{"id":347,"date":"2019-04-15T10:49:16","date_gmt":"2019-04-15T09:49:16","guid":{"rendered":"https:\/\/zed-network.fr\/?p=347"},"modified":"2020-08-24T19:27:56","modified_gmt":"2020-08-24T18:27:56","slug":"test-network-services","status":"publish","type":"post","link":"https:\/\/zed-network.fr\/?p=347","title":{"rendered":"How to test your network services with Docker"},"content":{"rendered":"\n

This container has been tested with IOS \/ NXOS and ACI.<\/p>\n\n\n\n

Test syslog<\/h2>\n\n\n\n

You can verify if you receive logs with syslog-ng. This service runs on the default port udp\/514.<\/p>\n\n\n\n

The configuration on the file \/etc\/syslog-ng\/syslog-ng.conf redirects the external logs to the following file: \/var\/log\/remote-syslog.log<\/p>\n\n\n\n

# Extract of syslog-ng.conf\n<\/p>\n\n\n\n

source s_net {
tcp(ip(0.0.0.0) port(514));
udp(ip(0.0.0.0) port(514));
}; <\/p>\n\n\n\n

log { source(s_net); destination(d_net); };
destination d_net { file(“\/var\/log\/remote-syslog.log”); }; <\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

Logs could be see with the following command:<\/p>\n\n\n\nroot@89944db0da60:~# tailf \/var\/log\/remote-syslog.log\n\n\n\n

Apr 15 06:50:51 10.0.100.46 2019 Apr 15 06:50:48 UTC: %ETHPORT-5-IF_DOWN_CFG_CHANGE: Interface Ethernet1\/1 is down(Config change)
 Apr 15 06:50:52 10.0.100.46 2019 Apr 15 06:50:49 UTC: %ETHPORT-5-IF_DOWN_ADMIN_DOWN: Interface Ethernet1\/1 is down (Administratively down)
 Apr 15 06:50:55 10.0.100.46 2019 Apr 15 06:50:52 UTC: last message repeated 1 time
<\/pre>\n\n\n\n
Apr 15 11:57:59 10.255.0.2 %LOG_LOCAL7-4-SYSTEM_MSG [F1186][raised][config-failure][warning][sys\/phys-[eth1\/35]\/fault-F1186] Port configuration failure.                                   Reason: 2                                   Failed Config: l1:PhysIfspeed_failed_flag<\/pre>\n\n\n\n
Test snmptrap<\/h2>\n\n\n\n
snmptrapd is used to receive snmptrap. The logs are redirect to the file : \/var\/log\/snmptrapd.log. <\/p>\n\n\n\n
The configuration files are the following : \/etc\/snmp\/snmptrapd.conf and \/etc\/default\/snmptrapd. <\/p>\n\n\n\n
The community configured is “public”. You can change in the \/etc\/snmp\/snmptrad file or disabled the authentification with ” disableAuthorization yes”<\/p>\n\n\n\n
Example: <\/p>\n\n\n\n
\n\n\n\n
Agent Address: 0.0.0.0
\n Agent Hostname: nxos – UDP: [10.0.100.46]:59353->[172.21.0.2]:162
\n Date: 6:50:57 15-4
\n Enterprise OID: .
\n EngineID:
\n Trap Type: Cold Start
\n Trap Sub-Type: 0
\n Community\/Infosec Context: TRAP2, SNMP v2c, community nxos
\n Uptime: 0
\n Description: Cold Start
\n PDU Attribute\/Value Pair Array:
\niso.3.6.1.2.1.1.3.0 = Timeticks: (16384794) 1 day, 21:30:47.94
\niso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.2.1.17.0.2
\niso.3.6.1.4.1.9.9.46.1.3.1.1.1.1.1 = INTEGER: 1
\niso.3.6.1.2.1.31.1.1.1.1.436207616 = STRING: “Ethernet1\/1”<\/p>\n\n\n\n
\n\n\n\n
Agent Address: 0.0.0.0
\n Agent Hostname: nxos – UDP: [10.0.100.46]:59353->[172.21.0.2]:162
\n Date: 6:51:6 15-4
\n Enterprise OID: .
\n EngineID:
\n Trap Type: Cold Start
\n Trap Sub-Type: 0
\n Community\/Infosec Context: TRAP2, SNMP v2c, community nxos
\n Uptime: 0
\n Description: Cold Start
\n PDU Attribute\/Value Pair Array:
\niso.3.6.1.2.1.1.3.0 = Timeticks: (16385696) 1 day, 21:30:56.96
\niso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.9.9.43.2.0.2
\niso.3.6.1.4.1.9.9.43.1.1.1.0 = Timeticks: (16384764) 1 day, 21:30:47.64
\niso.3.6.1.4.1.9.9.43.1.1.6.1.6.7117 = INTEGER: 3<\/p>\n\n\n\n
\n\n\n\n
<\/p>\n\n\n\n
Test tacacs+ <\/h2>\n\n\n\n
tacacs+ is used to verify the Authentication, Authorization and Accounting. The configuration is in the file \/etc\/tacacs\/tac_plus.conf.<\/p>\n\n\n\n
We use the following package : http:\/\/www.shrubbery.net\/tac_plus\/ <\/p>\n\n\n\n
The current configuration is the following:<\/p>\n\n\n\n
  • Tacacs Key : cisco1234<\/li>
  • user : user1 \/ cisco1234<\/li>
  • Right: admin<\/li><\/ul>\n\n\n\n
    The log files are the following : <\/p>\n\n\n\n
    • For accounting : \/var\/log\/tacacs\/tac_plus.acct<\/li>
    • For authentication : \/var\/log\/tac_plus.log<\/li><\/ul>\n\n\n\n
      Test radius<\/h2>\n\n\n\n
      We use freeradius with the following files:<\/p>\n\n\n\n
      • radiusd.conf<\/li>
      • clients.conf<\/li>
      • users<\/li><\/ul>\n\n\n\n
        The logs are in the following directory \/var\/log\/freeradius\/.<\/p>\n\n\n\n
        Example for IOS\/NXOS and ACI :<\/p>\n\n\n\n
        user1 Cleartext-Password := “cisco1234”
        \n        Service-Type = NAS-Prompt-User,
        \n        Cisco-AVPair = “shell:priv-lvl=15”,
        \n        Cisco-AVPair += “shell:domains=all\/admin\/”<\/p>\n\n\n\n
        Synchronize ntp<\/h2>\n\n\n\n
        This container can be use to verify if your device can synchronize with a ntp server. This container runs a ntp server as stratum 5.<\/p>\n\n\n\n
        server 127.127.1.0
        \nfudge 127.127.1.0 stratum 5<\/pre>\n\n\n\n
        SSH \/ scp server<\/h2>\n\n\n\n
        You can use this container to upload some file via scp if needed. The daemon is stopped and you need to create you own user.<\/p>\n\n\n\n
        root@9371dba394dc:~# adduser cisco\n Adding user cisco' ... Adding new group<\/code>cisco' (1001) \u2026\n Adding new user cisco' (1001) with group<\/code>cisco' \u2026\n Creating home directory \/home\/cisco' ... Copying files from<\/code>\/etc\/skel' \u2026\n New password:\n Retype new password:\n passwd: password updated successfully\n Changing the user information for cisco\n Enter the new value, or press ENTER for the default\n         Full Name []:\n         Room Number []:\n         Work Phone []:\n         Home Phone []:\n         Other []:\n Is the information correct? [Y\/n] y\n\nroot@9371dba394dc:~# \/etc\/init.d\/ssh start\n [ ok ] Starting OpenBSD Secure Shell server: sshd.<\/pre>\n\n\n\n
        The port exposed for ssh is 30022 on the docker-compose.yml file. You can change this port.<\/p>\n\n\n\n
        Docker-compose file<\/h2>\n\n\n\n
        docker-compose.yml
         <\/p>\n\n\n\n
        version: \"3\"\n services:\n   network-test:\n     build: .\n     image: zednetwork\/network-test\n     ports:\n      - \"30022:22\/tcp\"\n      - \"123:123\/udp\"\n      - \"49:49\/tcp\"\n      - \"162:162\/udp\"\n      - \"514:514\/udp\"\n      - \"1812:1812\/udp\"\n      - \"1813:1813\/udp\"\n     tty: true\n     stdin_open: true<\/pre>\n\n\n\n
        To download the container :
        docker pull zednetwork\/network-test:latest <\/p>\n\n\n\n
        To enter in the container :  <\/p>\n\n\n\n
        docker exec -it <container_ID> \/bin\/bash<\/p>\n","protected":false},"excerpt":{"rendered":"
        This container has been tested with IOS \/ NXOS and ACI. Test syslog You can verify if you receive logs with syslog-ng. This service runs on the default port udp\/514. The configuration on the file \/etc\/syslog-ng\/syslog-ng.conf redirects the external logs to the following file: \/var\/log\/remote-syslog.log # Extract of syslog-ng.conf source s_net { tcp(ip(0.0.0.0) port(514)); udp(ip(0.0.0.0) […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[27],"tags":[],"class_list":["post-347","post","type-post","status-publish","format-standard","hentry","category-automation"],"_links":{"self":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/347","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=347"}],"version-history":[{"count":21,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/347\/revisions"}],"predecessor-version":[{"id":549,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/347\/revisions\/549"}],"wp:attachment":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}