MCITP Guide to Microsoft Windows Server 2008 Server

MCITP Guide to Microsoft Windows Server 2008 Server Administration (Exam #70 -646) Chapter 8 Managing Windows Server 2008 Network Services

Learning Objectives • • Understand IPv 6 planning issues Install, configure, and troubleshoot DNS Implement Microsoft WINS Install, configure, and troubleshoot DHCP MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 2

Planning for IPv 6 • IPv 4 – More commonly used today • Understand IPv 6 – In the future a transition from IPv 4 to IPv 6 is likely MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 3

IPv 4 Compared to IPv 6 • IPv 4 limitations – Uses 32 -bit addresses (4 bytes) – Network security – Implementing more sophisticated routing and subnetting options • Advantages of IPv 6 compared to IPv 4 – 128 -bit addresses (16 bytes) – IPsec use required for security – Nonrequired data stored in extension headers MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 4

IPv 4 Compared to IPv 6 (cont’d. ) • Advantages of IPv 6 compared to IPv 4 (cont’d. ) – Flow Label field for better packet flow handling by routers • Quality of Service (Qo. S) – Simpler automatic address configuration – More compact and efficient routing tables through using route aggregation – Address Resolution Protocol replaced by Neighbor Discovery protocol MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 5

IPv 4 Compared to IPv 6 (cont’d. ) • Address issues – IPv 6 is unlikely to run out of available IP addresses because it enables 2128 addresses • About 3. 4 × 1038 – Leading zeros can be removed – Contiguous fields containing only zeros can be represented as two colons (: : ) – Enables the use of address prefixes MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 6

IPv 4 Compared to IPv 6 (cont’d. ) • IPsec issues – IP security (IPsec) enables IP communications to be secured • Authentication certificates and encrypting data – Mandatory in IPv 6 • Header issues – Header streamlined to contain only vital information – Optional information stored in one or more of six types of extension headers: • Hop-by-hop, routing, fragment, authentication, encapsulating security payload, destination options MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 7

IPv 4 Compared to IPv 6 (cont’d. ) Figure 8 -1 IPv 4 packet header Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 8

IPv 4 Compared to IPv 6 (cont’d. ) Figure 8 -2 IPv 6 packet header Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 9

IPv 4 Compared to IPv 6 (cont’d. ) • Quality of Service issues – Flow label field enables packet flow management for Quality of Service (Qo. S) at network routers – Advantages of Qo. S • Simpler automatic address configuration – APIPA can be used: • On private and enterprise networks using DHCPv 6 • Or a DNS server in coordination with DHCPv 6 MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 10

IPv 4 Compared to IPv 6 (cont’d. ) • Routing Tables – IPv 6 enables routers to use global addresses on the Internet – Route aggregation • Technique for organizing network routes hierarchically • Address Resolution Protocol and Neighbor Discovery Protocol – Neighbor Discovery (ND) protocol • Uses messages and other means to discover network computers’ and routers’ physical addresses and more MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 11

Types of IPv 6 Packets • Unicast – Identified by single address for a single interface (NIC) and transmitted point-to-point – Six types of IPv 6 unicast addresses • Anycast – Contains a destination address that is associated with multiple interfaces • Multicast – Destination address associated with multiple interfaces – Directed to each interface with that address group MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 12

Types of IPv 6 Packets (cont’d. ) Table 8 -1 IPv 6 unicast address types MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 13

Implementing Microsoft DNS • Domain Name System (DNS) – TCP/IP application protocol – Enables a DNS server to resolve domain and computer names to IP addresses • Or IP addresses to domain and computer names • DNS servers – Provide the DNS namespace for an enterprise MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 14

Implementing Microsoft DNS (cont’d. ) • Active Directory on a Windows Server 2008 network – Must have a DNS server on the network – Windows Server 2008 DNS most compatible with Active Directory • Non-Microsoft versions of DNS – Do not offer the DNS replication advantages through Active Directory MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 15

Installing DNS Services • DNS installed as a server role in Windows Server 2008 • Activity 8 -1: Installing DNS – Objective: Learn how to install DNS MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 16

Installing DNS Services (cont’d. ) Figure 8 -3 DNS Server information window Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 17

DNS Zones • Zone houses tables of different types of resource records – Table called zone file or zone database • Forward lookup zone – Links computer names to IP addresses • Host record in IPv 4 – Host address (A) resource record • Host record in IPv 6 – IPv 6 host address (AAAA) resource record • DNS server can have several forward lookup zones MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 18

DNS Zones (cont’d. ) • Reverse lookup zone – Holds the pointer (PTR) resource record – Contains the IP-address-to-host name • Activity 8 -2: Creating a Reverse Lookup Zone – Objective: Learn how to create a reverse lookup zone • Activity 8 -3: Manually Creating DNS Host Address A Resource Records – Objective: Create a Host Address A Resource Record MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 19

DNS Zones (cont’d. ) Table 8 -2 DNS resource records MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 20

Using the DNS Dynamic Update Protocol • Dynamic DNS (DDNS) – Modern form of DNS – Enables client computers and DHCP servers to automatically register IP addresses • DNS dynamic update protocol – Enables information in a DNS server to be automatically updated in coordination with DHCP • Activity 8 -4: Verifying the DNS Dynamic Update Configuration – Objective: Verify that DNS is configured to be dynamically updated using the DNS dynamic update protocol MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 21

Using the DNS Dynamic Update Protocol (cont’d. ) Figure 8 -8 Configuring a new host record Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 22

DNS Replication • Primary DNS server – Main administrative server for a zone – Authoritative server for that zone – All changes to the zone must be made on that DNS server • Secondary DNS server – Backup to primary server – Contains a copy of the primary DNS server’s zone database – Not used for administration MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 23

DNS Replication (cont’d. ) • Secondary DNS server (cont’d. ) – Obtains copy through a zone transfer over the network – Vital services: • Ensure a copy of the primary DNS server’s data, in case the primary server fails • Enable DNS load balancing • Reduce congestion in one part of the network • Set up Microsoft DNS services on at least two DCs – Multimaster replication model enables you to replicate DNS information on each DC MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 24

Stub Zone • Only the bare necessities for DNS functions: – SOA record zone – Name server (NS) records to identify authoritative servers – Record for name servers that are authoritative • One common use – Help quickly resolve computer names between two different namespaces • Create stub zone using the same steps as to create a primary or secondary zone MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 25

Additional DNS Server Roles • DNS servers can play several specialized roles – Forward name resolution requests to a specific remote DNS server • Root hint – Resource record to enable a DNS server to quickly find an authoritative DNS server in a zone that is not on the DNS server – Used to find an authoritative DNS server on the Internet • General steps for configuring forwarders or root hints MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 26

Additional DNS Server Roles (cont’d. ) Figure 8 -10 DNS forwarder server Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 27

Additional DNS Server Roles (cont’d. ) Figure 8 -11 Sample preconfigured root hints Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 28

Additional DNS Server Roles (cont’d. ) • Caching server – – – Used to provide fast queries Results of each query are stored in RAM Provides fast response to users Does not contain zone databases Queries a primary or secondary DNS server and caches the results – Can reduce the number of secondary DNS servers MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 29

Using DNS to Balance Application Access • DNS round robin – Effective way to help spread the load for frequently used applications that have their own data sets • Examples: – – Internet Information Services (IIS) for Web servers Accounting applications in a large organization Customer service data sets Proxy servers – Resource records are created for two or more servers that have different IP addresses but are associated with the same host name MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 30

Using DNS to Balance Application Access (cont’d. ) • General steps to configure DNS round robin and netmask ordering – – – Open the DNS tool Right-click the server Click Properties on the shortcut menu Click the Advanced tab Ensure that the boxes are checked for Enable round robin and Enable netmask ordering – Click OK in the server Properties dialog box – Close the DNS tool MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 31

Figure 8 -13 Configuring DNS round robin and netmask ordering Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 32

DNS Enhancements • Full support for IPv 6 • Background zone loading – DNS server with large number of entries in its zones can load those entries as a background process • DNS server can be housed on a Read Only Domain Controller • DNS services implement the Global. Names zone MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 33

Creating a DNS Implementation Plan • Recommendations: – Implement Windows Server 2008 DNS servers instead of other versions of DNS – Consider developing a plan to implement IPv 6 – Register external corporate namespace • Ensure it conforms to domain naming standards – Consider using namespaces to represent natural organizational boundaries MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 34

Creating a DNS Implementation Plan (cont’d. ) • Recommendations (cont’d. ): – Make sure the DNS servers on a private network are well secured – Plan to locate a DNS server across most site links – Create two or more DNS servers – When you have off-site links between different domains, designate one DNS server as a forwarder to reduce traffic over those links – Number of DNS servers that you set up can be related to your analysis of an organization MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 35

Creating a DNS Implementation Plan (cont’d. ) • Recommendations (cont’d. ): – When using forwarding, DNS server must be capable of making recursive queries – Plan to migrate the WINS functions over to DNS – Branch location with an RODC needs local DNS services • Make RODC a secondary DNS server – Use DNS round robin to distribute the load MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 36

Troubleshooting DNS • Troubleshooting steps – Restarting the DNS Server and DNS Client services – Check most recent log errors relating to DNS • Activity 8 -5: Checking the DNS Server and Client Services – Objective: Verify that the DNS Server and Client services are started • Activity 8 -6: Checking Log Entries for DNS – Objective: Check the log information about possible DNS errors MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 37

Troubleshooting DNS (cont’d. ) Figure 8 -14 Viewing the status of the DNS Client and DNS Server services Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 38

Troubleshooting DNS (cont’d. ) Table 8 -3 Troubleshooting DNS server problems MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 39

Implementing Microsoft WINS • Windows Internet Naming Service (WINS) – Register Net. BIOS computer names and map them to IP addresses • WINS parts – WINS server – WINS database • Install WINS in Windows Server 2008 for Net. BIOS name and IP lookup • Does not have the same security as DDNS MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 40

Implementing Microsoft WINS (cont’d. ) • Activity 8 -7: Installing WINS – Objective: Learn how to install WINS Figure 8 -17 Installing WINS Server Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 41

Implementing Microsoft DHCP • Dynamic Host Configuration Protocol (DHCP) – Enables server to detect the presence of a new workstation and assign an IP address to that workstation – Enables a network or server administrator to save hours of time • Scope – Range of contiguous addresses MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 42

Implementing Microsoft DHCP (cont’d. ) • Single Microsoft DHCP server supports – Dynamic configuration of DNS server forward and reverse lookup zone records – Up to 1, 000 different scopes – Up to 10, 000 DHCP clients • Windows Server 2008 server – Configure in the role of a DHCP server using Microsoft DHCP services • Additional features of a Microsoft DHCP server MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 43

Implementing Microsoft DHCP (cont’d. ) • Activity 8 -8: Installing DHCP – Objective: Learn how to install DHCP Figure 8 -19 Specifying the IPv 4 DNS Server settings Courtesy Course Technology/Cengage Learning MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 44

Configuring a DHCP Server • Set up one or more scopes of contiguous address ranges • Activate each scope • Authorize the DHCP server • Configure the DHCP server and its clients to automatically update DNS records – Not required, but saves time in managing DNS • Activity 8 -9: Configuring DHCP Scopes – Objective: Learn how to configure a DHCP scope MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 45

Configuring a DHCP Server (cont’d. ) • Activity 8 -10: Configuring Automatic DNS Registration – Objective: Verify that a DHCP server is configured to automatically register IP addresses with a DNS server MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 46

DHCPv 6 Support and Configuring IPv 6 • Dynamic Host Configuration Protocol for IPv 6 (DHCPv 6) – For networks that are working to implement IPv 6 • Stateful autoconfiguration – Computer or network device using IPv 6 contacts a DHCP server for a leased address • Stateless autoconfiguration – Computer or network device assigns its own IPv 6 address • Constructed from the MAC address of its NIC combined with the subnet designation obtained from the router MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 47

DHCPv 6 Support and Configuring IPv 6 (cont’d. ) • Activity 8 -11: Configuring and Viewing an IPv 6 Address – Objective: Learn how to configure IPv 6 and to view an IPv 6 address after it is configured MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 48

Troubleshooting DHCP Table 8 -4 Troubleshooting a DHCP server MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 49

Summary • IPv 6 has many advantages over IPv 4 • Three types of IPv 6 packets • DNS is used to resolve domain and computer names to IP addresses and vice versa • Configure Dynamic DNS – Enable automated IP address registration in a coordinated way with a DHCP server • DNS round robin and netmask ordering – Help balance the load on application servers MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 50

Summary (cont’d. ) • DNS enhancements in Windows Server 2008 – – IPv 6 support Background zone loading DNS on RODC Global. Name zones • Windows Server 2008 provides WINS for Net. BIOS name and IP address lookup • DHCP dynamically leases IP addresses to client computers MCITP Guide to Microsoft Windows Server 2008, Server Administration (Exam #70 -646) 51