Transcript Introducing WINS, DNS, and RRAS

Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
Goals
 Understand Windows Internet Naming Service (WINS)
 Understand the Domain Name System (DNS)
 Understand DNS name resolution
 Install and configure the DNS service
 Understand Routing and Remote Access Service (RRAS)
 Understand types of remote access connections
11.1
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
Goals (2)
 Configure remote access services
 Create a remote access policy
 Create a VPN server
 Examine Internet Connection Sharing (ICS)
 Examine Network Address Translation (NAT)
11.2
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS)
 A NetBIOS Name Server (NBNS) is an application responsible for
mapping NetBIOS names to IP addresses
 Microsoft’s implementation of an NBNS is Windows Internet Naming
Service (WINS)
 The computer running WINS is referred to as the WINS server
 WINS allows clients on a network configured to use WINS (called
WINS clients) to dynamically register their NetBIOS name-to-IP
address mappings in a database called the WINS database
11.3
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (2)
 Microsoft WINS clients use four methods in the following order to
resolve NetBIOS names
 NetBIOS name cache: Stores information about the most
recently resolved NetBIOS names in client memory
 Windows Internet Naming Service (WINS): This method is the
most likely to be used on a network and the most likely to
succeed
 Broadcast: The basic method of NetBIOS name resolution,
which sends requests simultaneously to all network hosts on the
attached subnet
 LMHOSTS file: A text file, stored on the local computer, which
contains the static mappings of NetBIOS names to IP addresses
for computers on remote networks only
11.4
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-1 NetBIOS name resolution process using WINS
11.5
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-2 Resolving a NetBIOS name using a NetBIOS broadcast
11.6
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-3 Resolving a NetBIOS name using the LMHOSTS file
11.7
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (3)
 The resolution method and the order in which the methods will be
used depend on the NetBIOS node type
 B-node (Broadcast): Uses broadcasts to resolve names
 P-node (Peer-to-Peer or Point-to Point): The client queries a
WINS server in order to resolve names
 M-node (Mixed): Broadcasts are used first to attempt to resolve
names; this node type is usually used when the WINS server is
located across a WAN link
 H-node (Hybrid): The client attempts to query a WINS server
first in order to resolve names; this is the default node type if
using WINS
11.8
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
H-node (Hybrid) is the
default node type for
Windows 2000, Windows
XP Professional, and
Windows Server 2003 if
WINS is enabled. The
Node Type hexadecimal
value is 8.
Figure 11-4 The Node Type key
11.9
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-5 The NetBIOS name registration process
11.10
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (4)
 Requirements on a TCP/IP network
 WINS can only be installed on a Windows NT Server,
Windows 2000 Server, or Windows Server 2003 computer
 The server must be configured with a static IP address, a
subnet mask, a default gateway, and other TCP/IP
parameters
 After a WINS server has been configured, you must
make sure that the clients on the network are configured
11.11
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Click to open the
TCP/IP WINS Server
dialog box where you
will enter the static IP
address for a WINS
server
Figure 11-6 The WINS tab in the
Advanced TCP/IP Settings dialog box
11.12
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-7 The Networking Services dialog box
11.13
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
To view the content of the
WINS database, right-click
Active Registrations and
select Display Records.
Then, click the Find Now
button to view all active
registrations in the details
pane. You can also create
filters to search for
records based on a name
pattern, IP address, record
owner, or record type.
Figure 11-8 The WINS console
11.14
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (5)
 It is a recommended practice to back up the WINS
database every time the server shuts down (by selecting
Backup database during server shutdown on the General
tab)
 Burst handling is a method for handling a high or burst
period of WINS registration and renewal traffic
11.15
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-9 The General tab in the
Properties dialog box for the WINS server
11.16
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-10 The Intervals tab
11.17
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-11 The Database Verification tab
11.18
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Used to force WINS
replication when a
new version of the
WINS database has
been created
Figure 11-12 The Advanced tab
11.19
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (6)
 WINS replication process
 Process by which WINS servers on a network swap
information with one another
 It is done through “partnering” with other WINS servers so
that all WINS servers are interconnected and replication
occurs between them
11.20
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Select to use IP
multicasts to identify the
other WINS servers on
the network and
automatically configure
them as Push/Pull
replication partners
Figure 11-13 The Advanced tab in the
Replication Partners Properties dialog box
11.21
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-14 The New Replication Partner dialog box
11.22
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-15 The Replication Partners Properties dialog box
11.23
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Understanding Windows Internet
Naming Service (WINS) (7)
 WINS Push Replication
 Occurs when the service starts or when an address in the
database changes
 The server pushes replication by notifying its partners that
changes have occurred
 When the partners receive the notification, they can pull
the replication data from the WINS server
 WINS Pull Replication
 Is controlled by setting a schedule for the partners
 By default, this is set to occur every 30 minutes
11.24
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-16 WINS replication
11.25
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
Figure 11-17 The Push
Replication tab
11.26
(Skill 1)
Figure 11-18 The Pull
Replication tab
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 1)
Figure 11-19 The Intervals tab on the
Properties dialog box for a WINS server
11.27
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Understanding the Domain
Name System (DNS)
 Domain Name System (DNS) is the main name
resolution service for Windows Server 2003
 DNS servers, also referred to as DNS name servers,
perform the task of name resolution to convert host
names to IP addresses
 The DNS namespace
 Has a hierarchical structure
 The nodes in this hierarchical structure are called domains
 As you add more domains to the DNS hierarchy, the name
of the parent domain is added to the child domain or subdomain
11.28
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Understanding the Domain
Name System (DNS) (2)
 DNS hierarchy
 The domain at the top is called a root domain and is
represented by a trailing period
 The child domain of the root domain is called a top-level
domain
 The child domain of a top-level domain is called a secondlevel domain
 A host name is at the bottom of the DNS hierarchy and
designates a particular computer
 A fully qualified domain name (FQDN) includes a domain
name in addition to a host name
11.29
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Figure 11-20 The DNS hierarchy
11.30
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Figure 11-21 A FQDN
11.31
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Understanding the Domain
Name System (DNS) (3)
 On a small network, a DNS server may contain just one
database file that stores all of the name-to-IP-address
resolution data
 In larger networks, it may be necessary to create zones
 Zone are distinct, contiguous segments of the DNS
namespace
 Servers in each zone store records about the resources in
that zone in a file called a zone database file
 A zone database file contains various types of resource
records
11.32
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Understanding the Domain
Name System (DNS) (4)
 When multiple DNS servers are created in a standard DNS zone, there
are two kinds of DNS database files: primary and secondary
 Primary database file
 Modifications can be made only to the primary database file
 Zone transfers occur to replicate any changes to the primary zone
database file to the secondary zone database file
 Secondary database file servers
 Reduce the traffic and query load on the primary database zone
server
 Provide redundancy so that if the authoritative server is down, the
secondary database file servers can service requests
11.33
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Understanding the Domain
Name System (DNS) (5)
 Caching-only name servers
 Use caching to store information collected during name
resolution
 They are not authoritative for any zone
 Cache query results to reduce network traffic
 A query result can be cached for a specific amount of time
called the Time to Live (TTL), after which it is deleted
11.34
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 2)
Figure 11-22 The DNS namespace subdivided into zones
11.35
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 3)
Understanding DNS Name Resolution
 Client computers can make two standard types of
queries to a DNS server: a forward lookup query and a
reverse lookup query
 A forward lookup query occurs when a client asks the DNS
server to resolve a host name to an IP address
 A reverse lookup query
Involves resolving a known IP address to a host name
Uses the in-addr.arpa domain, a special second-level domain
created expressly for this task
11.36
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 3)
Understanding DNS Name Resolution (2)
 Recursive query
 A type of forward lookup query used to request that a DNS name
server provides the full and complete answer to the query
 It is a request for the answer, not for a referral to another DNS
server that may be able to answer the query
 Iterative query
 If the designated DNS name server is unable to resolve the
destination host name on its own, it sends an iterative query on
behalf of the client to assist in answering the recursive query
 Iterative queries allow DNS servers to send back pointer or referrals
 Resolver
 A host that performs a recursive search and issues iterative queries
 Queries other DNS name servers, including root servers, to look up
DNS records on behalf of the client
11.37
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 3)
Figure 11-23 Forward lookup queries
11.38
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 3)
Figure 11-24 in-addr.arpa
11.39
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 3)
Figure 11-25 Resolving a host name to an IP address
11.40
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service
Considerations
 The size of your network is important because key
implementation issues will vary for small, mid-sized, and
large networks
 DNS resilience
Refers to the hardiness of the DNS infrastructure,
specifically its ability to continue operating when
individual components have been damaged
To ensure DNS resiliency, you should have at least
one primary and one secondary DNS server for a
domain
11.41
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service (2)
 Using DNS on an intranet, the Internet, or both
 If you plan to use DNS on both, you must decide whether you
want to use a single domain name for both, or different domain
names for internal and external resources
 If you plan to have an Internet presence, you must register your
domain name with an Internet naming authority such as
Network Solutions
 Registering your domain name is not required if you plan to
implement DNS only on an intranet, but it is recommended
 Types of DNS zones
 Root zone is a zone authoritative for the root domain
 Forward lookup zones are used to resolve host names to IP
addresses
 Reverse lookup zones are used to resolve IP addresses to host
names
11.42
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-26 Same internal and external DNS namespace
11.43
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-27 The DNS Cache file opened in Microsoft Word
11.44
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service (3)
Main types of zones
 The standard primary zone is the first zone to be created and
it is authoritative for one or more domains
 Secondary zones
 Read-only copies of another zone on the network
 Created after the primary zone to provide redundancy for
the primary name server
 Stub zones are an enhancement to delegated sub-domains
that were added as a new feature in Windows Server 2003’s
DNS Server service
 Active Directory-integrated zone uses Active Directory to store
and replicate zone database files
11.45
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service (4)
 Locations where DNS zones can be stored in Active
Directory
 Domain directory partition
Where data pertaining to a particular Active Directory domain
is stored
This includes data about objects such as users and
computers
 Application directory partitions
Implemented to improve replication efficiency in situations
where only a subset of the domain controllers needs a copy of
the application data
Use them to store data that will only be replicated to a specific
group of domain controllers
11.46
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
DNS zone data will be
replicated to all domain
controller/DNS servers
in the Active Directory
forest
Figure 11-28 Creating an application directory partition for a forest
11.47
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
DNS zone data will be
replicated to all
domain controller/DNS
servers in the Active
Directory domain
Figure 11-29 Creating an application directory partition for a domain
11.48
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-30 Installing the DNS service
11.49
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-31 The dnsmgmt console
11.50
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-32 The Select Configuration Action screen
11.51
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-33 The Forward Lookup Zone screen
11.52
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-34 The Zone Type screen
11.53
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-35 The Dynamic Update screen
11.54
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-36 The Reverse Lookup Zone screen
11.55
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service (5)
Reverse lookup zone
 Can be created in the console tree
 The first reverse lookup zone is a primary zone
 If your DNS server is a domain controller and you are creating an
Active Directory-integrated zone, you must configure how you want
zone data to be replicated
 The default configuration is for zone data to be replicated to all
domain controllers in the Active Directory domain (domain directory
partition)
11.56
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Installing and Configuring
the DNS Service (6)
 Resource records
A zone must contain the resource records for all
resources in the domain for which it is responsible
When a zone is created, DNS automatically adds an
SOA (Start of Authority) resource record and a NS
(Name Server) resource record
11.57
© 2004 Pearson Education, Inc.
Exam 70-290 Managing and Maintaining
a Microsoft® Windows® Server 2003 Environment
Lesson 11: Introducing WINS, DNS, and RRAS
(Skill 4)
Figure 11-37 Adding a resource record
11.58
© 2004 Pearson Education, Inc.