Lab Bring-up
Verify $LAB_SSID AP, $LAB_IFACE, Bluetooth RoE, host-only isolation before capstone.
Visual · t15_lab_bringup
Bring-up before capstone walk. Original Cyberlium.
A capstone on the wrong SSID is a capstone on someone else's network.
Confirm: lab AP powered, $LAB_SSID broadcast matches RoE BSSID, $LAB_IFACE sees monitor mode if needed, lab client can associate, Bluetooth device list loaded, segmentation ping test passes, notes directory chmod 600 ready. Mark N/A items honestly if hardware missing — that is a finding on YOUR bench, not an excuse to use neighbor nets.
1. Radio verify
iwconfig/$LAB_IFACE mode; airodump sees only $LAB_BSSID when filtered.
Channel and cipher match checklist.
Command guide
Try these commands — Radio verify
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Lab bring-up — https://www.aircrack-ng.org/doku.php Wireshark — https://www.wireshark.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install network-manager sudo apt install iw sudo apt install aircrack-ng
macOS: Use airport / System Settings Prefer Linux lab VM for iw Prefer Kali VM — aircrack-ng needs supported adapter
Windows: Use netsh wlan (built-in) Use Kali VM / WSL with iw Use Kali VM with USB passthrough adapter
═══ LINUX / macOS ═══
Command — copy this
iw dev 2>/dev/null; nmcli device status 2>/dev/null sudo airmon-ng 2>/dev/null | head -8 || echo 'Bring up YOUR lab adapter; leave monitor mode when done' nmcli device wifi list 2>/dev/null | head -10
Primary tools to practice this lesson: nmcli, iw, airmon-ng. Reference sites: Lab bring-up (https://www.aircrack-ng.org/doku.php); Wireshark (https://www.wireshark.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Bluetooth verify
Adapter present; RoE devices powered.
Discoverable off except during paired exercise.
3. Isolation verify
Lab client cannot reach home LAN management IPs.
Document bring-up timestamp in capstone pack.
4. What you ship: bring-up verification
Radio + Bluetooth + isolation checks with timestamps.
5. What you record before the next lesson
Bring-up log path.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Skip BSSID check and capture 'whatever is strongest.'
- Right: Bring-up verified. Next: capstone lab.
Mission: lab bring-up log
1) Verify $LAB_SSID/BSSID/channel. 2) Verify $LAB_IFACE and BT RoE. 3) Segmentation ping test logged.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Mark N/A without skipping ethics?”
APPLY: Bring-up confirms:
APPLY: True or False: Strongest signal replaces RoE.
APPLY: Missing hardware: