Linux Network Administration and Services Deployment

Learn to configure network teaming to create an aggregated link between two interfaces, assign static or DHCP IPs, and verify the team's active status and failover behavior.

Configure IPv6 addresses and troubleshoot IPv6 connectivity by managing Linux network connections with nmcli, adding and deleting interfaces, assigning static IPv4 and IPv6 addresses, and performing basic IPv6 tests.

Learn how to view and modify the Linux routing table, create static routes using the NetworkManager CLI and ip route, and apply or remove routes to control traffic paths.

Configure firewalld rich rules to accept or block traffic by source IP, set limits on SSH connections, manage rules permanently, and reload firewall to apply changes.

Learn to configure network address translation (NAT) on a Linux server by enabling masquerading in the public zone, reloading the firewall, and adding rich rules to mask internal addresses.

Configure Linux nat port forwarding with masquerading to redirect traffic on port 22 to another port on a local or remote machine, using firewall-cmd and reload for verification.

Configure a Linux system as an iSCSI target by installing the target service, creating a block device, defining a target portal, and enabling ACLs and credentials.

Configure a system as an iSCSI initiator by setting up target and initiator, configuring authentication with username and password, logging into the target, and mounting the remote file system.

Modify kernel runtime parameters using /proc/sys and the sysctl tool, then make changes persistent by editing /etc/sysctl.conf and reboot to verify the new values.

Install and use iostat and pidstat to generate system utilization reports, configure sysstat logs, and run sar to analyze cpu, memory, disk, and network performance.

Install packages to provide a service using yum or rpm. Understand dependencies, download rpm files, install with rpm -iv, and manage packages and groups.

Learn how to configure SELinux to support services by checking and switching between enforcing, permissive, and disabled modes, using getenforce and setenforce, editing /etc/selinux/config, and rebooting when needed.

Learn to use SELinux port labelling to allow services like Apache to run on nonstandard ports. Configure semanage port, verify port usage, update apache listening port, and restart the service.

Learn to configure Linux services to start on boot, check status, enable or disable, start, stop, and restart, and use masking to prevent or unmask automatic startup.

Install the apache web server and links, then start and enable the service. Verify it runs, configure the firewall to allow http traffic, and create a test index page.

Explore the Apache configuration file, its server root, listen and document root directives, and how modules and include entries shape server behavior.

Learn to create an Apache virtual host to host multiple sites on one server, configure document root, server name, logs, edit hosts, and test with ping.

Configure Apache access restrictions for a directory using basic authentication and a password file. Require the admin user and restart the Apache service to enforce access.

Restrict access to a web server directory by creating a dedicated group and adding users, setting group ownership, adjusting permissions, and enabling password authentication to limit access to designated users.

Learn to deploy a basic cgi application by configuring script alias and cgi bin, writing a shell script that outputs html content, and enabling CGI with 755 permissions.

Generate a self-signed TLS/SSL certificate with OpenSSL, configure Apache for encrypted server-client connections, and manage private keys, CSRs, and certificates.

Configure a caching-only named server to store DNS responses in a cache and listen on port 53 on any IP. Verify by resolving google.com to confirm the caching DNS works.

Install nfs utilities, create read-write and read-only shares on the server, configure exports for a specific client with no_root_squash, enable and start services, and mount the shares on the client.

Create a group with gid 30000, assign it to the shared directory, set the shared directory's group, export the share, mount on the client, and apply the sticky bit.

Learn to use Kerberos to control access to NFS network shares by configuring a Kerberos environment, including KDC setup, principals, ACLs, and client server integration in Linux.

Configure kerberos-based access to nfs shares by setting up kerberos server, interface server, and client, exporting shares with read/write and read-only options, and mounting them to test authorized access.

Configure a two-server setup to forward all emails to a central mail server using postfix, including hosts file setup, firewall checks, and service validation.

Learn to generate public and private keys and configure ssh key-based authentication to log into a remote host without passwords, including copying keys and managing known_hosts.

Modify the ssh config to enable key-based authentication by setting a non-default port, listen address, and protocol, disabling password login and root login, and applying changes with systemctl restart sshd.