SUSE Linux Enterprise Server Administration (Course 3037)

SUSE Linux Enterprise Server Administration (Course 3037) Chapter 7 Connect the SUSE Linux Enterprise Server to the Network

Objectives • Configure Your Network Connection • Configure and Manage Routes • Test the Network Interface SUSE Linux Enterprise Server Administration (Course 3037)

Configure Your Network Connection • Objectives • TCP/IP Fundamentals • Network Interfaces in Linux • Network Interface Requirements • How to Configure a Network Card with YaST • How to Modify a Network Card Manually SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals • TCP/IP network components • Host • Receives requests for information from the Internet • TCP/IP • Defines how packets should be structured • IP packet • Electronic package of data sent over the Internet • Router • Forwards an IP packet to the next network point • Firewall • Protects the resources of a private intranet or network SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals (continued) • IP address structure • Host is also referred to as a node or station • Routers locate hosts based on their IP addresses • IP address consists of four bytes: • A network address (from 1 to 3 bytes) • A node or station address (from 1 to 3 bytes) • Node address 0, and 255 are reserved • IP addresses take the form of a dotted octet • Each byte is separated by a dot SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals (continued) SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals (continued) • Network classes and IP addresses • There are five address classes defined in IP • Classes A through C can be assigned • Classes D and E are reserved • Class A addresses • Networks: 126 • Hosts per network: 16,777,216 • Class B addresses • Networks: 16,384 • Hosts per network: 65,534 SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals (continued) • Network classes and IP addresses • Class C addresses • Networks: 2,097,152 • Hosts per network: 255 • Class D addresses • First byte is in the 224 to 239 range • Used for multicast packets • Class E addresses • First byte is in the 240 to 255 range • Reserved for experimental use SUSE Linux Enterprise Server Administration (Course 3037)

TCP/IP Fundamentals (continued) • Special IP addresses • See Table 7-1 SUSE Linux Enterprise Server Administration (Course 3037)

Network Interfaces in Linux • Network interfaces • Always referred to with a fixed name • Name depends on type and position of the network card in the computer • First card is called eth0, second is eth1, and so on • Drives • Provide support for network cards and protocols • Kernel modules that can be loaded if required • SUSE Linux Enterprise Server • Contains drivers for all common network cards SUSE Linux Enterprise Server Administration (Course 3037)

Network Interface Requirements • Network card is detected during installation • And a suitable driver is loaded • Command ifstatus device • Verifies network card has been integrated correctly • With the appropriate driver • Kernel support implemented as a module • Name of the module is entered by YaST • In a file in /etc/sysconfig/hardware/ • Drivers are autodetected for hotplug cards • No configuration is necessary SUSE Linux Enterprise Server Administration (Course 3037)

How to Configure a Network Card with YaST • Steps • Start the YaST Network Card module • Select a network card from the list (conditional) • Modify network card settings (conditional) SUSE Linux Enterprise Server Administration (Course 3037)

How to Configure a Network Card with YaST (continued) SUSE Linux Enterprise Server Administration (Course 3037)

How to Configure a Network Card with YaST (continued) • Steps • Do one of the following • Add a new network card configuration • Modify an existing configuration • Delete a listed configuration • Select Next • Save the configuration by selecting Finish • Check network card activation and settings • From the command line using ifconfig or ip SUSE Linux Enterprise Server Administration (Course 3037)

How to Configure a Network Card with YaST (continued) SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify a Network Card Manually • Configure the network interface with ifconfig • ifconfig (/sbin/ifconfig) • Used to manually configure a network card • Display information about status of network interfaces • Changes done with ifconfig are temporary • Syntax • ifconfig [interface] [address] [options] • ifconfig eth0 192.168.0.1 • Assigns 192.168.0.1 to network card eth0 • ifconfig eth0 up • Activates eth0 SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify a Network Card Manually (continued) SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify a Network Card Manually (continued) • Configure IP aliases with ifconfig • IP aliases • Used to define more than one IP address for a network card • It is always better to use genuine addresses • Configure an IP alias with ifconfig or YaST • View IP aliases by entering ip address show SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify a Network Card Manually (continued) • Modify network interface configuration files • Configuration files directory • /etc/sysconfig/network/ • Contains file for each configured network adapter • Network interfaces are activated at boot • By script /etc/init.d/network • /etc/sysconfig/network/config • Contains general variables for the script • Directory /etc/sysconfig/network/scripts/ • Contains additional scripts run by /etc/init.d/network SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify a Network Card Manually (continued) • Modify network interface configuration files • Activating and deactivating network interfaces • Use commands /sbin/ifup, /sbin/ifdown, /sbin/ifstatus • Use script /etc/init.d/network • Configure host and domain names • Modify the following files • /etc/HOSTNAME • /etc/resolv.conf SUSE Linux Enterprise Server Administration (Course 3037)

Configure and Manage Routes • Objectives • Route Types • How to Manage Routes with route • How to Modify Route Configuration Files • How to Activate Routing • How to Manage the Network Interface and Routes with ip SUSE Linux Enterprise Server Administration (Course 3037)

Route Types • Host routes • Define path data packet can take for exactly one destination host • Network and gateway routes • Define path data packet can take for an entire destination network • Default route • Special gateway route • Defines route data packet can take if no previous route matched destination of the packet SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage Routes with route • Use command route (/sbin/route) • To check and edit the routing table • Create a route • Syntax • route add [-net | -host destination] [netmask mask] [gw gateway] [metric n] [dev interface] • Static routing is set up by default • Dynamic routing needs a routing daemon • You also need to add the option metric n SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage Routes with route (continued) • Delete a route • Syntax • route del [-net | -host destination] [gw gateway] [netmask mask] [dev interface] • route del default • Deletes the default route SUSE Linux Enterprise Server Administration (Course 3037)

How to Modify Route Configuration Files • An entry is generated in the kernel routing table • For all active network interfaces • Additional static routes • Configured in the files • /etc/sysconfig/network/routes • /etc/sysconfig/network/ifroute-Interface • Configuration files include the following fields: • Destination network/destination host • The gateway to use • The network mask • The network interface SUSE Linux Enterprise Server Administration (Course 3037)

How to Activate Routing • A Linux host can also serve as a router itself • This property is deactivated by default • Activate routing by adding entry in the process file • echo 1 > /proc/sys/net/ipv4/ip_forward • 0 will deactivate routing • Activate routing permanently • Set following variable in /etc/sysconfig/sysctl • IP_FORWARD=“yes” SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage the Network Interface and Routes with ip • SUSE Linux Enterprise Server ip command • Replaces ifconfig and route commands • ip general syntax • ip [options] object [command [parameters]] • Modifications made with command ip are temporary • Tasks performed with ip: • Assign Parameters for Network Interfaces (ip link) • Assign IP Addresses (ip address) • Set Up Routes (ip route) SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage the Network Interface and Routes with ip (continued) SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage the Network Interface and Routes with ip (continued) • Assign Parameters for Network Interfaces (ip link) • Use ip commands • set and show • Assign IP Addresses (ip address) • Most important ip commands • add, del, and show • Set Up Routes (ip route) • Use ip commands • add, change, delete, and show SUSE Linux Enterprise Server Administration (Course 3037)

How to Manage the Network Interface and Routes with ip (continued) SUSE Linux Enterprise Server Administration (Course 3037)

Test the Network Interface • Objectives • Check a Network Connection between Hosts (ping) • Check the Routing (traceroute) • Analyze Network Traffic (tcpdump and ethereal) • Determine the Status of All Network Connections (netstat) • Check for Service Availability (netcat) SUSE Linux Enterprise Server Administration (Course 3037)

Check a Network Connection between Hosts (ping) • Command ping (/sbin/ping) • Simple tool for checking network connections • How the command tests a connection • Enter ping host • Server sends ICMP datagram to the target host • With the echo request • Target host answers with ICMP datagram • Containing the message echo reply • ICMP protocol does not involve higher level protocols • Command options • See Table 7-7 SUSE Linux Enterprise Server Administration (Course 3037)

Check a Network Connection between Hosts (ping) (continued) SUSE Linux Enterprise Server Administration (Course 3037)

Check a Network Connection between Hosts (ping) (continued) • Troubleshooting suggestions • Start by checking the host-internal network • ping localhost • Then check network interface connected to your host • ping interface_addr • Check network segment to the next closest network element • In the direction of the target host • Until the check ends at the target host SUSE Linux Enterprise Server Administration (Course 3037)

Check the Routing (traceroute) • Command traceroute (/usr/sbin/traceroute) • Helps you follow route taken by an IP datagram • How a route is traced • traceroute sends three UDP datagrams with TTL = 1 • Then increases value for the next three datagrams • TTL is reduced by 1 when UDP datagram passes through a router • Datagram is discarded at TTL=0 • Gateway at TTL=0 sends an ICMP datagram • With message “TTL exceeded” back to the sender SUSE Linux Enterprise Server Administration (Course 3037)

Check the Routing (traceroute) (continued) • How a route is traced • If UDP datagram reaches the target host • Host replies with ICMP datagram Port Unreachable • From this message • Sender recognizes that target host has now been reached • Syntax • traceroute host • Command options • See Table 7-8 SUSE Linux Enterprise Server Administration (Course 3037)

Check the Routing (traceroute) (continued) SUSE Linux Enterprise Server Administration (Course 3037)

Check the Routing (traceroute) (continued) • Troubleshooting suggestions • Common reason for defective communication • Transport path between these networks contains errors • traceroute • Excellent tool for checking routers located on this transport path • Shows at which hop the transport path is faulty SUSE Linux Enterprise Server Administration (Course 3037)

Analyze Network Traffic (tcpdump and ethereal) • How to use tcpdump • Command tcpdump (/usr/sbin/tcpdump) • Lets you analyze data packets • Syntax • tcpdump –i interface • Puts interface in promiscuous mode • How to use ethereal • Graphical tool • Provides the same functionality as tcpdump • Must be first installed using YaST SUSE Linux Enterprise Server Administration (Course 3037)

SUSE Linux Enterprise Server Administration (Course 3037)