e windows server 2008 r v e r 2 0 - donna warrendonna-warren.com/classes/lecture_slides/server...

WWII UNIT 1NNDDOOWWSS

SSEERR

Windows Server 2008RRVVEERRRR

2200

DPW© 2005-2010

DPWDPW© Donna Warren © Donna Warren

000088

WWIINNDDOOWWSS

SSEERR

TCP/IPRRVVEERRRR

2200

DPW© 2005-2010


000088

WWII IP AddressesNNDDOO

• A logical software address

WWSS

• Assigns a unique numerical identifier to each host on an IP network

SSEERR

• Contains two parts, a network ID and a host IDRR

VVEERR

• Regulated by INTERNIC

• An address is required by each NIC (networkRR

2200

• An address is required by each NIC (network interface card) in a host attached to the

t kDPW

© 2005-2010


000088

network

WWII TCP/IP Address ParametersNNDDOO

• IP address - a unique 32 bit binary number WWSS

expressed in dotted decimal notation (126.34.9.5)

SSEERR

• Subnet mask - identifies which part of the IP address identifies the network and which part RR

VVEERR

pidentifies the node

• Default gateway address - identifies the routerRR

2200

Default gateway address identifies the router that will forward IP traffic outside the local network

DPW© 2005-2010


000088

network

WWII IP Addresses FormatsNNDDOO ClassClassWWSS 00 NetID HostIDAA

SSEERR

1010 NetID HostIDBBRRVVEERR

110110 NetID HostIDCCRR

2200

1110 Multicast AddressDD8 bits 8 bits 8 bits8 bits

DPW© 2005-2010


000088

8 bits 8 bits 8 bits8 bits

WWII IP Address ClassesNNDDOO

There are five IP classes

WWSS

Class Range Binary Start Bit Default Mask

Cl A 1 127 0 255 0 0 0SSEERR

Class A 1-127 0 255.0.0.0

Class B 128-191 10 255.255.0.0

Cl C 192 223 110 255 255 255 0RRVVEERR

Class C 192-223 110 255.255.255.0

Class D 224-239 1110

RR

2200

Class A, B and C are available to the public Class D is a multicast format

Class E 240-255 1111

DPW© 2005-2010


000088

Class D is a multicast format Class E is used for experimental purposes

WWII Maximum Hosts by ClassNNDDOO

y

WWSS Class Subnets No. of Addresses

SSEERR

Class A 224 16,777,216RRVVEERR

Class B 216 65,536

Cl C 28 256RR

2200

Class C 28 256

DPW© 2005-2010


000088

WWII Maximum Valid Hosts by ClassNNDDOO

y

WWSS Class Subnets No. of Addresses

SSEERR

Class A 2 -224 16,777,214RRVVEERR

Class B 2 -216 65,534

Class C 2 28 254RR

2200

Class C 2 -28 254

DPW© 2005-2010


000088

WWII IP Address ReservationsNNDDOO

• A network number cannot be all “0’s”. It is i t t d t “thi t k”WW

SSinterpreted to mean “this network”

• A host number cannot be all “0’s” - this syntax SSEERR

refers to the network itself. Example 150.14.117.200 refers to host 117.200 on the RR

VVEERR

current class B network 150.14

• The final octet cannot be all “1’s” or “0’s” (0 or RR

2200

e a oc e ca o be a s o 0 s (0 o255) (255 is the broadcast address)

• The first octet cannot be 127 127 is the loop

DPW© 2005-2010


000088

• The first octet cannot be 127. 127 is the loop back address

WWII Subnet MasksNNDDOO • Each IP class is paired with a mandatoryWWSS

Each IP class is paired with a mandatory default subnet mask

SSEERR

• The subnet mask designates which portion of the address is the network RR

VVEERR

pnumber and which is the host

“1’ ” i di t th t k d “0’ ”RR

2200

• “1’s” indicate the network and “0’s” indicate the host

DPW© 2005-2010


000088

WWII Default Subnet MasksNNDDOO • Class A WWSS

– 255.0.0.0– 11111111.00000000.00000000.0000000

Cl BSSEERR

• Class B – 255.255.0.0

11111111 11111111 00000000 00000000RRVVEERR

– 11111111.11111111.00000000.00000000• Class C

– 255.255.255.0RR

2200

55 55 55 0– 11111111.11111111.11111111.00000000

DPW© 2005-2010


000088

WWII Default Subnet MasksNNDDOO • Example 1 (Class B)WWSS – IP address 143.3.4.200

Subnet Mask 255 255 0 0SSEERR

– Subnet Mask 255.255.0.0

– Network Number 143.3.0.0RRVVEERR

• Example 2 (Class A)

– IP address 4.117.45.3RR

2200

– Subnet Mask 255.0.0.0

Network Number 4 0 0 0

DPW© 2005-2010


000088

– Network Number 4.0.0.0

WWII Default Subnet MasksNNDDOO

• Example 3 (Class C)

WWSS

– IP address 195.3.4.200

– Subnet Mask 255.255.255.0SSEERR


• Example 4 (Class C)RRVVEERR

• Example 4 (Class C)

– IP address 206.117.45.3RR

2200

– Subnet Mask 255.255.255.0


DPW© 2005-2010


000088

WWII IPv4 AddressingNNDDOO

g

WWSS

SSEERRRRVVEERRRR

2200

DPW© 2005-2010


000088

WWII Alternate Configuration TabNNDDOO

g

• Allows for a WWSS

second address to

SSEERR

be assigned to a network RR

VVEERR

interface.

RR

2200

DPW© 2005-2010


000088

WWII CIDR(Classless Addressing)NNDDOO

( g)

• 15.234.48.34/24WWSS

– Subnet mask is 255.255.0.0– Network address is 15.234.48.0

SSEERR

– Host address is 0.0.0.34• 203 23 47 234/16RR

VVEERR

• 203.23.47.234/16– Subnet mask is 255.255.0.0

Network address is 203 23 0 0RR

2200

– Network address is 203.23.0.0– Host address is 0.0.47.234

DPW© 2005-2010


000088

WWII Network Address Translation (NAT)NNDDOO

( )

• Hosts using private network addressesWWSS

Hosts using private network addresses can communicate with public networks only by using network address

SSEERR

only by using network address translation (NAT),

• Enables routing by mapping theirRRVVEERR

• Enables routing by mapping their private network address to a different, routable network addressRR

2200

routable network address.

DPW© 2005-2010


000088

WWIINNDDOOWWSS

SSEERR

SubnettingRRVVEERRRR

2200

DPW© 2005-2010


000088

WWII Subnet AddressesNNDDOO • An organization can subdivide it’s host WWSS

gaddress space into groups called subnets.

• The subnet ID is generally used to group SSEERR

hosts based on the physical network topology.

RRVVEERR 10 NetID SubnetID HostIDRR

2200

10 NetID SubnetID HostID

DPW© 2005-2010


000088

WWII SubnettingNNDDOO

grouter

WWSS

Subnet 1 Subnet 2 Subnet 3SSEERR

128.213.1.x 128.213.2.x 128.213.3.x

RRVVEERRRR

2200

DPW© 2005-2010


000088

WWII SubnettingNNDDOO

g

• Subnets can simplify routing.WWSS

p y g• IP subnet broadcasts have a host ID of all 1s.• It is possible to have a single wire network

SSEERR

It is possible to have a single wire network with multiple subnets.

RRVVEERRRR

2200

DPW© 2005-2010


000088

WWII Subnet MaskingNNDDOO

g

• Create a custom subnet mask by borrowingWWSS

Create a custom subnet mask by borrowing bits from the Host address

• Available subnets 2n-2 , where n = # bits used SSEERR

,for subnet

• Available networks 2k-2 , where k = # bits left RRVVEERR

,for host

RR

2200

DPW© 2005-2010


000088

WWII SubNetworking MaskingNNDDOO

g g

• Class AWWSS

– 255.000.000.000– 11111111 00000000 00000000

00000000SSEERR

00000000• Class B

– 255.255.000.000RRVVEERR

– 11111111 11111111 00000000 00000000• Class C

RR

2200

– 255.255.255.000– 11111111 11111111 11111111 00000000

DPW© 2005-2010


000088

WWII Subnetwork DeltaNNDDOO • Determine the binary equivalent of theWWSS

Determine the binary equivalent of the rightmost bit of the subnetwork mask

• This is the deltaSSEERR

• This is the delta• Add the delta to the subnetwork mask

Thi i fi t b t k IDRRVVEERR

• This is first subnetwork ID• Add 1 to the subnetwork ID for first host ID

RR

2200

• Add the delta to determine following subnetwork IDs

DPW© 2005-2010


000088

WWII Determining Subnet AddressesNNDDOO

g• Starting from the left of the subnet octet(s), convert

the Os to 1s the least significant digit in the networkWWSS

the Os to 1s the least significant digit in the network portion of the subnet mask determines the network address increment. Convert this value to decimal. (ex 111000b0 1 i S b t ill t t t 32 64 96 128SS

EERR

111000b0, 1 in Subnets will start at 32, 64, 96, 128, 160, 192)

• Everything below increment value and equal to orRRVVEERR

• Everything below increment value and equal to or above mask value are invalid. The Range of addresses for each subnet would include all valid RR

2200

add esses o eac sub et ou d c ude a a daddresses between increment values, but drop the first and the last in each range.

DPW© 2005-2010


000088

WWII Example 1NNDDOO • Class C address 209. 143.75.0WWSS

Class C address 209. 143.75.0• Mask 255.255.255.224

Last mask value = 224 In binary this isSSEERR

• Last mask value = 224. In binary this is 11100000.

1RRVVEERR

• The lowest 1 position when converted to decimal is 32.

RR

2200

• The increment value is 32.

DPW© 2005-2010


000088

WWII Example 1NNDDOO

pHost Address Range

WWSS

209. 143.75.32 209. 143.75.63209.143.75.64 209.143.75.95

SSEERR

209.143.75.96 209.143.75.127209. 143.75. 128 209. 143.75. 159

RRVVEERR

209. 143.75. 160 209. 143.75. 191209.143.75.192 209.143.75.223

RR

2200

• The first and last entry in each range will be equivalent to either all ZERO's or all ONE's. This does not follow the rules of addressing and they must be dropped from use as host IDs.

• All zeros becomes the subnet ID

DPW© 2005-2010


000088

• All zeros becomes the subnet ID• All ones becomes the broadcast ID for the subnet

WWII Subnet Binary RepresentationsNNDDOO Decimal Binary # BitsWWSS

Decimal Binary # Bits

.192 11000000 2

224 11100000 3SSEERR

.224 11100000 3

.240 11110000 4RRVVEERR

.248 11111000 5

.252 11111100 6RR

2200

.254 11111110 7

255 11111111 8

DPW© 2005-2010


000088

.255 11111111 8

WWII Example 1NNDDOO

p• Consider 209. 143.75.32 mask 255.255.255.224

WWSS

Address 11010000 11000111 11001011 00100000Mask 11111111 11111111 11111111 11100000

SSEERR • In this case our default mask value is

Host 00000

RRVVEERR

In this case our default mask value is

• 11111111 11111111 11111111 00000000

• We used a custom mask of RR

2200

• 11111111 11111111 11111111 11100000• In which we used 3 bits from our original host portion of 8 bits to

identify networks and left 5 bits to identify hosts on each network.

DPW© 2005-2010


000088

• Which should give us 23-2 = 6 subnets • With 25-2 = 30 hosts per subnet

WWII IPv6 (IP Version 6)NNDDOO

( )• Uses a 128 bit address represented in HEX• Will allow 350 X 1036 possible addresses

WWSS

• Will allow 350 X 1036 possible addresses• IP address built on the MAC address8 G f 16 bit b t d b l (8SS

EERR

8 Groups of 16-bit numbers separated by colons (8 hexadecimal numbers)MAC 01 34 54 55 68 CA IP 6 dd iRR

VVEERR

• MAC = 01:34:54:55:68:CA so IPv6 address is01:34:54:FF:FE:55:68:CA

RR

2200

• IPv6 Syntax = :0134:54FF:FE55:68CA

• Zero Compression – sequences of zeros are

DPW© 2005-2010


000088

replaced with two colons

• Being used by some networks

WWII Domain Name System (DNS)NNDDOO

y ( )• Domain Name System (DNS) used for

l tiWWSS

name resolution.• It translates from Host name to IP

SSEERR

addresses.• HOSTS files also translate from Host RR

VVEERR

name to IP addresses.• Prevents you from rememberingRR

2200

Prevents you from remembering addresses.– Instead remember meaningful logical

DPW© 2005-2010


000088

– Instead, remember meaningful logical names.

WWIINNDDOOWWSS

SSEERR

DNS (Domain Name System)RRVVEERRRR

2200

DPW© 2005-2010


000088

WWII DNS ServiceNNDDOO

• Resolves FQDN (fully qualified domain t IP ddWW

SSnames to IP addresses

• Static Database using host names (UNIX SSEERR

and internet convention)• Names stored in in a text fileRR

VVEERR

• DNS can be configured to use WINS netbios name resolutionRR

2200

netbios name resolution • Provide reverse lookup services

DPW© 2005-2010


000088

• Has sophisticated caching techniques

WWII Name Server RolesNNDDOO

• Primary - Zone information stored in locally maintained filesWW

SS

maintained files

• Secondary - Zone information downloaded from SSEERR

a master name server

• Master - Source of zone information for a RRVVEERR

secondary name server. Can be either a primary or secondary name server.RR

2200

primary or secondary name server.

• Caching - No zone information stored, only maintains (caches) the results of queries

DPW© 2005-2010


000088

maintains (caches) the results of queries. Default installation type

WWII DNS ZonesNNDDOO

• Primary Zones store the database locally and have authority for the data

WWSS

y• Secondary Zones get the zone information from

another server.SSEERR

• Forward lookup DNS zones allow a resolver (an application included in web browsers and most FTP RR

VVEERR

ppsoftware) to obtain an IP address when the host name is known.

RR

2200

• A Reverse lookup DNS zone allows a resolver to obtain a host name when an IP address is known. The

DPW© 2005-2010


000088

PTR record can be automatically created when you enter a record into the Forward lookup zone

WWII Database File Record EntriesNNDDOO • The first record created is the SOA (StartWWSS

The first record created is the SOA (Start Of Authority) record and defines the parameters for its zone

SSEERR

parameters for its zone.• You can link WINS to DNS - One WINS

t b ti i th fRRVVEERR

server must be operating in the zone of authority and WINS lookup must be

bl d i th d t bRR

2200

enabled in the zone database

DPW© 2005-2010


000088

WWII Zones of AuthorityNNDDOO

• Zone of Authority - Portion of name space that a partic lar name ser er is responsibleWW

SSthat a particular name server is responsible for.

SSEERR

• Zone transfer - Process of downloading zone data from a master name server to a

RRVVEERR

secondary name server.

RR

2200

• NOTE: a single server can be authoritative for multiple zones

DPW© 2005-2010


000088

authoritative for multiple zones

WWII DNS Resource Record TypesNNDDOO

yp• A - address record maps host name to IP

addressWWSS

address

• AAAA - maps host name to IPv6 addressSSEERR

• CNAME - canonical name record establishes an alias for a host nameRR

VVEERR

• MX - mail exchange record identifies a mail server for a specified domainRR

2200

p

• NS - Name server record identifies the name server for a specified DNS domain

DPW© 2005-2010


000088

server for a specified DNS domain

• MH - multihomed computer

WWII DNS Resource Record TypesNNDDOO

yp• PTR - pointer record associates an IP

WWSS

address with a host name in a reverse lookup database

SSEERR

• SOA - start of authority specifies the domain for which the DNS server is RR

VVEERR

do a o c e S se e sresponsible

• WINS WINS record identifies the WINSRR

2200

• WINS - WINS record identifies the WINS server to be consulted to resolve names not recorded in DNS name space

DPW© 2005-2010


000088

not recorded in DNS name space

WWII netadmin dnsNNDDOO

netadmin.dns@ IN SOA netadmin.ittesi.com. dpw.ittesi.com.

; name serversWWSS

; name servers

@ IN NS netadmin. ittesi.com

; aliases

SSEERR

teacher IN CNAME netadmin

; mail server

@ IN MX 10 mail1RRVVEERR

@ IN MX 10 mail1.

@ mail1 IN A 200.200.200.34

; WINS recordRR

2200

@ IN WINS 200.200.200.34

DPW© 2005-2010


000088

WWII Nslookup UtilityNNDDOO

p y• A command line utility that allows troubleshooting

WWSS

for DNS servers• Syntax

SSEERR

c> nslookup microsoft.comServer: ns02.plnfld01.nj.comcast.net

RRVVEERR

Address: 68.39.224.6

Non-Authorative answer

N i ftRR

2200

Name: microsoft.com

Addresses: 207.46.249.22 207.46.249.27 207.46.249.190 207.46.134.155

DPW© 2005-2010


000088

207.46.134.190 207.46.134.222

WWIINNDDOOWWSS

SSEERR

DHCP (Dynamic Host Configuration Protocol)RR

VVEERR

Configuration Protocol)

RR

2200

DPW© 2005-2010


000088

WWII Other 2008 ServicesNNDDOO

• DHCP relay agent

– A machine designated to listen for DHCP requests on WWSS

g qsubnets without a DHCP server

– It then relays the request to the DHCP server

SSEERR

• Routing

– 2008 can act as a router by installing 2 NICs and fi i th ti d t iRR

VVEERR

configuring the routing and remote access service

• Remote Access

P id t i ith di lRR

2200

– Provides remote access using either dial-up connections via a modem or else through a Virtual Private Network (VPN)

DPW© 2005-2010


000088

• Network Access Protection (NAP)

– Policy platform to provide access control

WWII Server RolesNNDDOO • Services are software that allow the

f ifi f iWWSS

server to perform a specific function• Describe the primary function, purpose or

SSEERR

use of the server• A server may perform multiple rolesRR

VVEERR

• You can install multiple roles in one session

RR

2200

• No need to re-run Security Configuration Manager

DPW© 2005-2010


000088

g• Automation is easy

WWII Server Role ExamplesNNDDOO

• Active Directory Certificate Services• Active Directory Domain Services• Active Directory Federation Services

p

WWSS

• Active Directory Federation Services• Active Directory Lightweight Directory Services• Application Server

DHCP SSSEERR

• DHCP Server• DNS Server• Fax ServerRR

VVEERR

• File Services• Network Policy and Access Services• Print Services

RR

2200

• Terminal Services• Web Server• Windows Deployment Services

DPW© 2005-2010


000088

p y• Windows Server Virtualization• Windows Server Update Services 3.0 Service Pack 1 (New!)

WWII Server FeaturesNNDDOO

• Programs that support or augment the functionality of a role

WWSS

functionality of a role• Some examples

F il Cl t iSSEERR

– Failover Clustering– BitLocker– GPMCRR

VVEERR

– GPMC– RPC Proxy– SMTP ServicesRR

2200

– SNMP Services– WINS

DPW© 2005-2010


000088

– Desktop Experience

WWII Servermanagercmd.exeNNDDOO

• Command line utility that can manage server roles

g

WWSS

server roles– ServerManagerCmd.exe –query c:\myQuery.xml

S M C d i t ll W b S h tIfSSEERR

– ServerManagerCmd.exe –install Web-Server –whatIf –

logPath c:\Web-Server-Log.txt

S M C d i t ll GPMCRRVVEERR

– ServerManagerCmd.exe –install GPMC

– ServerManagerCmd.exe –remove DHCP

RR

2200

– ServerManagerCmd.exe –install PowerShell –resultPath

c:\PSInstall.xml –logPath –c:\PSInstallLog.txt

DPW© 2005-2010


000088

WWII Initial Configuration TasksNNDDOO

g

• Postpone configuration tasks until WWSS

installation is complete• Exposes the tasks necessary toSS

EERR

• Exposes the tasks necessary to complete setup and get the server operationalRR

VVEERR

operational• Shorten the time between OS

RR

2200

installation and deployment of the server

DPW© 2005-2010


000088

server

WWII Server ManagerNNDDOO

• Steps the user through adding and removing server roles and features

g

WWSS

removing server roles and features securelyDi l t t kSS

EERR

• Displays server status, exposes key management tasks, and guides the user t d d t lRR

VVEERR

to advanced tools• Provides a command-line interface for

RR

2200

scripted installations

DPW© 2005-2010


000088

WWII File Services RoleNNDDOO

• Installing the File Services role provides additional capabilitiesWW

SSadditional capabilities– Distributed file system

SSEERR

– File Server Resource Manager (FSRM)RR

VVEERR

( S )– Single Instance Store (SIS)

RR

2200

– Windows Search Service– Windows Server 2003 File Services

DPW© 2005-2010


000088

– Share and Storage Management

WWII Network (SAN) Technology NNDDOO

• 2008 supportsS M f SANWW

SS– Storage Manager for SANs– Storage Explorer

SSEERR

– iSCSI Initiator– iSCSI Remote BootRR

VVEERR

iSCSI Remote Boot– iSNS Server

M lti th I/ORR

2200

– Multipath I/O

DPW© 2005-2010


000088

WWII Terminal Services RoleNNDDOO • The Terminal Services role included in

Wi d S 2008 i l t thWWSS

Windows Server 2008 implements the following role services:

SSEERR

– Terminal Server– TS Licensing

RRVVEERR

– TS Session Broker– TS Gateway

RR

2200

– TS Web Access

DPW© 2005-2010


000088

WWII Web Server (IIS) RoleNNDDOO

( )• Originally, Web servers were designed to

respond to requests for Hypertext MarkupWWSS

respond to requests for Hypertext Markup Language (HTML) files generated by client browsers.

SSEERR

• Eventually, Web pages grew in complexity, incorporating images into their content, and RR

VVEERR

then audio and video, and finally applications.

RR

2200

• Today, organizations use Web servers for a variety of applications, servicing clients on i t t t t d th I t t

DPW© 2005-2010


000088

intranets, extranets, and the Internet.

WWII UDDI ServicesNNDDOO

• Universal Description, Discovery, and Integration (UDDI) acts as an internal catalog of their available

WWSS

(UDDI) acts as an internal catalog of their available Web services

• Used primarily on and intranet or protected extranetSSEERR

p y p

• The UDDI Services role in Windows Server 2008 consists of the following role services:RR

VVEERR

– UDDI Services Database — Provides a central storage location for the UDDI catalog and the service’s configuration settings.RR

2200

g g

– UDDI Services Web Application — Implements a Web site with which users and applications can access the UDDI catalog to search for Web services on the network

DPW© 2005-2010


000088

UDDI catalog to search for Web services on the network.

WWII Application Server RolesNNDDOO

• Web Server (IIS)A li ti S l bl IIS tWW

SS• Application Server role enables IIS to

host Web services developed using i t h Wi dSS

EERR

environments such as Windows Communication Foundation (WCF) and NET F k 3 0RR

VVEERR

.NET Framework 3.0• Print server

RR

2200

• Fax serverSt i M di S i

DPW© 2005-2010


000088

• Streaming Media Services• Core Server – command line only

e windows server 2008 r v e r 2 0 - donna warrendonna-warren.com/classes/lecture_slides/server...

Documents