Showing posts with label DHCP. Show all posts

DHCP, DNS, Active Directory sous Windows Server 2008 R2





DHCP, DNS, Active Directory sous Windows Server 2008 R2 :






 ________________________________________

Follow us on Facebook

Follow us on Google+

________________________________________



I- Installation et configuration du DHCP sous Windows Server 2008 R2 :




Installation du rôle :


Lancement de l'ajout de rôles depuis la console Gestion de l'ordinateur : 

cliquer sur Ajouter des rôles





Cliquer sur suivant pour validé.











Coché la case 

Serveur DHCP 

pour installer le service DHCP et cliquer sur suivant.




Lisez la note et 

cliquer sur suivant 

pour passer à la prochaine étape.





Tapez le nom de 
votre 
domaine et 
l’adresse IP 
du Serveur DNS.






Coché la premier case à coché si vous ne voulez pas utiliser le WINS.








Cliquez sur Ajouter pour donner les différentes informations sur l’étendu que vous désirez configurer dans votre serveur.






Taper 
•Le Nom de l’étendue 
•L’adresse IP de début.
•L’adresse IP de FIN.
•Le Masque de sous-réseau.
•L’adresse IP de la passerelle par défaut.


Coché la 2éme case pour désactiver le système d’dressage IPv6 car en vas travailler que avec IPv4







Coché la denier Option pour reporter l’autorisation du serveur DHCP dans l’Active Directory.






La console d’installation affiche un résumer sur les différentes options configurer, Cliquez sur installer pour commencer l’installation du service.


En attende jusqu’au l’installation finie.


L’installation est terminée avec succès.



  • - Configuration des étendues nécessaire :



  • - Création des réservations pour les Serveur MAIL/WEB/FTP :





Depuis le menu démarrer choisissez option 

d’administration > DHCP
Dans le serveur DHCP bouton droit sur
Réservation > Nouvelle réservation.




En spécifie le Nom de la réservation 
(ne de l’hôte)
L’adresse IP à réserver
L’adresse MAC de l’hôte

Installing DHCP in Windows server 2008 :

  

Installing DHCP in Windows server 2008 :

 

 ________________________________________

Follow us on Facebook

Follow us on Google+

________________________________________

 

 

Presentation:

That your PC can communicate in a network, they must have correct TCP IP setting: same subnet, separate IP address, it must be added to the address of the gateway (the router that can communicate with other networks) and the parameters needed to run your Active Directory (DNS, at least).

Instead of managing this manually by PC PC, just add to your network with a DHCP (Dynamic Host Configuration Protocol) server then distribute your network addresses of your PC and save them correctly in your DNS database.

The DHCP role will allow you to do this with Windows Server 2008 R2.

 

Role installation:

 




Launching the Add Roles from the Computer Management console: click on Add Roles











 




 Check the DHCP Server




When you add the DHCP server role in Server Manager, you can specify whether or not WINS is required for applications on the network. WINS primarily supports clients running earlier versions of Windows and applications that use NetBIOS. Windows 2000, Windows XP, Windows Vista ®, Windows Server 2003 and Windows Server ® 2008 use DNS names in addition to NetBIOS names. Environments that include computers using NetBIOS names and other computers using domain names must include WINS and DNS servers.


If all your network computers running Windows 2000, Windows XP, Windows Vista, Windows Server 2003 or Windows Server 2008, and you do not take care of applications requiring NetBIOS names, you must set the DNS method as your sole method of name resolution. However, before you consider removing the service or not to install WINS servers, identify the computers and applications that rely on NetBIOS and determine the impact of removing NetBIOS. You may find that a critical application relies on NetBIOS (no alternative at the moment), in which case you should continue to use WINS. For example, some older versions of applications, such as Microsoft ® Systems Management Server (SMS) and e-mail configurations Client / Server Microsoft ® BackOffice ® ​​Server using Exchange may require the NetBIOS naming







Windows Server ® 2008 supports DHCPv6 server functionality stateless and stateful. Mode clients use DHCPv6 stateless DHCPv6 to obtain network configuration parameters other than IPv6 address, such as DNS server addresses. Customers configure an IPv6 address through a mechanism not based on DHCPv6, such as automatic configuration of IPv6 addresses (based on IPv6 prefixes included in Router Advertisements) or configuring static IP addresses.

DHCPv6 stateful mode, clients acquire IPv6 address and other network configuration parameters through DHCPv6.






Dans Windows Server® 2008, le service Serveur DHCP est intégré dans Active Directory pour fournir l’autorisation pour les serveurs DHCP. Un serveur DHCP non autorisé sur un réseau peut interrompre les opérations réseau en allouant des adresses ou des options de configuration incorrectes. Un serveur DHCP contrôleur de domaine ou membre d’un domaine Active Directory interroge Active Directory pour obtenir la liste des serveurs autorisés (identifiés par leur adresse IP). Si sa propre adresse IP ne figure pas dans la liste des serveurs DHCP autorisés, le service Serveur DHCP ne termine pas sa séquence de démarrage et se ferme automatiquement.
Ceci est un problème courant pour les administrateurs réseau qui tentent d’installer et de configurer un serveur DHCP dans un environnement Active Directory sans autoriser auparavant le serveur.
Pour un serveur DHCP qui n’est pas membre du domaine Active Directory, le service Serveur DHCP envoie un message de diffusion DHCPInform pour demander des informations sur le domaine Active Directory racine dans lequel d’autres serveurs DHCP sont installés et configurés. Les autres serveurs DHCP du réseau répondent à l’aide d’un message DHCPAck, qui contient des informations que le serveur DHCP de requête utilise pour localiser le domaine racine Active Directory. Le serveur DHCP de départ interroge ensuite Active Directory pour obtenir la liste des serveurs DHCP autorisés et démarre le service Serveur DHCP uniquement si sa propre adresse figure dans la liste.

Fonctionnement des autorisations :

Le processus d’autorisation des serveurs DHCP dépend du rôle installé du serveur sur le réseau. Il existe trois rôles ou types de serveur pour lesquels un serveur peut être installé :
  • Contrôleur de domaine -- l’ordinateur sauvegarde et entretient une copie de la base de données Active Directory et fournit une gestion des comptes sécurisée aux utilisateurs et ordinateurs membres du domaine.
  • Serveur membre -- l’ordinateur ne joue pas le rôle de contrôleur de domaine, mais s’est joint à un domaine dont il est membre avec un compte dans la base de données Active Directory.
  • Serveur autonome -- l’ordinateur n’est ni contrôleur de domaine ni serveur membre d’un domaine. Au lieu de cela, l’ordinateur serveur se fait connaître du réseau par un nom de groupe de travail défini, éventuellement partagé avec d’autres ordinateurs, mais qui ne sert qu’à la navigation et non pour fournir un accès sécurisé aux ressources partagées du domaine.







Installing DHCP in Windows server 2008 ( Video) :

 

 


DHCP configuration on Cisco Router or switch

 

 DHCP configuration on Cisco Router or switch :

 ________________________________________

Follow us on Facebook

Follow us on Google+

________________________________________ 


Let's begin to configure basic DHCP on IOS-based router.
May configure through console cable or Ethernet cable, however please plug into correct port and use correct method access into IOS command line console.

To configure Cisco IOS DHCP, follow these steps, which include sample commands:
  1. Configure an IP address on the router's Ethernet port, and bring up the interface. (On an existing router, you would have already done this.)
  2. Create a DHCP IP address pool for the IP addresses you want to use.
  3. Specify the network and subnet for the addresses you want to use from the pool.
  4. Specify the DNS domain name for the clients.
  5. Specify the primary and secondary DNS servers.
  6. Specify the default router (i.e., default gateway).
  7. Specify the lease duration for the addresses you're using from the pool. (i.e: 7days and 12hours / half day)
  8. Exit Pool Configuration Mode.
Next, exclude any addresses in the pool range that you don't want to hand out.
For example, let's say that you've decided that all IP addresses up to .100 will be for static IP devices such as servers and printers. All IP addresses above .100 will be available in the pool for DHCP clients.

Here's an example of how to exclude IP addresses .100 and below:


Then, enter the ipconfig /renew command on the laptop to receive an IP address. After you have the IP address, enter the ipconfig /all command.

This is the sample output:



DHCP configuration on Cisco Router or switch :

 

 

DHCP for IPv6


The Dynamic Host Configuration Protocol for IPv6(DHCPv6) has been standardized by the IETF through RFC3315. The Dynamic Host Configuration Protocol for IPv6 (DHCP) enables DHCP servers to pass configuration parameters, such as IPv6 network addresses, to IPv6 nodes. It offers the capability of automatic allocation of reusable network addresses and additional configuration flexibility. This protocol is a stateful counterpart to "IPv6 Stateless Address Autoconfiguration" (RFC 2462), and can beused separately, or concurrently with the latter, to obtain configuration parameters.
The basic DHCPv6 client-server concept is similar to using DHCP for IPv4. If a client wishes to receive configuration parameters,it will send out a request on the attached local network to detect available DHCPv6 servers. This done through the “Solicit” and “Advertise” messages. Well known DHCPv6 Multicast addresses are used for this process. Next, the DHCPv6 client will ”Request” parameters from an available server which will respond with the requested information with a “Reply” message. The diagram below demonstrates the sequence of events: 

The DHCPv6 client will know when it wants to use DHCPv6, either based upon instruction of an attached router, or when no default gateway is present. The default gateway has two configurable bits in an Router Advertisement (RA) available for this purpose:

• ‘O’ bit—When this bit is set, the client can use DHCPv6 to retrieve Other configuration parameters (ie: DNS addresses)
• ‘M’ bit—When this bit is set, the client may use DHCPv6 to retrieve a Managed IPv6 address from a  DHCPv6 server

When a router sends an RA with ‘O’ bit set, but does not set the ‘M’ bit, the client can do Stateless Address Autoconfiguration (SLAAC) to obtain its IPv6 address, and use DHCPv6 for obtaining additional information. (An example of additional information is DNS). This mechanism is well known as Stateless DHCPv6, because the DHCPv6 server does not need to keep track of the client address bindings.

DHCPv6 uses an architecture concept of “options” to carry additional parameters and information within DHCPv6 messages. These options are aligned in Type- Length-Value (TLV) structure. Each Type and Length field has a length of 16 bits, with a variable length available for the Value field.



Table 1 DHCPv6 vs. DHCPv4 Message Type Comparison

New DHCPv6 Message Type Overview CONFIRM (4)
A client sends a Confirm message to any available server to determine whether the addresses it was assigned are still appropriate to the link to which the client is connected.

RELAY-FORW (12)
A relay agent sends a Relay-forward message to relay messages to servers, either directly or through another relay agent.

RELAY-REPL (13)
A server sends a Relay-reply message to a relay agent containing a message that the relay agent delivers to a client.


DHCPv6 performs on the assumption that the DHCPv6 server is directly attached to the LAN segment of the client. If this is not the situation (which is the case in most deployments), then the DHCPv6 server can be replaced by a DHCPv6 Relay agent. This Relay agent will encapsulate the received messages from the directly connected DHCPv6 client, and forward these encapsulated DHCPv6 packets towards the DHCPv6 server. In the opposite direction, the Relay Agent will decapsulate the packets received from the central DHCPv6 Server.

Well known multicast addresses commonly used with DHCPv6 are:
• “ff02:::1:2” (All DHCPv6 relay agents and servers)
• “ff05::1:3” (All DHCPv6 Servers)

Well known port numbers:
• Clients listen for DHCP messages on UDP port 546
• Servers and relay agents listen for DHCP messages
on UDP port 547

Note:
DHCP Unique Identifier (DUID)—Each DHCPv6 component has a DUID (DHCPv6 Unique Identifier) which is used to identify the device when exchanging DHCPv6 messages.
 IA_NA Option—Options related to an IPv6 Address hop-count—Number of relay agents that have relayed this message
link-address—A global or site-local address that will be used by the server to identify the link on which the client is located.
peer-address—The address of the client or relay agent from which the message to be relayed was received.