IIPS Fall Conference

Session IIINetwork AdministratorsNetwork Management

(:30)

Overview

• What is managed• Software used to Manage the network• Using Logon Scripts to manage

workstations• Software/Hardware used to troubleshoot

network problems• Tips and Suggestions to make managing

your network easier

What is Managed

• What it is that we manage– Approximately 1200 Workstations– 25 Windows NT/2000 Servers– 2 Unix Servers– 1 Novell Server– Approximately 40 Student Computer Labs– Approximately 300 Staff/Faculty Workstations– Approximately 100 Networked Printers

• Mostly HP JetDirects managed with HP WebAdmin

What is Managed (cont.)

• IT Department Staff– Director

– Associate Director• Unix Admin

• Telephone Support

– Network Administrator• Web Administrator

– 2 Tech Support Specialist• Network/PC Support

– Computer Center Specialist• Unix Support

• User Account Management

– Software Support Specialist• Help Desk

• Web Development

• Trainer

Simpson 2nd Floor Wiring Closet6509 Cisco Switch

Ethernet

SD

Ba y Netwo rks1 2 3 4 5 6

13 14 15 16 17 18

7 8 9 10 11 12

1 9 2 0 2 1 22 23 24

1 2 3 4 5 6 7 8 9 1 0 11 12100

10

F Dx

Ac tivity

2 3 2413 1 4 15 16 1 7 18 19 20 21 22100

10

F Dx

Ac tivity

Co mm P ort

Po wer

Diagno s tics

B a ySta ck 350F-HD 10/100 Autosen se Switch

2 5 26

25 26100

F Dx

Activit y

Fernihurs tBays tack 350F-HD

Ethernet

SD

Ba y Netwo rks1 2 3 4 5 6

13 14 15 16 17 1 8

7 8 9 10 11 1 2

19 20 21 22 23 2 4

1 2 3 4 5 6 7 8 9 10 11 12100

10

F Dx

Ac tivity

2 3 2413 14 1 5 16 1 7 18 19 20 2 1 22100

10

F Dx

Ac tivity

Co mm Po rt

Po wer

Diagno s tics

Ba yS ta ck 350 F-HD 10/100 Autosen se Switch

25 26

25 2610 0

F Dx

Activity

Books toreBays tack 350F-HD

EthernetSD

Bay Networks

P owe r

Dia gnos t ics

Ba yStack 350F Ethe rnet Switch

1 2

10 01 0

Act ivity

1 001 0

1 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activit y

Pines Bas ementBays tack 350F

Ethernet

Dogwood - Machine ShopBays tack 350F

SDBay Ne tw orks

P owe r

Dia gnos tics

Ba yStack 350F Ethe rnet Switch

1 2100

10

Activit y

1 00

1 01 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activit y

EthernetSD

Bay Networks

P owe r

Dia gnos t ics

Ba yStack 350F Ethe rnet Switch

1 2

10 01 0

Act ivity

1 001 0

1 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activit y

Dogwood - Gaylen SaundersBays tack 350F

EthernetSD

Bay Networks

P owe r

Dia gnos t ics

Ba yStack 350F Ethe rnet Switch

1 2

10 01 0

Act ivity

1 001 0

1 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activit y

Ches tnut (Maintenance)Bays tack 350F

Dedicated 100MbFiber Optic

Connections

Link

P hy

Activity

450-1LX MDAT X RX

100 0BAS E -L X

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

Sycamore 1s t Floor Wiring Clos et S tackBays tack 450-24T

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

Link

P hy

Activity

450-1LX MDAT X RX

100 0BAS E -L X

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

Birch Bas ement Wiring Clos etBays tack 450-24T

Dedicated 1000MbFiber Optic

Connections

SDSE RIE SCatalys t 3500 XL

P WR

Rhododendron 1s t Floor Server SwitchCis co 3524

S D

SDSE RIE SCatalys t 3500 XL

P WR

Elm Room 229 Building SwitchCis co 3524

S D

Link

P hy

Activity

450-1LX MDAT X RX

100 0BAS E -L X

Lin k

P hy

Activity

450-1LX MDATX RX

1 000BAS E- LX

SDSE RIE SCatalys t 3500 XL

P WR

Elm Room 203 Building SwitchCis co 3548

S D

S D12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Ba y Ne tworks

Ba yS ta c k 450-24T Swit c h

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Mod ule

Com m Po rt 1 001 0F DxActivit y

1 001 0F DxActivit y

Elm Room 203 (Room 208) SwitchBays tack 450-24T

S D

SDSE RIE SCatalys t 3500 XL

P WR

Azalea Main Building SwitchCis co 3548

S D

SDSE RIE SCatalys t 3500 XL

P WR

Laurel Wiring Clos etCis co 3524

S D

SDSE RIE SCatalys t 3500 XL

P WR

Laurel Wiring Clos etCis co 3524

S D

S D

SDSE RIE SCatalys t 3500 XL

P WR

LRC Wiring Clos etCis co 3524

S D

SDSE RIE SCatalys t 3500 XL

P WR

Sims on 1s t Floor Wiring Clos etCis co 3524

S D

Point to PointT1 Connection

S D

S D

C isc o MC 3800 SE RIE S

C IS CO YS TE MSS

Madis on Campus Router (ABTECH Side)Cis co 3810

10Mb EthernetConnection S D

C isc o MC 3800 SE RIE S

C IS CO YS TE MSS

Madis on Campus Router (Madis on S ide)Cis co 3810

Madis on Campus

SDSE RIE SCatalys t 3500 XL

P WR

Simps on 2nd Floor Wiring Clos etCis co 3524

100 Mb EthernetConnection

SD

Cisco 3600 SE R IE SC IS CO YSTEMSS

Enka Campus Router (ABTECH Side)Cis co 3620

Dual Point to PointT1 Connection

S D

SCISCO YSTEMS

5th Floor Server RoomOperations Building6509 Cis co Switch

S D

STA

TUS

WS-X6408-GBIC

8 P ORT S G IGABIT ET HE RNET

1 2 3 4 5 6 7 8

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

S D

STA

TUS

SUPER VISOR LINK

SYST E

M PORT 2

LINKA

CTIV

E

PW

R M

GMT

RES

ET

CONS OLE

S WIT CHLOAD1-2 0%

CONS OLEP ORT

1 %E JE CTP CMCIA

P ORT 1

LINK

WS-X6K-SUP1-2GE

S D S D S D S D S D S D S D S D

S D S D

Dedicated 1000MbFiber Optic

ConnectionsS D

S D

SDSE RIE SCatalys t 3500 XL

P WR

1s t Floor Wiring Clos etR&D BuildingCis co 3524

S D

S D

SD

FX

1 00Base

TX

9V DC Inp ut

T R A N S I T I O Nn e t w o r ks

Ethe rne t100 Bas e T X to FX

Me d ia Con ve rte r

E- 10 0BT X-FRL -0 1

SD

FX

1 00B

aseTX

9V DC I nput

T R A N S I T I O Nn et w or ks

Ethernet100 BaseT X to FX

Med ia Con verter

E- 10 0BT X-FRL -0 1

SDSERIESCatalyst 3500 XL

P WR

5th Floor Server RoomOperations Building

Cisco 3524

SDCisco 3600 SE RIE SCIS CO YSTEMSS

Enka Campus Router (Enka Side)Cisco 3620

Dedicated 100MbFiber Optic

Connections

Ethernet

SD

Bay Networks1 2 3 4 5 6

13 14 15 16 17 18

7 8 9 10 11 12

1 9 2 0 2 1 22 23 24

1 2 3 4 5 6 7 8 9 1 0 11 12100

10

F Dx

Ac tivity

2 3 2413 1 4 15 16 1 7 18 19 20 21 22100

10

F Dx

Ac tivity

Co mm P ort

Power

Diagno stics

BayStack 350F-HD 10/100 Autosense Switch

2 5 26

25 26100

F Dx

Activity

RhododendronBaystack 350F-HD

ABTECH Network Diagram

EthernetSD

Bay Networks

P ower

Diagnostics

BayStack 350F Ethernet Switch

1 210 01 0

Activity

1 001 0

1 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activity

HemlockBaystack 350F

EthernetSD

Bay Networks

P ower

Diagnostics

BayStack 350F Ethernet Switch

1 210 01 0

Activity

1 001 0

1 2

F Dx F Dx

9 10 11 12 13 147 85 63 43 4 5 6 7 8 9 10 11 12 13 14

Activity

MapleBaystack 350F

Ethernet

SD

Bay Networks1 2 3 4 5 6

13 14 15 16 17 18

7 8 9 10 11 12

1 9 2 0 2 1 22 23 24

1 2 3 4 5 6 7 8 9 1 0 11 12100

10

F Dx

Ac tivity

2 3 2413 1 4 15 16 1 7 18 19 20 21 22100

10

F Dx

Ac tivity

Co mm P ort

Power

Diagno stics

BayStack 350F-HD 10/100 Autosense Switch

2 5 26

25 26100

F Dx

Activity

SunnicrestBaystack 350F-HD

SD

SCISCO YSTEMS

SD

STA

TUS

WS-X6408-GBIC

8 P ORT S G IGABIT ET HERNET

1 2 3 4 5 6 7 8

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

SD

STA

TUS

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

LINK

WS-X6224-100FX-MT

24 P ORT 1 00F X

SD

STA

TUS

SUPERVISOR LINK

SYST E

M PORT 2

LINKA

CTIV

E

PW

R MG

MT

RESET

CONSOLE

SWIT CHLOAD1-2 0%

CONSOLEP ORT

1 %EJ ECTP CMCIA

P ORT 1

LINK

WS-X6K-SUP1-2GE

SD SD SD SD SD SD SD SD

SD SD

Ethernet

SD12 3 4 5 6 7 8 9 10 11 12

13 1 4 15 1 6 1 7 18 19 20 21 22 23 24

2 5 26 27 28

Bay Networks

BayS tack 450-24T Switch

2 3 4 5 6 7 8 9 1 0 11 1 2

13 14 1 5 16 1 7 18 19 2 0 21 2 2 23 2 4

1

Uplink Module

Comm Po rt 1 001 0F DxActivity

1 001 0F DxActivity

SunnicrestBaystack 350-24T

TX RX TX RX

1 00BASE -FX 1 00BASE-FXOn LineLinkActivity

Ethernet

SD

Bay Networks1 2 3 4 5 6

13 14 15 16 17 1 8

7 8 9 10 11 1 2

19 20 21 22 23 2 4

1 2 3 4 5 6 7 8 9 10 11 12100

10

F Dx

Ac tivity

2 3 2413 14 1 5 16 1 7 18 19 20 2 1 22100

10

F Dx

Ac tivity

Co mm Port

Power

Diagnostics

BayS tack 350F-HD 10/100 Autosense Switch

25 26

25 2610 0

F Dx

Activity

RhododendronBaystack 350F-HD

SDSERIESCatalyst 3500 XL

P WR

Rhododendron Room 203 Wiring ClosetCisco 3524

100 Mb EthernetConnection

100 Mb EthernetConnection

Dedicated 1000MbFiber Optic

Connections

100 Mb EthernetConnection

100 Mb EthernetConnection

Dedicated 1000MbFiber Optic

Connections

Dual Point to PointT1 Connection

Software Used to Manage ABTECH’s network

• BlueOcean’s TrackIt Enterprise– www.blueocean.com– Helpdesk and work order management

• Wiredred’s E/Pop– www.wiredred.com– Workstation Remote Control and Instant Messaging

• Hyper Technologies’ Deepfreeze Pro– www.winselect.com– Lab computer lockdown

• Symantec’s Ghost– www.symantec.com/ghost– Imaging and Image Distribution

• Symantec’s PCAnywhere– www.symantec.com/pca– Remote Control of Servers

Using Login Scripts

• Batch Files– Very limited for login scripts– Lots of additional stand alone programs needed

to enable basic login script capabilities

• VBScript– Useful but not designed for use in login Scripts– Must create routines, or find them on the net,

that enable basic login script capabilities

Using Login Scripts (cont.)

• Kixtart– Login Script Processor designed from the

ground up for use in login scripts– It will work on any version of Windows (9x,

ME, 2000, and XP)– It was originally designed by a Microsoft

engineer and included in the Windows NT Resource Kit

Using Login Scripts (cont.)

– Kixtart is available for free on the web at http://www.kixtart.org

• Latest Official Release Kixtart is v3.63

• Kixtart 2001 RC3 is available

Using Login Scripts (cont.)

• What we do with logon scripts– Display Acceptable Use Policy– Set various registry settings– Configure Termite (Terminal Emulation

Software)– Install or Configure Groupwise

• What we do with logon scripts (cont.)– Copy Files – Map Drives– If necessary install Command Antivirus

• Do not use Window 2000 Group Policies to distribute Command Antivirus

– Determine if Deepfreeze is installed and take appropriate action

Hardware/Software used to diagnose problems with ABTECH’s network

• Fluke’s One Touch• Network Instruments’ Expert Observer• Basic Tools

– PING– TRACERT (traceroute)– NET VIEW– NBTSTAT– WINIPCFG / IPCONFIG

• Suggestions– Fluke’s OptiView

• http://www.flukenetworks.com/– Network Associates Sniffer

• www.sniffer.com

Tips and Suggestions• Setup a Server either per a lab or for a group of

labs– Why

• Storage of Ghost image(s) for lab(s)• Application and User file storage off of primary servers• User accounts and groups for lab stations kept off of

Administrative Servers, is the logon server for the lab(s)• Network traffic (ghost, applications) associated with the lab is

kept off of primary network– Must have either the workstations or the lab switch connected to

a multicast enabled switch

– How• Does not need to be a real server, a workstation class machine

can be used with server software loaded on it

Tips and Suggestions (cont.)

• Isolating labs where Windows NT/2000 Server is taught– Why

• Certain services running on server can disrupt the campus network, the primary example is DHCP.

– How• Must use a router, either hardware or software, to

block broadcast traffic.– Do not use NAT if the workstations use files from a server

on the other side of the router.

Tips and Suggestions (cont.)• Lab Assistants for Student Computer Labs

– Why• They can be trained to support the hardware and software in a

lab.

• They can be responsible for re-imaging the workstations in a lab.

– How• Lab Assistants can be pulled for the student population in a

part-time manner.

• Full-time Lab Assistants (Lab Managers) could be placed under the IT department and used for other IT task when free.

Tips and Suggestions (cont.)• Use only a few types of PC Configurations

– Why• Makes troubleshooting problems easier

• Allows for an easier setup using a pre-configured ghost image

– How• Have one or more pc configurations from a single

PC vendor that your staff or faculty can select

• Pre-test the most common applications and your network setup with these configurations

Conclusion

• Any Questions?