Nbt200's Blog

(Ben) Report Update

nbt200 — Sun, 14 Jun 2009 14:38:44 +0000

Report:

Finished logical network diagram

finished physical network diagram

finished naming convention

finished internetworking device specs and costs

finished router config

finished firewall info and config

finished user access diagram

finished disaster recovery plan

got replication working yay

Progress (Ben)

nbt200 — Fri, 12 Jun 2009 01:20:50 +0000

2.1.5 – finished – required inter networking device specifications and costs (Table)

2.1.5a – finished – Rounter configs

RODC tweaked

trying to get replication working having problems

Updated firewall config

(firewall settings blocking all data will need to rethink approach)

(possible direct MAC address(Router2) to MAC address(router1)

and user disk allocation

cant seem to get replication to work tryed mutiple guides:

http://jefferyland.wordpress.com/2009/05/04/dfs-on-core-youre-doing-it-replicated/

http://technet.microsoft.com/en-us/library/cc732863.aspx

http://searchwindowsserver.techtarget.com/tip/0,289483,sid68_gci1261400,00.html

VPN document

nbt200 — Fri, 22 May 2009 03:30:19 +0000

VPN

Networks are built for the faster, more economy and more powerful way between the application and the personnel. Most of networks do not need to concern of handling securely. The VPN (Virtual Private Network) is used when the administrator and the basic mechanism try to do some new plan; e.g. using a public network for the private communication.

A virtual private network (VPN) is a computer network in which some of the links between nodes are carried by open connections or virtual circuits in some larger networks, such as the Internet, as opposed to running across a single private network. The Link Layer protocols of the virtual network are said to be tunneled through the transport network. One common application is to secure communications through the public Internet, but a VPN does not need to have explicit security features such as authentication or content encryption. For example, VPNs can also be used to separate the traffic of different user communities over an underlying network with strong security features, or to provide access to a network via customized or private routing mechanisms.

VPN service providers may offer best-effort performance, or may have a defined service level agreement (SLA) with their VPN customers. Generally, a VPN has a topology more complex than point-to-point.

http://en.wikipedia.org/wiki/Virtual_private_network

VPN Administration

A VPN can be built for specific business requests or in order to meet technical requirements. A VPN solution provides;

Dial-In and Telnet
Supporting several remote sites linked by a leased line.
A VPN service provider can present various services to the VPN customers for example web hosting

Advantages of Using VPN

A VPN has important advantages for channel encryptions or alternative plans.

A VPN technology provides privacy for the wide range of TCP/IP applications. Each service requires different ways of application layer encrypting. The support various protocols can be performed by using PPTP (point-to-point tunneling protocol), L2TP (layer 2 tunneling protocol) or L2F (layer 2 forwarding protocol). Privacy which is presented to various TCP/IP applications is important especially for the environment requesting secure connections of telecommuters or partners.
An encryption service is provided for all TCP/IP communications between reliable clients and VPN servers. This encrypting service gives the users transparency because once an encryption has been set, the server executes an encryption automatically.

=========================================================================================================================================

I have done the VPN thing this much and installed RODC server but not configured yet.

Will update soon.

Teo

Logical Diagram

nbt200 — Mon, 18 May 2009 08:26:07 +0000

and a bit of subnetting

plz have a look and tell me what I should change.

and does anyone know how to attach a file here?

so.. here goes link again. sorry about that.

http://mfiles.naver.net/994ead79633255e6c9a6/data43/2009/5/18/17/logical_diagram-teo0218.vsd?type=attachment

Progress(Teo)

nbt200 — Mon, 18 May 2009 07:46:03 +0000

Logical Diagram

Subnetting

Nelson Workstation installed

Made Naming Convention Table

Progress (Ben)

nbt200 — Thu, 14 May 2009 01:02:29 +0000

3/05/09

RODC Configured

working on mirroring ad server

28/05/09

removed hmail server and installed kero mail server

configd and %100 working can send emails from chch to nelson

future work:

need to read up on rip

continue with paperwork aswell

will set up print server & mirroring ad next week

26/05/09

Installed email server hmail

started to config having problems with authentication

working on paperwork

:Router config

:ad setup

21/05/09

Installed webserver

reconfigured dns to handle webserver

15/05/09

Installed AD and DNS on CHCH server

Installed Web server

Routers configured further

static routes created

> entire inter networking

router GUI working

CHCH talking to NSN

07/05/09

installed core server

Reinstalled routers

have decided to install them to a virtual disk rather than running the live iso as saving the config was unreliable

12/05/09

Configured CHCH router

>Set Host name

>Passwords

>DNS

>Set up DHCP (Working)

In the process of setting up GUI

Progress (Nic)

nbt200 — Mon, 11 May 2009 22:31:07 +0000

2/6/09

Advast Anti virus software server edition installed onto server. Unsure weather to restart server or not.

All virtual machines backed up on to backup data store

26/05/09

Web server installed on CHCH_SVC_02 through cmd line activation

26/05/09

DFS and network drive mapped though cmd prompt using net use s: \\server1\source /persistent:yes command on both workstations

21/05/09

DFS currently being configured. Public volume created, having trouble sharing the volume, will try to map the drives from the Workstations.

21/05/09

Both NSNWS and CHCHWS connected to there4travel.co.nz domain

19/05/09

Configured DNS

DNS server to configure: WIN-OQS8BTAI5WR

foward lookup zone to create: There4Travel.co.nz

IP Address of the forwarder: 192.168.0.10

07/05/09

Installed Chch workstation, small problem defining hard drive when installing, solved by implementing flopy.

12/05/09

Updated Proposal Plan, copyed to wordpress.

Naming Convention

nbt200 — Thu, 07 May 2009 00:39:01 +0000

http://mfiles.naver.net/6cbb598396cca0163f5a/data41/2009/5/7/166/naming_convention_table-teo0218.docx?type=attachment

Teo

Request for Proposal Plan

nbt200 — Mon, 04 May 2009 21:07:09 +0000

Target Date	Task	Status
28/4/09“ ““ “	Implement BlogComplete timelineComplete Project Plan	Done
	Network Proposal Report
18/05/0918/05/0918/05/09 18/05/09 18/05/09 19/05/09 19/05/09 19/05/09 19/05/09 19/05/09 19/05/09 20/05/09 20/05/09 21/05/09 21/05/09	2.1.1. User needs analysis2.1.2. Logical network diagram2.1.3. Physical network diagram 2.1.4. Network naming convention (table) 2.1.5. Required internetworking device specifications and 2.1.5a. Router configurations 2.1.6. Subnetting plan (table) 2.1.7. Security plan (policy & general procedures) 2.1.7a. Firewall information and configurations settings 2.1.8. Server, desktop, mobile computer software plan 2.1.8. Desktop and mobile software deployment strategy 2.1.9. User access diagram (AD structure, groups, users, resources) 2.1.10. Backup plan 2.1.11. Disaster recovery plan 2.1.12 Benefits and problems with using virtual private networks across the Internet for corporate purposes	done done done done done done done done done done done done done done
	Implement a demonstration test-bed in Christchurch
DoneDone17/05/09 In progress In progress 17/05/09 Started Started 17/05/09 17/05/09	2.2.1. Windows Core Server 2008 (secondary/mirroring active directory)2.2.2. Windows Server 2008 (primary active directory)2.2.3. Lite mail server (not Exchange) 2.2.4. Web server 2.2.5. File Server 2.2.6. Print Server 2.2.7. Antivirus server software 2.2.8. Backup software 2.2.9. Desktop implementation (uses primary AD to authenticate) 2.2.10. DNS	Done Done done done done Done done done done
	Implement a demonstration test-bed of a two router (Vyatta VC5)
16/05/09Started20/05/09 20/05/09 20/05/09	2.3.1. Active Directory replication/authentication from Christchurch2.3.2. DHCP IP allocation to Christchurch and Nelson2.3.3. The ability to view the Corporate website from Christchurch 2.3.4. Email from Christchurch 2.3.5 Backup facilities in Christchurch	done Done done done done
	Implement a demonstration test-bed of a firewall in Christchurch router.
20/05/0920/05/0920/05/09	2.4.1. Replicate RODC via Active Directory in Chch2.4.2. View the Corporate website (virtual or physical) from Christchurch2.4.3. Protect the Christchurch Corporate network from intrusion	done done done
	Implement a demonstration test-bed in Nelson on VMWare ESX3.5
Done16/05/09	2.5.1. Windows Server 2008 (RODC) – uses primary AD2.5.2. Desktop implementation (uses RODC for authentication)	done

Physical Diagram

nbt200 — Mon, 04 May 2009 11:13:33 +0000

http://uploading.com/files/SPOOS397/Physical Diagram.vsd.html

Ben Soper