530 likes | 614 Views
70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network, Enhanced Chapter 4: Dynamic Host Configuration Protocol. Objectives. Outline the benefits of using DHCP Describe the DHCP lease and renewal process Install and authorize the DHCP service Configure DHCP scopes
E N D
70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network, EnhancedChapter 4:Dynamic Host Configuration Protocol
Objectives • Outline the benefits of using DHCP • Describe the DHCP lease and renewal process • Install and authorize the DHCP service • Configure DHCP scopes • Create DHCP reservations for client computers • Configure DHCP options • Understand and describe the purpose of a DHCP relay • Install and configure a DHCP relay Guide to MCSE 70-291, Enhanced
DHCP Overview • Used to automatically deliver IP addressing • Reduces the amount of time you spend configuring computers on your network • Used by default unless you specify otherwise • The ipconfig /all command will indicate whether the configuration came from a DHCP server computer Guide to MCSE 70-291, Enhanced
DHCP Overview (continued) Guide to MCSE 70-291, Enhanced
DHCP Overview (continued) Guide to MCSE 70-291, Enhanced
Leasing an IP Address • An IP address is leased during the boot process • The overall process is composed of four broadcast packets: • DHCPDISCOVER • DHCPOFFER • DHCPREQUEST • DHCPACK Guide to MCSE 70-291, Enhanced
Leasing an IP Address (continued) • Any DHCP server that receives the DHCPDISCOVER packet responds with a DHCPOFFER packet • The DHCP client responds to the DHCPOFFER packet it receives with a DHCPREQUEST packet • A DHCPACK packet indicates confirmation that the client can use the lease • Once DHCPACK is received, the client can start using the IP address and options in the lease Guide to MCSE 70-291, Enhanced
Leasing an IP Address (continued) Guide to MCSE 70-291, Enhanced
Renewing an IP Address • The IP address can either be permanent or timed • A permanent address is never reused for another client • Timed leases expire after a certain amount of time • Windows clients attempt to renew their lease after 50% of the lease time has expired • A DHCP server may either honor or reject a renew request Guide to MCSE 70-291, Enhanced
Renewing an IP Address (continued) Guide to MCSE 70-291, Enhanced
Installing and Authorizing the DHCP Service • A DHCP service must be authorized after installation Guide to MCSE 70-291, Enhanced
Installing the DHCP Service • DHCP is a standard service • It is included in Windows Server 2003 • It is not installed as part of a default installation Guide to MCSE 70-291, Enhanced
Installing the DHCP Service (continued) Guide to MCSE 70-291, Enhanced
Activity 4-1: Installing DHCP • Objective:Install DHCP on Windows Server 2003 • Make sure your network connection is statically configured • Install the service using the Add/Remove Windows Components utility Guide to MCSE 70-291, Enhanced
Authorizing the DHCP Service • Unauthorized DHCP servers can hand out bad information • DHCP will not start unless authorized • If Active Directory is used, authorization takes place in Active Directory • DHCP servers are automatically authorized under certain conditions Guide to MCSE 70-291, Enhanced
Authorizing the DHCP Service (continued) Guide to MCSE 70-291, Enhanced
Authorizing the DHCP Service (continued) Guide to MCSE 70-291, Enhanced
Activity 4-2: Starting an Authorized DHCP Server • Objective:View the results of starting a DHCP server that does not participate in an Active Directory domain • Check to make sure the service is running • Check out any relevant events using the System Log Guide to MCSE 70-291, Enhanced
Activity 4-3: Installing the Active Directory Service • Objective:Install the Active Directory service on your computer and participate in an Active Directory domain • Use the dcpromo utility • Select “domain controller for a new domain” • Select “domain in a new forest” • Continue through the resulting dialogs Guide to MCSE 70-291, Enhanced
Activity 4-4: Starting an Unauthorized DHCP Server • Objective:View the results of starting an unauthorized DHCP server • View the System Log to see the result of starting an unauthorized DHCP server Guide to MCSE 70-291, Enhanced
Activity 4-5: Authorizing a DHCP Server • Objective:Authorize a DHCP server in Active Directory • Go to the DHCP snap-in and choose the activate option Guide to MCSE 70-291, Enhanced
Configuring DHCP Scopes • Scopedefines a range of IP addresses • Each scope is configured with: • Description • Starting IP address • Ending IP address • Subnet mask • Exclusions • Lease duration • Two strategies exist for defining the starting and ending IP addresses • Allow all and exempt the few static addresses • Use only the addresses not already in use Guide to MCSE 70-291, Enhanced
Configuring DHCP Scopes (continued) Guide to MCSE 70-291, Enhanced
Configuring DHCP Scopes (continued) • Exclusions are used to prevent some IP addresses from being handed out dynamically • Lease duration defines how long client computers are allowed to use an IP address • Default lease duration is eight days • A scope must be activated before the DHCP service can begin using it Guide to MCSE 70-291, Enhanced
Activity 4-6: Creating a Scope • Objective:Create a scope to distribute IP addresses to client computers • Manually enter the IP configuration settings as directed by the text • Create a new scope using the configuration settings provided Guide to MCSE 70-291, Enhanced
Activity 4-7: Activating and Testing a Scope • Objective: Activate a DHCP scope, and then test it with a partner • One person will activate the scope created in the previous activity • Another person will try to obtain an automatic IP address from the server Guide to MCSE 70-291, Enhanced
Superscopes • Used to combine multiple scopes into a single logical scope • Allows multiple scopes to be treated as a single scope • If a superscope is used, then the DHCP server offers only one lease as opposed to multiple leases Guide to MCSE 70-291, Enhanced
Superscopes (continued) Guide to MCSE 70-291, Enhanced
Activity 4-8: Configuring a Superscope • Objective:Combine two scopes into a single logical unit using a superscope • First, create a second scope in addition to the scope already created in a previous activity • Create a superscope to encompass the two scopes • Use the DHCP snap-in for this activity Guide to MCSE 70-291, Enhanced
Activity 4-9: Deleting a Superscope • Objective:Delete a superscope, leaving each scope independent • Make sure you delete the superscope without deleting the subscopes Guide to MCSE 70-291, Enhanced
Multicast Scopes • Used to deliver multicast addresses to applications that require it • Multicast addresses are used to deliver packets to groups of computers • Start and end IP addresses define the range of addresses that can be handed out by DHCP servers • TTL defines the number of routers through which a multicast packet can move Guide to MCSE 70-291, Enhanced
Multicast Scopes (continued) • Exclusions define addresses that should not be handed out • Lease duration defines the length of time that an application can use a multicast address • Default lease length is 30 days Guide to MCSE 70-291, Enhanced
Activity 4-10: Creating a Multicast Scope • Objective:Create a multicast scope to deliver multicast addresses to applications • Setting up a multicast scope is very similar to setting up any other scope • Set the scope configuration to that specified in the text Guide to MCSE 70-291, Enhanced
Activity 4-11: Deleting a Multicast Scope • Objective:Delete a multicast scope • Right click on the scope and issue the delete command Guide to MCSE 70-291, Enhanced
Creating DHCP Reservations • Reservations areused to hand out a specific IP address to a particular client • Useful when delivering IP addresses to devices that would normally use static addresses • Can also be beneficial when firewalls are in place • Reservations are created based on MAC addresses Guide to MCSE 70-291, Enhanced
Creating DHCP Reservations (continued) Guide to MCSE 70-291, Enhanced
Activity 4-12: Creating and Testing a Reservation • Objective:Create a DHCP reservation, and test it with a client • Configure the server to reserve an IP address for a client machine • Test to see if the client machine picks up the reserved address Guide to MCSE 70-291, Enhanced
Configuring DHCP Options • DHCP can hand out a variety of other IP configuration options • It is common that all workstations within an entire organization use the same DNS servers • DNS is often configured at the server level Guide to MCSE 70-291, Enhanced
Configuring DHCP Options (continued) Guide to MCSE 70-291, Enhanced
Configuring DHCP Options (continued) Guide to MCSE 70-291, Enhanced
Activity 4-13: Setting Server Options • Objective:Set the DNS server option for a DHCP server • Check 006 DNS servers option • Add the IP address x.0.0.250 Guide to MCSE 70-291, Enhanced
Activity 4-14: Setting Scope Options • Objective:Set the default gateway in the scope options • Use the DHCP snap-in to complete this activity Guide to MCSE 70-291, Enhanced
Activity 4-15: Testing Server & Scope Options • Objective:Activate a DHCP scope, and then test it with a partner to ensure that scope options are handed out • Activate a DHCP scope • Configure a client to access the server • Check the default gateway and DNS settings to find out whether or not the configurations entered in previous activities were done correctly Guide to MCSE 70-291, Enhanced
Vendor and User Classes • Used to differentiate between clients within a scope • Vendor classes are based on the operating system • User classes are defined based on network connectivity or the administrator • You can use the ipconfig /setclassidcommand to set the DHCP user class ID Guide to MCSE 70-291, Enhanced
Vendor and User Classes (continued) Guide to MCSE 70-291, Enhanced
Vendor and User Classes (continued) Guide to MCSE 70-291, Enhanced
Configuring a DHCP Relay • DHCP packets cannot travel across a router • A relay agentis necessaryin order to have a single DHCP server handle all leases • Relay agents receive broadcast DHCP packets and forward them as unicast packets to a DHCP server • The DHCP relay cannot be installed on the same server as the DHCP service Guide to MCSE 70-291, Enhanced
Configuring a DHCP Relay (continued) Guide to MCSE 70-291, Enhanced
Configuring a DHCP Relay (continued) Guide to MCSE 70-291, Enhanced
Activity 4-16: Configuring a DHCP Relay • Objective:Uninstall the DHCP service from your computer and configure it as a DHCP relay • Uninstall the DHCP service • Configure the computer as a relay by using the Routing and Remote Access tool provided in Windows Guide to MCSE 70-291, Enhanced