ChamplainTechJournals/net-sec-controls-sec350/machines/RW01.md

RW01 Configuration

Basic Setup

• Set hostname to rw01-charlotte
• Add sudo user charlotte:password
• IP Address: 10.0.17.51/24
• Gateway & DNS: 10.0.17.2

Static Route for DMZ Access

sudo ip route add 172.16.50.0/29 via 10.0.17.151
sudo systemctl restart NetworkManager
traceroute 172.16.50.3

Rsyslog Configuration for High Precision Timestamps

1. Edit /etc/rsyslog.conf
2. Comment out this line to enable high precision timestamps:

   # $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
   

3. Restart rsyslog:

   sudo systemctl restart rsyslog
   

SSH Key Creation for Jump Server Access

Generate a dedicated SSH key for jump server access:

ssh-keygen -t rsa -b 4096 -C "ssh to jump"
# Use filename: jump-charlotte
# Add a passphrase

To connect to the jump server using this key:

ssh -i ~/.ssh/jump-charlotte charlotte-jump@172.16.50.4