For this lesson you’ll need 3 VM’s.

• You’ll need one VMWare Ubuntu machine

• One Ubuntu EC2 Instance. (Directions Here)

• One Windows Server EC2 Instance.

  • The directions for creating this machine are different!
  • Follow these directions to create a Windows Server machine on EC2

  

  Checkpoint: Show the instructor you have the three machines required.

  

  At this point, you are able to RDP directly to your Amazon EC2 machine because the instructor is allowing port 3389 to pass through the firewall.

  

  This is temporary. On most days RDP will be blocked. One option for bypassing a firewall rule like this is to ‘tunnel’ the RDP traffic using the SSH protocol, which has two benefits:

  • SSH runs on port 22, which we do tend to allow out from iCSI because we use Amazon EC2 so much.
  • SSH data is encrypted in transit, so the contents of the data can’t be inspected by the firewall.

We are going to set up a network topology that looks like this:

Your EC2 Linux Machine has a .ppk key file that is used instead of a password. The first step is to upload that .ppk file to the VMWare Ubuntu Machine. There are lots of options here, but Filezilla is a good one.

• Make sure you have run apt-install ssh on your VMWare Ubuntu Machine First.

Upload the correct .ppk to your Ubuntu machine

We’ll need to convert this TunnelKey.ppk to .pem format in order to use it with the ssh command on Linux. Here are the commands:

sudo su
apt install putty-tools
puttygen TunnelKey.ppk -O private-openssh -o TunnelKey.pem
chown student:student TunnelKey.pem
chmod 600 TunnelKey.pem
exit

Now we should have a file in our student home directory called TunnelKey.pem with 600 permissions so only the student user can read this file or write to it.

ls -alh