Assignment 06 - VPC Implementation, CIDR Range, and Troubleshooting

[manishawsdevops]

Assignment: Amazon VPC Implementation, CIDR Range, and Troubleshooting

Objective: The objective of this assignment is to provide hands-on experience in designing, implementing, and troubleshooting an Amazon Virtual Private Cloud (VPC) in AWS. Students will create a VPC, set up subnets, configure routing, security, allocate CIDR ranges, and troubleshoot common issues.

Tasks:

Part 1: VPC Setup

1. Create a VPC:

   • Create a new Amazon VPC with a non-overlapping CIDR block of your choice.

2. Create Subnets:

   • Divide the VPC into three subnets:
     • Public Subnet 1: For web servers
     • Public Subnet 2: For application servers
     • Private Subnet: For database servers
   • Assign appropriate CIDR blocks to each subnet.

3. Internet Gateway (IGW):

   • Create an Internet Gateway and attach it to the VPC.

4. Route Tables:

   • Create two route tables - one for public subnets and one for the private subnet.
   • Configure the public route table to route traffic to the Internet Gateway.
   • Attach the public route table to the public subnets.

5. Security Groups:

   • Create security groups for the web, application, and database instances.
   • Define inbound and outbound rules for each security group.

Part 2: Instance Launch and Troubleshooting (15 points)

6. Launch EC2 Instances:

   • Launch one EC2 instance in each of the three subnets created earlier.
   • Use appropriate Amazon Machine Images (AMIs) for web, application, and database servers.

7. Troubleshooting Public Subnet Connectivity:

   • Test and identify any issues with instances in the public subnets not being able to access the internet.
   • Troubleshoot and provide solutions to enable internet access.

8. Private Subnet Security Group:

   • Test and identify any issues with instances in the private subnet not being able to communicate with instances in public subnets.
   • Troubleshoot and adjust security group rules to allow necessary communication while maintaining security.

Part 3: CIDR Range Calculation

9. Scenario - CIDR Range Calculation:
   • Given a requirement to accommodate 150 host addresses in a subnet, calculate the appropriate CIDR block (prefix length) to fulfill this requirement.
   • Provide the CIDR notation and subnet mask for the selected CIDR block.

Part 4: Documentation

10. Diagram:

    • Create a clear diagram representing your VPC, including subnets, instances, route tables, security groups, and CIDR ranges.

11. Documentation:

    • Write a document explaining the VPC design, CIDR block allocation, subnet setup, routing, security group configurations, CIDR range calculation, and troubleshooting steps.
    • Include screenshots where necessary to illustrate key points.

Submission: Submit your assignment as a .md file containing the diagram, documentation, and any additional files (e.g., screenshots).

Grading Criteria: Your assignment will be graded based on the completeness of VPC setup, accuracy of CIDR range calculation, accuracy of troubleshooting, clarity of documentation, and adherence to best practices for AWS VPC implementation.