Appendix-A
GNS3 Basics
In this chapter, we will be going through the basics in GNS3. Try to play and familiarize yourself with this environment as this is a good tool for network simulations.
Adding a FortiGate Firewall to GNS3
1- Start by adding a new template
2- We want to install it from the GNS3 Server, so keep the option default and then press next.
3- On the next window, search for “FortiGate”, and select the option under “Firewalls”, then click install.
4- Press next on this screen
5- Press next on this screen
6- Tick the allow custom files box
7- Just click Yes on this screen
8- Highlight a random version
9-Click create a new version
10- Create a new custom version and select optional name for it.
11- Press OK on this one too
12- Press OK again
13- Click on any empty30G file, and click Download. Save that file to your computer.
14- Scroll down to your custom version and click the arrow on the left
15- Click the FGT filename under your custom version and click import
16- Navigate to your downloaded FortiGate Firewall image and click open
17- Still under your custom version, click import on the empty30G file
18- Navigate to your downloaded empty30G file and click open
19- After that, highlight the custom version again and click next
20- Click Yes on this window
21- Then click Finish
Configuring your Palo Alto Firewall Template and adding the device
1- Lets start by modifying the GNS3 template of the Palo Alto firewall by right clicking the existing template, and clicking on “configure template”.
2- Make sure the max amount of RAM is set to at least 4096MB, and the amount of vCPUs are at least 2.
3- Now close the window, and drag in the Palo Alto device from the left hand pane.
4- Once you’ve dragged in the Palo Alto device, right click it, then click “start”.
5- Keep in mind that this device takes a while to start.
Webterm installation
1- Let’s begin by clicking “new template” on the bottom left hand of GNS3
2- We want to install this into the GNS3 VM. Click on the option to “Install an appliance from the GNS3 Server”, then click next.
3- On the next window, search for “webterm”, select the option under “guests”, then click install.
4- On the next screen, ensure that “Install the appliance on the GNS3 VM”, is already selected, then click next.
5- On the next screen, click Finish.
After that, it should appear under all devices in GNS3
Configuring your webterm device with a static IP
1- Drag in the webterm device from the left pane. Then once it finishes downloading the docker file, right click it and select “edit config”
2- A window will pop up containing the device’s network configuration. We want to modify this file to match the specified IP address. The final modification should look like a little like this
After these modifications, click on the save button on the bottom right of the window.
Configuring a webterm DHCP client
We just need to uncomment these 2 lines to enable DHCP. Click on save and we are done.
Connecting devices in GNS3
Please see the example below
Using NAT in GNS3
The NAT device in GNS3 will allow devices in our virtual topology to communicate with the internet. This device is under the all devices section of GNS3.
Make sure you select the GNS3VM as the option whenever you see this window (applies for all devices)
Using Kali in GNS3
Sometimes we need to use Kali to demonstrate an attack. Please keep in mind that Kali is used strictly for testing purposes, and should not be used as a daily driver, to hack your friends, or to pretend to look cool.
1- Let’s begin by clicking “new template” on the bottom left hand of GNS3
2- We want to install this into the GNS3 VM. Click on the option to “Install an appliance from the GNS3 Server”, then click next.
3- On the next window, search for “kali”, and select the non “CLI” option.
4- On the next screen, ensure that “Install the appliance on the GNS3 VM”, is already selected, then click next.
5- Next again
6- Expand the “2019” option, and download both missing files
7- After that, import the downloaded file to the specified 2019 selection.
8- It should take a second, but GNS3 will start to load up the ISO into the GNS3VM.
9- After that, click the 2019 version again, then click next
10- Then click finish
Using WordPress in GNS3
Sometimes we need a basic webserver to demonstrate website functionality. This can be accomplished using the WordPress appliance in GNS3. Start by clicking the new template button on the bottom of the page
We want to install an appliance from the gns3 server
Lookup “wordpress”, then click install
Just press next for the following dialog boxes, and you should now have wordpress!
Running WordPress
After changing the interface configuration, start the machine. You will see a dialogue box:
Press enter and you’ll see the device under some basic configuration. Once you get to the prompt, you can exit that window, and you will have WordPress ready!
Using switches in GNS3
Usually we just use switches to connect multiple devices together in GNS3. However, it can also be used for VLANs. Start by dragging one in and double clicking it.
Here you can see that they are all basically untagged. To configure a specific port, simply double click your desired port
Configure the necessary settings for them (access is for tagging, dot1q is for trunking)
Click on add to Apply the changes
Then click Apply and OK.
