{"id":363,"date":"2023-10-27T16:51:15","date_gmt":"2023-10-27T20:51:15","guid":{"rendered":"https:\/\/opentextbc.ca\/paloalto\/back-matter\/gns3\/"},"modified":"2023-10-27T16:51:15","modified_gmt":"2023-10-27T20:51:15","slug":"gns3","status":"publish","type":"back-matter","link":"https:\/\/opentextbc.ca\/paloalto\/back-matter\/gns3\/","title":{"raw":"Appendix: GNS3 Basics","rendered":"Appendix: GNS3 Basics"},"content":{"raw":"In this chapter, we'll be going through the basics in GNS3. Try to play and familiarize yourself with this environment as this is a good tool for network simulations.\n

Configure Your Palo Alto Firewall Template and Adding the Device<\/h2>\nLets start by modifying the GNS3 template of the Palo Alto firewall by right clicking the existing template, and clicking on \"configure template\".\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"444\"]\"Configure Figure A.1: Configure template[\/caption]\n

Make sure the max amount of RAM is set to at least 4096MB, and the amount of vCPUs are at least 2.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"500\"]\"Configure Figure A.2: Configure RAM and vCPUs[\/caption]\n

Now close the window, and drag in the Palo Alto device from the left hand pane.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"744\"]\"Dragging Figure A.3: Dragging the Palo Alto[\/caption]\n\nOnce you've dragged in the Palo Alto device, right click it, then click \"start\".\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"300\"]\"Starting Figure A.4: Starting the Palo Alto[\/caption]\n\nKeep in mind that this device takes a while to start.\n

Webterm Installation<\/h2>\nLet's begin by clicking \"new template\" on the bottom left hand of GNS3.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1113\"]\"Add Figure A.5: Add a new template[\/caption]\n

We want to install this into the GNS3 VM. Click on the option to \"Install an appliance from the GNS3 Server\", then click Next.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.6: Select \"Install an appliance from the GNS3 server\"[\/caption]\n

On the next window, search for \"webterm\", select the option under \"guests\", then click install.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Search Figure A.7: Search for \"webterm\"[\/caption]\n

On the next screen, ensure that \"install the appliance on the GNS3 VM\", is already selected, then click Next.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\" Figure A.8: Select \"Install the appliance on the GNS3 VM\"[\/caption]\n

On the next screen, click Finish.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1004\"]\"Final Figure A.9: Final step of Installation of webterm[\/caption]\n\nAfter that, it should appear under all devices in GNS3.\n

Configure Your Webterm Device with a Static IP<\/h2>\nDrag in the webterm device from the left pane. Then once it finishes downloading the docker file, right click it and select \"edit config\".\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"400\"]\"Edit Figure A.10: Edit config[\/caption]\n

A window will pop up containing the device's network configuration. We want to modify this file to match the specified IP address. The final modification should look like a little like this:<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"500\"]\"Configure Figure A.11: Configure the static IP address[\/caption]\n\nAfter these modifications, click on the save button on the bottom right of the window.\n

Configure a Webterm DHCP Client<\/h2>\nWe just need to uncomment these 2 lines to enable DHCP. Click on save and we're done.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"770\"]\"Configure Figure A.12: Configure the DHCP IP address[\/caption]\n

Connect Devices in GNS3<\/h2>\nPlease see the example in the GIF below (if using an offline version of this book, go to the web version of the appendix of Palo Alto Firewall<\/em><\/a>):\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"720\"]\"Connecting Figure A.13: Connecting devices[\/caption]\n

Use NAT in GNS3<\/h2>\nThe NAT device in GNS3 will allow devices in our virtual topology to communicate with the internet. This device is under the all devices section of GNS3.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"500\"]\"Using Figure A.14: Using NAT[\/caption]\n\nMake sure you select the GNS3VM as the option whenever you see this window (applies for all devices).\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"414\"]\"Select Figure A.15: Select GNS3 VM[\/caption]\n

Use Kali in GNS3<\/h2>\nSometimes we need to use Kali to demonstrate an attack. Please keep in mind that Kali is used strictly for testing purposes.\n\nLet's begin by clicking \"new template\" on the bottom left hand of GNS3.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1113\"]\"Create Figure A.16: Create a new template[\/caption]\n

We want to install this into the GNS3 VM. Click on the option to \"Install an appliance from the GNS3 Server\", then click Next.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.17: Select \"Install an appliance from the GNS3 server\"[\/caption]\n

On the next window, search for \"kali\", and select the non \"CLI\" option.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Search Figure A.18: Search for \"kali\"[\/caption]\n

On the next screen, ensure that \"install the appliance on the GNS3 VM\", is already selected, then click Next.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.19: Select \"Install the appliance on the GNS3 VM\"[\/caption]\n

Next again.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.20: Select Qemu binary[\/caption]\n

Expand the \"2019\" option, and download both missing files. Also, you can download the latest version. Version 2019 is more stable in GNS3.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.21: Select \"kali-linux-2019.3-amd64.iso\"[\/caption]\n

After that, import the downloaded file to the specified 2019 selection.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"946\"]\"Select Figure A.22: Select \"kali-linux-2019.3-amd64.iso\"[\/caption]\n

It should take a second, but GNS3 will start to load up the ISO into the GNS3VM.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Loading Figure A.23: Loading the ISO image[\/caption]\n

After that, click the 2019 version again, then click Next.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Ready Figure A.24: Ready to install[\/caption]\n

Then click Finish.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Final Figure A.25: Final step of configuration[\/caption]\n

Use WordPress in GNS3<\/h2>\nSometimes we need a basic webserver to demonstrate website functionality. This can be accomplished using the WordPress appliance in GNS3. Start by clicking the new template button on the bottom of the page.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1113\"]\"Create Figure A.26: Create a new template[\/caption]\n

We want to install an appliance from the GNS3 server.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Select Figure A.27: Select \"Install an appliance from the GNS3 server\"[\/caption]\n

Lookup \"WordPress\", then click Install.<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"902\"]\"Search Figure A.28: Search for \"WordPress\"[\/caption]\n\nJust press next for the following dialog boxes, and you should now have WordPress!\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"636\"]\"Verify Figure A.29: Verify WordPress Installation[\/caption]\n

Configure WordPress<\/h2>\nAfter changing the interface configuration, start the machine. You will see a dialogue box:\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1144\"]\" Figure A.30: Running WordPress[\/caption]\n\nPress enter and you'll see the device under some basic configuration. Once you get to the prompt, you can exit that window, and you will have WordPress ready!\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"1154\"]\"WordPress Figure A.31: WordPress is Ready![\/caption]\n

Use Switches in GNS3<\/h2>\nUsually we just use switches to connect multiple devices together in GNS3. However, it can also be used for VLANs. Start by dragging one in and double clicking it.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"450\"]\"Switch Figure A.32: Switch Configuration[\/caption]\n\nHere you can see that they are all basically untagged. To configure a specific port, simply double click your desired port.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"450\"]\"Double Figure A.33: Double click on port7[\/caption]\n

Configure the necessary settings for them (access is for tagging, dot1q is for trunking).<\/p>\n\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"450\"]\"Select Figure A.34: Select port7 as dot1q[\/caption]\n\nClick on add to apply the changes.\n\n[caption id=\"attachment_362\" align=\"aligncenter\" width=\"450\"]\"Click Figure A.35: Click on Add to apply the changes[\/caption]\n\nThen click Apply and OK.","rendered":"

In this chapter, we’ll be going through the basics in GNS3. Try to play and familiarize yourself with this environment as this is a good tool for network simulations.<\/p>\n

Configure Your Palo Alto Firewall Template and Adding the Device<\/h2>\n

Lets start by modifying the GNS3 template of the Palo Alto firewall by right clicking the existing template, and clicking on “configure template”.<\/p>\n

\"Configure
Figure A.1: Configure template<\/figcaption><\/figure>\n

Make sure the max amount of RAM is set to at least 4096MB, and the amount of vCPUs are at least 2.<\/p>\n

\"Configure
Figure A.2: Configure RAM and vCPUs<\/figcaption><\/figure>\n

Now close the window, and drag in the Palo Alto device from the left hand pane.<\/p>\n

\"Dragging
Figure A.3: Dragging the Palo Alto<\/figcaption><\/figure>\n

Once you’ve dragged in the Palo Alto device, right click it, then click “start”.<\/p>\n

\"Starting
Figure A.4: Starting the Palo Alto<\/figcaption><\/figure>\n

Keep in mind that this device takes a while to start.<\/p>\n

Webterm Installation<\/h2>\n

Let’s begin by clicking “new template” on the bottom left hand of GNS3.<\/p>\n

\"Add
Figure A.5: Add a new template<\/figcaption><\/figure>\n

We want to install this into the GNS3 VM. Click on the option to “Install an appliance from the GNS3 Server”, then click Next.<\/p>\n

\"Select
Figure A.6: Select “Install an appliance from the GNS3 server”<\/figcaption><\/figure>\n

On the next window, search for “webterm”, select the option under “guests”, then click install.<\/p>\n

\"Search
Figure A.7: Search for “webterm”<\/figcaption><\/figure>\n

On the next screen, ensure that “install the appliance on the GNS3 VM”, is already selected, then click Next.<\/p>\n

\"Select
Figure A.8: Select “Install the appliance on the GNS3 VM”<\/figcaption><\/figure>\n

On the next screen, click Finish.<\/p>\n

\"Final
Figure A.9: Final step of Installation of webterm<\/figcaption><\/figure>\n

After that, it should appear under all devices in GNS3.<\/p>\n

Configure Your Webterm Device with a Static IP<\/h2>\n

Drag in the webterm device from the left pane. Then once it finishes downloading the docker file, right click it and select “edit config”.<\/p>\n

\"Edit
Figure A.10: Edit config<\/figcaption><\/figure>\n

A window will pop up containing the device’s network configuration. We want to modify this file to match the specified IP address. The final modification should look like a little like this:<\/p>\n

\"Configure
Figure A.11: Configure the static IP address<\/figcaption><\/figure>\n

After these modifications, click on the save button on the bottom right of the window.<\/p>\n

Configure a Webterm DHCP Client<\/h2>\n

We just need to uncomment these 2 lines to enable DHCP. Click on save and we’re done.<\/p>\n

\"Configure
Figure A.12: Configure the DHCP IP address<\/figcaption><\/figure>\n

Connect Devices in GNS3<\/h2>\n

Please see the example in the GIF below (if using an offline version of this book, go to the web version of the appendix of Palo Alto Firewall<\/em><\/a>):<\/p>\n

\"Connecting
Figure A.13: Connecting devices<\/figcaption><\/figure>\n

Use NAT in GNS3<\/h2>\n

The NAT device in GNS3 will allow devices in our virtual topology to communicate with the internet. This device is under the all devices section of GNS3.<\/p>\n

\"Using
Figure A.14: Using NAT<\/figcaption><\/figure>\n

Make sure you select the GNS3VM as the option whenever you see this window (applies for all devices).<\/p>\n

\"Select
Figure A.15: Select GNS3 VM<\/figcaption><\/figure>\n

Use Kali in GNS3<\/h2>\n

Sometimes we need to use Kali to demonstrate an attack. Please keep in mind that Kali is used strictly for testing purposes.<\/p>\n

Let’s begin by clicking “new template” on the bottom left hand of GNS3.<\/p>\n

\"Create
Figure A.16: Create a new template<\/figcaption><\/figure>\n

We want to install this into the GNS3 VM. Click on the option to “Install an appliance from the GNS3 Server”, then click Next.<\/p>\n

\"Select
Figure A.17: Select “Install an appliance from the GNS3 server”<\/figcaption><\/figure>\n

On the next window, search for “kali”, and select the non “CLI” option.<\/p>\n

\"Search
Figure A.18: Search for “kali”<\/figcaption><\/figure>\n

On the next screen, ensure that “install the appliance on the GNS3 VM”, is already selected, then click Next.<\/p>\n

\"Select
Figure A.19: Select “Install the appliance on the GNS3 VM”<\/figcaption><\/figure>\n

Next again.<\/p>\n

\"Select
Figure A.20: Select Qemu binary<\/figcaption><\/figure>\n

Expand the “2019” option, and download both missing files. Also, you can download the latest version. Version 2019 is more stable in GNS3.<\/p>\n

\"Select
Figure A.21: Select “kali-linux-2019.3-amd64.iso”<\/figcaption><\/figure>\n

After that, import the downloaded file to the specified 2019 selection.<\/p>\n

\"Select
Figure A.22: Select “kali-linux-2019.3-amd64.iso”<\/figcaption><\/figure>\n

It should take a second, but GNS3 will start to load up the ISO into the GNS3VM.<\/p>\n

\"Loading
Figure A.23: Loading the ISO image<\/figcaption><\/figure>\n

After that, click the 2019 version again, then click Next.<\/p>\n

\"Ready
Figure A.24: Ready to install<\/figcaption><\/figure>\n

Then click Finish.<\/p>\n

\"Final
Figure A.25: Final step of configuration<\/figcaption><\/figure>\n

Use WordPress in GNS3<\/h2>\n

Sometimes we need a basic webserver to demonstrate website functionality. This can be accomplished using the WordPress appliance in GNS3. Start by clicking the new template button on the bottom of the page.<\/p>\n

\"Create
Figure A.26: Create a new template<\/figcaption><\/figure>\n

We want to install an appliance from the GNS3 server.<\/p>\n

\"Select
Figure A.27: Select “Install an appliance from the GNS3 server”<\/figcaption><\/figure>\n

Lookup “WordPress”, then click Install.<\/p>\n

\"Search
Figure A.28: Search for “WordPress”<\/figcaption><\/figure>\n

Just press next for the following dialog boxes, and you should now have WordPress!<\/p>\n

\"Verify
Figure A.29: Verify WordPress Installation<\/figcaption><\/figure>\n

Configure WordPress<\/h2>\n

After changing the interface configuration, start the machine. You will see a dialogue box:<\/p>\n

\"Running
Figure A.30: Running WordPress<\/figcaption><\/figure>\n

Press enter and you’ll see the device under some basic configuration. Once you get to the prompt, you can exit that window, and you will have WordPress ready!<\/p>\n

\"WordPress
Figure A.31: WordPress is Ready!<\/figcaption><\/figure>\n

Use Switches in GNS3<\/h2>\n

Usually we just use switches to connect multiple devices together in GNS3. However, it can also be used for VLANs. Start by dragging one in and double clicking it.<\/p>\n

\"Switch
Figure A.32: Switch Configuration<\/figcaption><\/figure>\n

Here you can see that they are all basically untagged. To configure a specific port, simply double click your desired port.<\/p>\n

\"Double
Figure A.33: Double click on port7<\/figcaption><\/figure>\n

Configure the necessary settings for them (access is for tagging, dot1q is for trunking).<\/p>\n

\"Select
Figure A.34: Select port7 as dot1q<\/figcaption><\/figure>\n

Click on add to apply the changes.<\/p>\n

\"Click
Figure A.35: Click on Add to apply the changes<\/figcaption><\/figure>\n

Then click Apply and OK.<\/p>\n","protected":false},"author":124,"menu_order":1,"template":"","meta":{"pb_show_title":"on","pb_short_title":"","pb_subtitle":"","pb_authors":[],"pb_section_license":""},"back-matter-type":[],"contributor":[],"license":[],"class_list":["post-363","back-matter","type-back-matter","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/pressbooks\/v2\/back-matter\/363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/pressbooks\/v2\/back-matter"}],"about":[{"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/wp\/v2\/types\/back-matter"}],"author":[{"embeddable":true,"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/wp\/v2\/users\/124"}],"version-history":[{"count":0,"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/pressbooks\/v2\/back-matter\/363\/revisions"}],"metadata":[{"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/pressbooks\/v2\/back-matter\/363\/metadata\/"}],"wp:attachment":[{"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/wp\/v2\/media?parent=363"}],"wp:term":[{"taxonomy":"back-matter-type","embeddable":true,"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/pressbooks\/v2\/back-matter-type?post=363"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/wp\/v2\/contributor?post=363"},{"taxonomy":"license","embeddable":true,"href":"https:\/\/opentextbc.ca\/paloalto\/wp-json\/wp\/v2\/license?post=363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}