scottsee

I'm almost done setting up my penitration testing lab to help me study for the CEH exam. I'm not fully set on how I'm going to administer my mock network. I'm open to suggestions here. I'm not at all set on infostructure design.

My physical Layer consists of the following hardware. Pretty basic, It's not configured to do anything yet becasue I don't have enough NIC cards, and most of the OS are not configured to deploy any services. They are just sitting on my hard disk and VMware images. I might switch things around, but for what I want to study and what most company conform to as a deployment method kinda streams along with what I've got going here. I just don't have enough hardware to test everything on one network without spending a lot more $$ then I already have. When I feel more comfortable with a particular operating system penetration I'll likely reconfigure my mock infostructure. (knocks on wood)

As of now my mock network is installed as such.

1 x basic 4port Netgear b/g wifi router, wep/wpa support

• Just a basic business open/wep/wpa access point for customer use, connected to the network switch and out the gateway. I may not even depoy this, its pretty basic and I have a cisco wifi switch, and I really need the extra ethernet ports..

1 x Cisco 871w 4 port switch, wifi, CCP enabled

• My basic internal network switch between the entangled computer and my workstation/servers. I'm extreamly limited on ports with this device, I'm not sure what I'm going to do with this switch as of yet or how I'm going to subnet & configure my network to handle everything.. I'm almost sure I'll set up a firewall ruleset through this router and use it as my DHCP if I decide I don't want static. Most of my network security on level 3 and 4 will depend on how I set this up. But, it will all depend on how/what I end up configureing on every other machine.
  

1 x dell dimention workstation / Untantled dedicated.

• This will be my bigest hurdle, I'm not at all furmiluar with this bit of dedicated level of security, I've never used it. It's sitting with the basic free plugins, I'm going to spend a little time looking at the QOS, Firewall, and other basic config settings.. I might have to spend a few weeks over at thier forums to, it's a neat little system, but complex..

1 x dell xps laptop wifi/blu-tooth enabled/ XP Media SP3 / Vmware workstation 6.5 w/ Ubuntu 9.4, basic security & LAMP, bridged.

• Just a basic install, basic securty, I'm going to deploy an simple sql database. Ideas are welcome here, nothing to complex, I don't want to spend alot of time here, it's generaly for sql injecton, patching, and buffer overflows. I'mconsidering hosting a basic website to pentest via internet..

1 x (sig comp) windows 2008 server w/sp2 / Vmware server running Vista x64 ultimate, Vista ultimate x64 w/sp1, Windows 7, Server 2003 w/sp1.

• Big mess right now, I'm not an MCSE guy, I'm not sure if I'm going to deploy Active Dirrectory or not, I'm not sure where I'm going to store my DNS server, or even run Dynamic. I might try an IE server. I would really love some ideas on what to do here!! I was even thinking about setting up a forest and VPN.. I'm in the air here..
  
  Thoughts?