S6
Securing & Networking Red Hat Linux Course Overview
This highly practical instructor-led Securing & Networking Red Hat Linux course is designed to give delegates practical experience in the network, security and performance administration of a Red Hat Linux system. With a strong emphasis on practical hands-on training, this course will teach the essential network, security and performance administrative tasks required on a Red Hat Linux system.
Skills Gained
The delegate will have knowledge in all, and practise in some, of the following:
- Configure Network Interfaces
- Configure the System to be a DHCP Server
- Configuring Network Services
- Use TCP Wrappers to Limit Service Access
- Configure Virtual Hosting Using the Apache Web Server
- Configure a DNS Server
- Share Data using the Samba and NFS File Sharing Systems
- Configure a Caching Proxy Server
- Configure a Centralised Administrative System using NIS
- Handle Mail Using the sendmail, postfix and dovecot programs
- Secure Systems Using Authentication Services
- Configure a Secure Firewall Configuration
- Understand and be able to Implement Data Security including SELinux
- Configure Advanced System Logging
- Monitor and Tune for System Performance and Activity
- Be able to build a Red Hat system using kickstart
Who will the Course Benefit?
The Securing & Networking Red Hat Linux course is designed for System Administrators and Programmers and other technical IT staff who need to acquire knowledge of the key networking and security tasks required to administer a Linux system.
This course will teach many of the necessary skills to enable the delegate to work towards achieving the Red Hat Certified Engineer (RHCE) certification.
The course assumes administration knowledge of the Red Hat Linux operating system to the level covered in the Administering Red Hat Linux course.
Course Objectives
On completion of this course the delegate will have gained practical experience of networking and securing Red Hat Linux systems.
The delegate will also gain the essential knowledge required to study towards taking the official Red Hat Certified Engineer (RHCE) certification.
Examinations
Targeted to closely follow the official Red Hat certification curriculum. The Securing & Networking Red Hat Linux course together with the Using Red Hat Linux and the Administering Red Hat Linux course will enable the delegate to work towards achieving the Red Hat Certified Engineer (RHCE) qualification.
Before taking any exam, ensure you have the recommended experience. The Red Hat website lists all exam requirements and these are updated regularly.
Exams are not included as part of the course.
Pre-Requisite Courses
Follow-On Courses
Securing & Networking Red Hat Linux Training Course
Course Contents - DAY 1
Course Introduction
- Administration and Course Materials
- Course Structure and Agenda
- Delegate and Trainer Introductions
Session 1: NETWORK CONFIGURATION
- Configuring Network Interfaces
- Controlling Network Devices: ifup/ifdown
- Configuring a NIS client
- Resolution Order
- Creating Virtual Interfaces
- Using DHCP for Interfaces
- Network tools mii-tool/ethtool
- Routing IP Traffic under Red Hat Linux
- Configuring the System as a Gateway
- Configuring Network Time Protocol (NTP)
- Network diagnosis tools : tcpdump, netstat, wireshark,etc.
Session 2: NETWORK SERVICES
- Ports and Socket Connections
- The xinetd Daemon Operation
- Controlling xinetd Services and Access
- Controlling Services using Chkconfig
- Limiting Access to Services using TCP Wrappers
- Configuring DHCP Server
- The FTP Service using vsftpd
|
|
Session 3: DATA SECURITY
- SELinux
- Management of SELinux
- Easy Configuration and Customisation of SELinux
- Context Types
- semanage, getsebool, setsebool and chcon commands
- Data Security and Encryption Methods
- Single Key Encryption (Symmetric)
- Public/Private Key Encryption (Asymmetric)
- Certificate Encryption and Digital Signatures
- OpenSSH - ssh, scp and sftp commands
- Client and Server Side Configuration of OpenSSH
Session 4: THE DOMAIN NAME SYSTEM
- The DNS/BIND system under Red Hat Linux
- Name Server Hierarchy
- Setting up DNS
- Master/Slave Zones
- Reverse lookup Zones
- Record types and their syntax
- Name Daemon Control Utility (rndc)
- Address Match Lists (acl)
- DNS in a chroot environment
- BIND Checking Utilities
|
Securing & Networking Red Hat Linux Training Course
Course Contents - DAY 2
Session 5: NETWORK FILE SYSTEM (NFS)
- NFS Operation: daemons, portmapper etc.
- Configuring an NFS Server
- NFS Share Options: /etc/exports
- UID Re-mapping
- Configuring NFS Client Operation
- Using the Automounter to Access NFS Mounts
- SELinux implications
Session 6: SAMBA CONFIGURATION
- The SAMBA System
- The SAMBA Services Provided
- SAMBA Daemons and Operation
- Configuring SAMBA: Various Tools Available
- Testing Samba Configuration
- SAMBA Authentication Methods
- SAMBA Client Tools
- USING smbmount to Access Windows Shares
- Interrogating WINS servers using nmblookup
- Using samba-swat
- Using Konqueror to access Windows shares
- Samba and SELinux
|
|
Session 7: HTTP SERVICES: APACHE/TUX AND SQUID
- The Apache and Tux Web Servers
- Apache Server Configuration Files
- Apache Configuration Directives
- Virtual Host Management: Name and IP Based Access
- CGI Programs and Apache Modules
- HTTP and SELinux
- The Squid Proxy Server
- Configuring squid
- Configuring Client Access to squid
|
Securing & Networking Red Hat Linux Training Course
Course Contents - DAY 3
Session 8: NETWORK INFORMATION SYSTEM (NIS)
- The NIS System: Centralised administration
- NIS Topology
- Master, Slave and Client Configuration
- Rebuilding NIS Maps
- Handling home directories and Password Management under NIS
- Password Management Under NIS
- Troubleshooting your NIS Configuration
Session 9: ELECTRONIC MAIL
- Email Components
- Mail User, Mail Transport and Mail User Agents
- Configuring sendmail and postfix
- Sendmail Configuration Files
- Sendmail Configuration with the m4 Macro Language
- Macro Definitions
- Switching to postfix, a sendmail replacement
- Postfix Configuration
- Procmail delivery agent
- Dovecot - POP and IMAP services
|
|
Session 10: PLUGGABLE AUTHENICATION MODULE (PAM)
- Authentication Services: PAM
- PAM Operation
- The Core PAM Configuration Files
- Configuring Resource Limits and Access Control through PAM
- PAM Examples
|
Securing & Networking Red Hat Linux Training Course
Course Contents - DAY 4
Session 11: SECURING NETWORKS: FIREWALLS
- Netfilter - iptables
- IPV6 Overview
- Packet Filtering Using iptables
- Rule Targets
- Basic Rules and their Operation
- Connection Tracking
- Network Address Translation
- Debugging Route Problems
- Source and Destination NAT Configuration
- RedHat Supplied Tools for iptables Configuration
|
|
Session 12: SYSTEM MONITORING/PERFORMANCE MANAGEMENT
- System Log Files
- Syslogd and klogd Configuration
- Advanced syslogd Configuration
- Analysing logfiles
- System Performance Monitoring
- System Activity Reporting
- System Accounting
Session 13: INSTALLING RED HAT LINUX USING KICKSTART
- How Kickstart Works
- Sections within a Kickstart Configuration File
- Pre and Post Kickstart Processing
- Creating a Kickstart File
- Creating the Linux Install Server
- Differing ways of starting a Kickstart Installation
|
Pre-Requisite Courses
Follow-On Courses
Home
Let Us Call You
Enquiry
Make Booking
Top