Windows Server 2003 Infrastructure

Networking Services
 What we will cover:
 DHCP
 DNS
 TCP/IP and IP Security (IPSec)
 TCP/IP Version 6 (IPv6)
 Prerequisite Knowledge
 Experience administering Microsoft networks
 Experience supporting Windows Servers
 Experience supporting Microsoft network users
 Familiarity with the Windows user interface
 Agenda
 DHCP
 DNS
 TCP/IP and IPSec
 IPv6
 DHCP
Overview

 Dynamic Host Configuration Protocol

 Centralized distribution and management
– Clients obtains IP addresses from the server
– Automates TCP/IP configuration
– Administrators don’t have to manually configure each client
– Centralizes IP address management
– TCP/IP property changes are configured at the DHCP server
 DHCP
Scopes and Scope Properties
 Scope
– Range of IP addresses that clients can use
 Exclusion range
– Removes addresses from the address pool
 Address lease duration
– Length of time client can use IP address
 Reservations
– Permanently assign an IP address to a client
 DHCP
Scope Options
 Used to specify additional IP settings
– Router (gateway), DNS servers, WINS servers, etc.
 Option Types:
Option Type Applies to:
Server options All scopes on the server
Scope options Clients from specific scope

Class options A specific vendor class

Reservation options To a single reserved client

 DHCP
DNS Integration
 DHCP
New Features

 Windows 2000
– Integration with DNS
– Detection of unauthorized DHCP servers
 Windows Server 2003
– Backup and Restore of DHCP database from the UI
– Integration with NETSH command shell
– User- and vendor-specified option classes
 Agenda
 DHCP
 DNS
 TCP/IP and IPSec
 IPv6
 DNS
Overview

 Domain Name System

 Resolves names to IP addresses
– And IP addresses to names
 DNS allows clients to locate computers and services
– Resource records identify service, host, etc.
 DNS records stored in zone files
 Records can be dynamically updated
 DNS
Zone Storage Types

 Primary
– Read/write copy of zone file
 Secondary
– Read only copy of the zone file
 Delegated sub-domains
– Allows delegated administration of the DNS namespace
 Stub
– Replaces delegated sub domains
 DNS
Active Directory Integrated Zones
 DNS
Forwarders
 DNS
Aging and Scavenging
 Agenda
 DHCP
 DNS
 TCP/IP and IPSec
 IPv6
 TCP/IP and IPSec
IPSec Overview

 Internet Protocol Security

 Encrypts TCP/IP communications
 Configured through Group Policy
– Server and client both must be configured
 Secure all IP traffic or specific protocols and ports
 Works over Network Load Balancing
TCP/IP and IPSec
Configuring IPSec
TCP/IP and IPSec
IPSec Monitor
 Agenda
 DHCP
 DNS
 TCP/IP and IPSec
 IPv6
 IPv6
Overview

 Next generation of TCP/IP

 Addresses limitations of TCP/IP version 4
– Exhaustion of addresses
– Large routing tables in backbone routers
– Need for simpler, stateless configuration
– Need for better support of real-time delivery of data (QoS)
 IPv6
IPv6 Adoption

 Adoption seen as critical by everyone

– QoS which is becoming more important
– Better support for high-speed networks
– Routing, configuration, all the rest
 Current deployment: 6Bone
– Worldwide, collaborative, and informal
– http://www.6bone.net
 IPv6
Core Protocols

 Internet Protocol (IP) version 6

 Internet Control Message Protocol (ICMP) v6
 Multicast Listener Discovery (MLD)
 Neighbor Discovery (ND)
 IPv6
Addressing

 Addressing
– IPv4 32 bit address: 137.161.3.2
– IPv6 128 bit address: 21DA:00D3:0000:2F3B:02AA:00FF:FE28:9C5A
– 3.4x10^38 possible combinations
 Efficient addressing and routing
– Yields smaller routing tables on backbone routers
– Faster routing
 IPv6
Application Support and Management

 Winsock support (RFC 2553)

 DNS support for host name resolution
 IPSec support native
– IPSec on IPv6 is only partially functional
– For testing, not production
 RPC support
 IP Helper API support
 DHCP allows computers to automatically obtain IP configuration.
Session Summary
 DNS allows you to resolve a host name to an IP address or an IP address to a host.
 DHCP and DNS and management is easy and intuitive in Windows Server 2003.
 You can use IPSec to secure communications between computers.
 IPv6 is the next generation of TCP/IP.