show mac-address-table

clear mac-address-table
>mac-address-table static AAAA.BBBB.CCCC vlan Z interface FastEthernet X/Y
show spanning-tree [vlan Z]
>spanning-tree vlan Z root primary
(if)>spanning-tree port-priority priority
(if)>no shutdown
(if)>ip address 192.168.0.1 255.255.255.0
ping 192.168.0.10
show vlan brief
show running-config
>vlan Z
(vlan)>name management
(if)>switchport access vlan Z
(if)>switchport mode access
>interface vlan 100
(if)>no ip address
- pentru switch
>interface vlan 100
- nu uita sa o creezi mai intai
(if)>no shutdown
(if)>ip address 192.168.1.254 255.255.255.0
(if)>switchport mode trunk
(if)>switchport trunk allowed vlan {{add|except|remove} vlan-list|all|none}
show interfaces trunk
(if)>switchport trunk native vlan Z
>ip routing
>ip route 14.14.14.0 255.255.255.0 30.30.30.33
>no ip route 14.14.14.0 255.255.255.0 30.30.30.33
>ip route 0.0.0.0 0.0.0.0 172.28.99.1
show ip route

- pentru router

>interface FastEthernet 0/0.1

(sub-if)>encapsulation dot1Q vlan
>switchport trunk encapsulation dot1q
ip address add 192.168.0.1/24 dev veth-red
ip address show dev veth-red
ip address flush dev INTERFACE
ip link show dev veth-red
ip link set dev veth-red up
ip route add default via 10.10.10.1
ip route show
sysctl -w net.ipv4.ip_forward=1
sysctl net.ipv4.ip_forward
vim /etc/sysctl.conf
-setare de rutare persistenta (reload cu sysctl p)
tcpdump

-i veth-red

ip neighbor show
ifdown INTERFACE
ifup INTERFACE
dsniff -i veth-green

-arata tabela ARP

ftp green
telnet green
iptables
iptables
iptables
iptables

-P
-A
-D
-I

INPUT DROP
-schimba policy
FORWARD -d green -p tcp --dport telnet -j REJECT
FORWARD -d green -p tcp --dport telnet -j REJECT
FORWARD 2 -d green -p tcp --dport telnet -j REJECT

iptables -L FORWARD v n

- v afiseaza date despre pachetele prinse

- n nu face resolve la nume

iptables -F FORWARD
iptables -A INPUT -p icmp -m state --state NEW -j ACCEPT
- p este pentru protocol
- state NEW daca tocmai se initiaza conexiunea
iptables-save > /etc/iptables-rules
cat /etc/network/interfaces
auto eth0
iface eth0 inet dhcp
up iptables-restore < /etc/iptables-rules
ssh -l student host "cat ~/.ssh/authorized_keys"
ssh -vvv -l ana host
-verbose pentru debugging
ssh -l $USERNAME fep.grid.pub.ro -R 100XY:localhost:22
tail -f /var/log/auth.log

-tunelare inversa

-log pentru debugging

ssh-keygen -t rsa
ssh-copy-id student@host
nc -l 12345 > file-100M-nc.dat
/usr/bin/time -v cat file-100M.dat | nc host 12345
curl -T file-100M.dat -u student:student ftp://host/file-100M-ftp.dat
scp file-100M.dat student@host:file-100M-scp.dat
cat ~/.ssh/config
Host r
User student
HostName red

-upload

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

iptables -t nat -A POSTROUTING -p tcp -o eth0 -j SNAT --to 1.2.3.4:1-1023
iptables -t nat -L -n -v
tcpdump n i veth-red "dst host 192.168.0.1 and (dst port 80 or dst port 443)"
iptables -t nat -A PREROUTING -p tcp --dport 1000 -j DNAT --to-destination 30.30.30.2:22
ssh -l root host -p 10022
grep -w 'telnet' /etc/services
netstat tlnp

-t=tcp, l=listen, n=noresolve, p=numeproces

wget q http://<adresa-ip-mv>:8080
- q este quiet, !!escape special characters!!
curl icanhazip.com
curl ftp://red/download/file-10M.dat -o file-10M.dat -user ana:student
echo 'Hello, Corina' | mail -s "Salutari" corina
lxc-list
lxc-start -n blue d
brctl addbr br0
brctl addif br0 veth-blue
brctl delif br0 veth-blue
brctl show br0
dhclient br0

-d=daemon, n=name
-nu uita sa setezi UP cu ip link

ebtables -A FORWARD -p IPv4 --ip-src 172.16.12.2 --ip-dst 172.16.12.1 --ip-proto tcp -ip-destination-port 21 -j DROP