783
edits
Exercises firewall: Difference between revisions
→(60P) Advanced Firewall ( I will give you hints)
| Line 22: | Line 22: | ||
** Take a look at [http://sdnhub.org/tutorials/pox/] to know how to set match, action and etc. | ** Take a look at [http://sdnhub.org/tutorials/pox/] to know how to set match, action and etc. | ||
** Take a look here for commands, examples on how to create match, action [https://openflow.stanford.edu/display/ONL/POX+Wiki] | ** Take a look here for commands, examples on how to create match, action [https://openflow.stanford.edu/display/ONL/POX+Wiki] | ||
** Topology [https:// | ** Topology [https://projects.gwdg.de/projects/mayutan-public/repository/raw/courses/SDN/2017_2018_WS/exercises/ex3/1.firewall-fig.pdf] | ||
** Aim: Implement a layer 2 firewall that runs alongside the MAC learning module on the POX OpenFlow Controller. Your firewall should be agnostic to the underlying topology. Take MAC pair list as input and install it on the switches in the network | ** Aim: Implement a layer 2 firewall that runs alongside the MAC learning module on the POX OpenFlow Controller. Your firewall should be agnostic to the underlying topology. Take MAC pair list as input and install it on the switches in the network | ||
** Note that MAC learning can be done in conjunction with firewall. Therefore you might have to assign priority to each application. | ** Note that MAC learning can be done in conjunction with firewall. Therefore you might have to assign priority to each application. | ||
** Copy firewall.py from [https:// | ** Copy firewall.py from [https://projects.gwdg.de/projects/mayutan-public/repository/raw/courses/SDN/2017_2018_WS/exercises/ex3/firewall.py] into pox/pox/misc folder | ||
** Start editing firewall.py (Note that you can enter the MAC ids directly, no need to read from a .csv file as stated in the same code | ** Start editing firewall.py (Note that you can enter the MAC ids directly, no need to read from a .csv file as stated in the same code | ||
*** Write code to block h1 to h2 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02) | *** Write code to block h1 to h2 (Mac IDs: 00:00:00:00:00:01, 00:00:00:00:00:02) | ||