
- Verify that the hosts can ping each other
mininet> xterm h1 h2 h3 h2$ tcpdump -xx -n -i h2-eth0 h3$ tcpdump -xx -n -i h3-eth0 h1$ ping -c1 10.0.0.2
- Observe what happens when you do
h1$ ping -c1 10.0.0.5
- Look into the switch code: pyretic/pyretic/examples/pyretic_switch1.py
(60P) Implement a layer 2 firewall that runs alongside the MAC learning module on the pyretic OpenFlow Controller
- Your firewall should be agnostic to the underlying topology
- Write code to block h1 to h2 and h2 to h1 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02)
- Start with pyretic_firewall.py
- See in pyretic_firewall.py for instructions on how to test the code as well as how to write the code
- To Test run:
$ sudo mn --controller remote --topo=single,3 --mac --arp $ pyretic.py –v high pyretic.examples.pyretic_firewall