Course 2277C: Implementing, managing, and maintaining a Microsoft Windows Server 2003 network infrastructure: Network services - Module 2

Chia sẻ: Nothing Nothing | Ngày: | Loại File: PPT | Số trang:24

Thêm vào BST

Báo xấu

49
lượt xem 4
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Module 2: Managing and monitoring dynamic host configuration protocol. This module provides you with the knowledge and skills to manage the DHCP service to reflect changing client IP addressing needs. It also provides you with the knowledge and skills to monitor DHCP server performance, because the DHCP environment is dynamic.

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Course 2277C: Implementing, managing, and maintaining a Microsoft Windows Server 2003 network infrastructure: Network services - Module 2

Module 2: Managing and Monitoring Dynamic Host Configuration Protocol
Overview • Managing a DHCP Database • Monitoring DHCP • Applying Security Guidelines for DHCP
Lesson: Managing a DHCP Database • Overview of Managing DHCP • What Is a DHCP Database? • How a DHCP Database Is Backed Up and Restored • How a DHCP Database Is Reconciled • DHCP Server Configuration Options • Practice: Managing a DHCP Database
Overview of Managing DHCP The DHCP service needs to be managed to respond to changes in the network Scenarios for managing DHCP: Managing DHCP database growth Protecting the DHCP database Ensuring DHCP database consistency Adding clients Adding new network service servers Adding new subnets
What Is a DHCP Database? The DHCP database is a dynamic database that contains configuration information • The DHCP database contains DHCP configuration data such as: – Scopes – Address leases – Reservations • Windows Server 2003 stores the DHCP database in the folder %Systemroot%\System32\Dhcp • The DHCP database files include: – Dhcp.mdb – Tmp.edb – J50.log and J50*.log – Res*.log – J50.chk
How a DHCP Database Is Backed Up and Restored DHCP Offline Server Storage Restore DHCP Back Restore up DHCP Back up InIf Thethe the DHCP event original service that database theautomatically server is unable hardware backs to load, fails, up the the The administrator moves a copy of the backed up administrator DHCP service databasecan automatically torestore the backup only restores from directory the from offline onthe the DHCP database to an offline storage location storage backup local drive location directory on the local drive
How a DHCP Database Is Reconciled Detailed IP DHCP address Compares Database lease and information reconciles Summary IP inconsistenc Registry address ies in the lease DHCP information Database DHCP Server Example Registry DHCP Database After Reconciliation Client has IP IP address Lease entry is created address 192.168.1.34 in DHCP Database 192.168.1.34 is available
DHCP Server Configuration Options Additional DHCP server configuration options include configuring: The console display options DNS integration DHCP server file locations Conflict detection Server connection bindings The options are configured on the DHCP server Properties tabs
Practice: Managing a DHCP Database In this practice, you will: Back up the DHCP database Restore the DHCP database Reconcile the DHCP database
Lesson: Monitoring DHCP • Overview of Monitoring DHCP • Multimedia: Creating a Performance Baseline • What Are DHCP Statistics? • What Is a DHCP Audit Log File? • How DHCP Audit Logging Works • Guidelines for Monitoring DHCP Server Performance • Guidelines for Creating Alerts for a DHCP Server • Practice: Monitoring DHCP
Overview of Monitoring DHCP Why monitor DHCP? DHCP environment is dynamic Determining DHCP server performance Monitoring facilitates planning for current and future needs DHCP data includes: DHCP statistics DHCP events DHCP performance data
Multimedia: Creating a Performance Baseline (Optional) • The objective of this presentation is to provide highlevel steps for creating a performance baseline • After this presentation, you will better understand: – The purpose of a performance baseline – A performance baseline is the level of system performance that you find acceptable – Server performance is critical to efficient network operations
What Are DHCP Statistics? DHCP Server DHCP statistics are collected at either the server level or scope level
What Is a DHCP Audit Log File? A DHCP audit log is a log of service-related events
How DHCP Audit Logging Works Audit logging is the daily collection of DHCP server events into log files 12:00 A.M. 3. DHCP closes 1. DHCP opens daily audit log daily audit log DhcpSrvLog-Mon.log DhcpSrvLog-Tue.log 2. DHCP performs disk checks
Guidelines for Monitoring DHCP Server Performance Performance What to look for after a baseline counters is established Create a DHCP performance Packets Monitor for sudden increases or baseline received/seco decreases, which could reflect problems nd Check the on standard the networkcounters for server performance Requests/sec Monitor for sudden increases or decreases, which could reflect problems ond on the network Review DHCP server counters for Monitor for increases both sudden and Active queue gradual, significant changes whichin DHCP could reflecttraffic increased length load or decreased server capacity Duplicates Monitor for any activity that could dropped/seco indicate that more than one request is nd being transmitted on behalf of clients
Guidelines for Creating Alerts for a DHCP Server Before creating an alert, define the range of acceptable performance Use scripts with your alerts
Practice: Monitoring DHCP In this practice, you will: Monitor DHCP server performance by using the Performance console Create an alert
Lesson: Applying Security Guidelines for DHCP • Guidelines for Preventing an Unauthorized User from Obtaining a Lease • Guidelines for Restricting Unauthorized, Non Microsoft DHCP Server from Leasing IP Addresses • Guidelines for Restricting Who Can Administer the DHCP Service • Guidelines for Securing the DHCP Database
Guidelines for Preventing an Unauthorized User from Obtaining a Lease To prevent an unauthorized user from obtaining Ensure that unauthorized persons do not a lease: have physical or wireless access to your network Enable audit logging for every DHCP server on your network Regularly check and monitor audit log files Use 802.1X-enabled LAN switches or wireless access points to access the network