106 | | root@debian:~# ping 172.16.1.1 -c 4 |
| 107 | eth0 Link encap:Ethernet HWaddr 02:16:3e:5d:c7:38 |
| 108 | inet addr:10.103.0.13 Bcast:10.103.0.255 Mask:255.255.255.0 |
| 109 | inet6 addr: fe80::16:3eff:fe5d:c738/64 Scope:Link |
| 110 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 111 | RX packets:124 errors:0 dropped:0 overruns:0 frame:0 |
| 112 | TX packets:129 errors:0 dropped:0 overruns:0 carrier:0 |
| 113 | collisions:0 txqueuelen:1000 |
| 114 | RX bytes:20713 (20.2 KiB) TX bytes:18945 (18.5 KiB) |
| 115 | |
| 116 | eth1 Link encap:Ethernet HWaddr 52:54:00:3c:86:9a |
| 117 | inet addr:172.16.1.1 Bcast:172.16.255.255 Mask:255.255.0.0 |
| 118 | inet6 addr: fe80::5054:ff:fe3c:869a/64 Scope:Link |
| 119 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 120 | RX packets:14 errors:0 dropped:0 overruns:0 frame:0 |
| 121 | TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 |
| 122 | collisions:0 txqueuelen:1000 |
| 123 | RX bytes:996 (996.0 B) TX bytes:378 (378.0 B) |
| 124 | |
| 125 | lo Link encap:Local Loopback |
| 126 | inet addr:127.0.0.1 Mask:255.0.0.0 |
| 127 | inet6 addr: ::1/128 Scope:Host |
| 128 | UP LOOPBACK RUNNING MTU:16436 Metric:1 |
| 129 | RX packets:0 errors:0 dropped:0 overruns:0 frame:0 |
| 130 | TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 |
| 131 | collisions:0 txqueuelen:0 |
| 132 | RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) |
| 133 | |
| 134 | root@debian:~# ping 172.16.1.2 -c 4 |
| 135 | PING 172.16.1.2 (172.16.1.2) 56(84) bytes of data. |
| 136 | 64 bytes from 172.16.1.2: icmp_req=1 ttl=64 time=10.1 ms |
| 137 | 64 bytes from 172.16.1.2: icmp_req=2 ttl=64 time=0.772 ms |
| 138 | 64 bytes from 172.16.1.2: icmp_req=3 ttl=64 time=1.78 ms |
| 139 | 64 bytes from 172.16.1.2: icmp_req=4 ttl=64 time=0.618 ms |
| 140 | |
| 141 | --- 172.16.1.2 ping statistics --- |
| 142 | 4 packets transmitted, 4 received, 0% packet loss, time 3002ms |
| 143 | rtt min/avg/max/mdev = 0.618/3.322/10.116/3.947 ms |
111 | | Once logged in, show current modules loaded, load a module, and then remove the mofule: |
| 148 | Show current modules loaded, load a module, and then remove the module: |
| 149 | {{{ |
| 150 | root@debian:~# lsmod |
| 151 | Module Size Used by |
| 152 | acpiphp 15157 0 |
| 153 | pci_hotplug 21587 1 acpiphp |
| 154 | snd_pcm 60487 0 |
| 155 | snd_timer 15598 1 snd_pcm |
| 156 | snd 46526 2 snd_pcm,snd_timer |
| 157 | soundcore 4598 1 snd |
| 158 | snd_page_alloc 6249 1 snd_pcm |
| 159 | i2c_piix4 8328 0 |
| 160 | psmouse 49937 0 |
| 161 | processor 29935 0 |
| 162 | button 4650 0 |
| 163 | serio_raw 3752 0 |
| 164 | pcspkr 1699 0 |
| 165 | virtio_balloon 2961 0 |
| 166 | evdev 7352 0 |
| 167 | i2c_core 15819 1 i2c_piix4 |
| 168 | ext3 106710 1 |
| 169 | jbd 37317 1 ext3 |
| 170 | mbcache 5050 1 ext3 |
| 171 | dm_mod 53946 0 |
| 172 | ata_generic 3239 0 |
| 173 | virtio_blk 4209 1 |
| 174 | ata_piix 21124 0 |
| 175 | virtio_net 10573 0 |
| 176 | uhci_hcd 18521 0 |
| 177 | ehci_hcd 32097 0 |
| 178 | libata 133776 2 ata_generic,ata_piix |
| 179 | floppy 49087 0 |
| 180 | thermal 11674 0 |
| 181 | thermal_sys 11942 2 processor,thermal |
| 182 | virtio_pci 5511 0 |
| 183 | virtio_ring 3258 1 virtio_pci |
| 184 | virtio 3309 4 virtio_balloon,virtio_blk,virtio_net,virtio_pci |
| 185 | usbcore 123122 3 uhci_hcd,ehci_hcd |
| 186 | nls_base 6377 1 usbcore |
| 187 | scsi_mod 126725 1 libata |
| 188 | root@debian:~# |
| 189 | root@debian:~# modprobe dummy |
| 190 | root@debian:~# lsmod |grep dummy |
| 191 | dummy 1584 0 |
| 192 | root@debian:~# modprobe -r dummy |
| 193 | root@debian:~# lsmod |grep dummy |
| 194 | root@debian:~# |
| 195 | }}} |
145 | | }}} |
146 | | |
147 | | == Step 14. Verify that experimenters 1 and 2 cannot use the control plane to access each other's resources == |
148 | | (e.g. via unauthenticated SSH, shared writable filesystem mount) |
149 | | |
150 | | Attempt to login into other experiment fails and not able to mount other experiment file system. |
| 229 | <login authentication="ssh-keys" hostname="192.1.242.14" port="22" username="root"/> |
| 230 | <login authentication="ssh-keys" hostname="192.1.242.15" port="22" username="root"/> |
| 231 | }}} |
| 232 | |
| 233 | == Step 14. Verify that experimenters 1 and 2 cannot use the control plane to access each others resources == |
| 234 | |
| 235 | Verify that attempt to login into other experiment nodes fails and verify that users are not able to mount each others experiment file system. |
| 236 | |
| 237 | As experimenter1 (lnevers@bbn.com) attempt in to login to the second experiment EG-EXP-2-exp2: |
| 238 | {{{ |
| 239 | lnevers@arendia:~$ ssh 192.1.242.14 -l root |
| 240 | root@192.1.242.14's password: |
| 241 | Permission denied, please try again. |
| 242 | root@192.1.242.14's password: |
| 243 | Permission denied, please try again. |
| 244 | root@192.1.242.14's password: |
| 245 | Permission denied (publickey,password). |
| 246 | lnevers@arendia:~$ |
| 247 | }}} |
| 248 | |
| 249 | As experimenter1 (lnevers@bbn.com) login to own host and then attempt to get access to experimenter2 (lnevers1@bbn.com) host: |
| 250 | {{{ |
| 251 | lnevers@arendia:~$ ssh root@192.1.242.12 |
| 252 | root@debian:~# ssh 10.103.0.12 |
| 253 | The authenticity of host '10.103.0.12 (10.103.0.12)' can't be established. |
| 254 | RSA key fingerprint is e7:1d:db:48:93:6c:9b:95:77:b8:46:b9:ea:9e:06:21. |
| 255 | Are you sure you want to continue connecting (yes/no)? yes |
| 256 | Warning: Permanently added '10.103.0.12' (RSA) to the list of known hosts. |
| 257 | root@10.103.0.12's password: |
| 258 | Permission denied, please try again. |
| 259 | root@10.103.0.12's password: |
| 260 | Permission denied, please try again. |
| 261 | root@10.103.0.12's password: |
| 262 | Permission denied (publickey,password). |
| 263 | root@debian:~# |
| 264 | }}} |
154 | | Verify that the two experiments cannot interact. Review usage statistics. |
| 268 | Reviewed usage statistics on the nodes: |
| 269 | {{{ |
| 270 | root@debian:~# top |
| 271 | |
| 272 | top - 14:40:58 up 40 min, 2 users, load average: 0.00, 0.00, 0.00 |
| 273 | Tasks: 54 total, 1 running, 53 sleeping, 0 stopped, 0 zombie |
| 274 | Cpu(s): 0.0%us, 0.0%sy, 0.0%ni, 99.7%id, 0.3%wa, 0.0%hi, 0.0%si, 0.0%st |
| 275 | Mem: 121796k total, 113948k used, 7848k free, 5288k buffers |
| 276 | Swap: 0k total, 0k used, 0k free, 85428k cached |
| 277 | |
| 278 | PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND |
| 279 | 1 root 20 0 8352 784 648 S 0.0 0.6 0:00.32 init |
| 280 | 2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd |
| 281 | 3 root RT 0 0 0 0 S 0.0 0.0 0:00.00 migration/0 |
| 282 | 4 root 20 0 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0 |
| 283 | 5 root RT 0 0 0 0 S 0.0 0.0 0:00.00 watchdog/0 |
| 284 | 6 root 20 0 0 0 0 S 0.0 0.0 0:00.03 events/0 |
| 285 | 7 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuset |
| 286 | 8 root 20 0 0 0 0 S 0.0 0.0 0:00.00 khelper |
| 287 | 9 root 20 0 0 0 0 S 0.0 0.0 0:00.00 netns |
| 288 | 10 root 20 0 0 0 0 S 0.0 0.0 0:00.00 async/mgr |
| 289 | 11 root 20 0 0 0 0 S 0.0 0.0 0:00.00 pm |
| 290 | 12 root 20 0 0 0 0 S 0.0 0.0 0:00.00 sync_supers |
| 291 | 13 root 20 0 0 0 0 S 0.0 0.0 0:00.00 bdi-default |
| 292 | 14 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kintegrityd/0 |
| 293 | 15 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kblockd/0 |
| 294 | 16 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kacpid |
| 295 | 17 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kacpi_notify |
| 296 | 18 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kacpi_hotplug |
| 297 | 19 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kseriod |
| 298 | }}} |
| 299 | |
| 300 | No issues were found. |
157 | | Issue ifconfig and verified that each host has unique MAC address. |
| 303 | Issued ifconfig on each assigned host and verified that each host has unique MAC address. |
| 304 | |
| 305 | The ifconfig output from the first host: |
| 306 | {{{ |
| 307 | $ ssh 192.1.242.14 -l root |
| 308 | root@debian:~# ifconfig |
| 309 | eth0 Link encap:Ethernet HWaddr 02:16:3e:1d:a9:37 |
| 310 | inet addr:10.103.0.12 Bcast:10.103.0.255 Mask:255.255.255.0 |
| 311 | inet6 addr: fe80::16:3eff:fe1d:a937/64 Scope:Link |
| 312 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 313 | RX packets:444 errors:0 dropped:0 overruns:0 frame:0 |
| 314 | TX packets:333 errors:0 dropped:0 overruns:0 carrier:0 |
| 315 | collisions:0 txqueuelen:1000 |
| 316 | RX bytes:62367 (60.9 KiB) TX bytes:52890 (51.6 KiB) |
| 317 | |
| 318 | eth1 Link encap:Ethernet HWaddr 52:54:00:3f:35:36 |
| 319 | inet addr:172.16.1.1 Bcast:172.16.255.255 Mask:255.255.0.0 |
| 320 | inet6 addr: fe80::5054:ff:fe3f:3536/64 Scope:Link |
| 321 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 322 | RX packets:24 errors:0 dropped:0 overruns:0 frame:0 |
| 323 | TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 |
| 324 | collisions:0 txqueuelen:1000 |
| 325 | RX bytes:1664 (1.6 KiB) TX bytes:398 (398.0 B) |
| 326 | |
| 327 | lo Link encap:Local Loopback |
| 328 | inet addr:127.0.0.1 Mask:255.0.0.0 |
| 329 | inet6 addr: ::1/128 Scope:Host |
| 330 | UP LOOPBACK RUNNING MTU:16436 Metric:1 |
| 331 | RX packets:0 errors:0 dropped:0 overruns:0 frame:0 |
| 332 | TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 |
| 333 | collisions:0 txqueuelen:0 |
| 334 | RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) |
| 335 | }}} |
| 336 | The ifconfig output from the second host: |
| 337 | {{{ |
| 338 | $ ssh 192.1.242.15 -l root |
| 339 | root@debian:~# ifconfig |
| 340 | eth0 Link encap:Ethernet HWaddr 02:16:3e:60:e6:e4 |
| 341 | inet addr:10.103.0.15 Bcast:10.103.0.255 Mask:255.255.255.0 |
| 342 | inet6 addr: fe80::16:3eff:fe60:e6e4/64 Scope:Link |
| 343 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 344 | RX packets:229 errors:0 dropped:0 overruns:0 frame:0 |
| 345 | TX packets:203 errors:0 dropped:0 overruns:0 carrier:0 |
| 346 | collisions:0 txqueuelen:1000 |
| 347 | RX bytes:37642 (36.7 KiB) TX bytes:28810 (28.1 KiB) |
| 348 | |
| 349 | eth1 Link encap:Ethernet HWaddr 52:54:00:23:e9:16 |
| 350 | inet addr:172.16.1.2 Bcast:172.16.255.255 Mask:255.255.0.0 |
| 351 | inet6 addr: fe80::5054:ff:fe23:e916/64 Scope:Link |
| 352 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 353 | RX packets:15 errors:0 dropped:0 overruns:0 frame:0 |
| 354 | TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 |
| 355 | collisions:0 txqueuelen:1000 |
| 356 | RX bytes:882 (882.0 B) TX bytes:398 (398.0 B) |
| 357 | |
| 358 | lo Link encap:Local Loopback |
| 359 | inet addr:127.0.0.1 Mask:255.0.0.0 |
| 360 | inet6 addr: ::1/128 Scope:Host |
| 361 | UP LOOPBACK RUNNING MTU:16436 Metric:1 |
| 362 | RX packets:0 errors:0 dropped:0 overruns:0 frame:0 |
| 363 | TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 |
| 364 | collisions:0 txqueuelen:0 |
| 365 | RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) |
| 366 | }}} |
162 | | Ability to exchange traffic shows that the mac addresses are learned. |
163 | | |
| 371 | Ability to exchange traffic shows that the mac addresses are learned on the data plane switch. On the second host sent traffic to remote: |
| 372 | {{{ |
| 373 | root@debian:~# ifconfig eth1 |
| 374 | eth1 Link encap:Ethernet HWaddr 52:54:00:23:e9:16 |
| 375 | inet addr:172.16.1.2 Bcast:172.16.255.255 Mask:255.255.0.0 |
| 376 | inet6 addr: fe80::5054:ff:fe23:e916/64 Scope:Link |
| 377 | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| 378 | RX packets:16 errors:0 dropped:0 overruns:0 frame:0 |
| 379 | TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 |
| 380 | collisions:0 txqueuelen:1000 |
| 381 | RX bytes:928 (928.0 B) TX bytes:398 (398.0 B) |
| 382 | |
| 383 | root@debian:~# ping 172.16.1.1 -c 3 |
| 384 | PING 172.16.1.1 (172.16.1.1) 56(84) bytes of data. |
| 385 | 64 bytes from 172.16.1.1: icmp_req=1 ttl=64 time=10.6 ms |
| 386 | 64 bytes from 172.16.1.1: icmp_req=2 ttl=64 time=0.593 ms |
| 387 | 64 bytes from 172.16.1.1: icmp_req=3 ttl=64 time=0.763 ms |
| 388 | |
| 389 | --- 172.16.1.1 ping statistics --- |
| 390 | 3 packets transmitted, 3 received, 0% packet loss, time 2002ms |
| 391 | rtt min/avg/max/mdev = 0.593/4.016/10.692/4.721 ms |
| 392 | }}} |
| 393 | |