1. Virtual IP Network Windows Server 2012 Windows 08 Dual Subnets

2. Virtual Network Setup Virtual Box as network simulator Setup pfSense as a firewall and router 192.168.254.254 Frontier Router 192.168.254.xxx Roeten PC Win7 Running Virtual Box software - network simulator 2 physical NIC’s SSD used as disk for speed WAN 192.168.254.43 LAN 192.168.1.1/24 Roeten PC Win7 Running pfSense software – acts as firewall and router. Virtual LAN to Virtual Machines

3. Microsoft Server 2012 setup Base server 2012, Win08 setup, Server 2012, Win08 Clones pfSense datafill networks, 1 st NIC for internal network, 2 nd Bridged to external Sub Network 1 192.168.2.20 2012 Server Sub Network 2 192.168.1.10 Clone Server 192.168.1.15 Clone Win08 PC 192.168.1.11 Clone Server 192.168.1.16 Clone Win08 PC 192.168.1.25 Win08 PC 192.168.1.21 Clone Server 192.168.1.26 Clone Win08 PC

4. Highlights pfSense Setup Setup adapter 1 as Network Adapter. This will be our WAN port in pfSense. Setup adapter 2 as Network Adapter. This will be our LAN port in pfSense. LAN IPv4 – Allow LAN access to any rule. NAT Firewall Rule – Important rule is to configure NAT rule to allow pfSense to port forward ports to VM’s 3389 MSRDP port. That is allow outbound traffic to pass from Network A to any network.

5. Highlights of Virtual Setup Install Windows 2012 with.ISO. Then install Windows Active Directory (AD) and shut down. Considered Base. Install Windows 08 with.ISO and shut down. Considered Base. Shutting down the base machines allow a stable base for VM’s. Each VM can now run their base machine.ISO and will only need to save the changes they make by saving snapshots to.vdi Create several Windows 2012 linked clones due to future Active Directory needs. Create a few Windows 08 linked clones for future use.

6. Highlights Active Directory Setup Previously installed AD on the base machine and automatic upgrade to a Domain Controller (DC) Create a domain Contoso.com – Its FQDN is Base2012.Contoso.com The AD is integrated Add Active Directory Domain Services (ADDS) server – From database authenticates users at login, resource changes, etc. Add Active Directory Certificate Services (ADCS) server Add Domain Name System (DNS) server – Computer name resolution to an IP address, etc. Add Dynamic Host Connection Protocol (DHCP) server – Automatically leases IP addresses to clients, instead of manual setup.

7. Virtual IP Network With AD Select view of network Sub Network 1 192.168.1.10 Base2012 Server DNS 192.168.1.10 (self) GW 192.168.1.10 (LAN) Domain Contoso.com AD, ADDS, ADCS DNS DHCP Sub Network 2 Clone of Base2012 server 192.168.2.10 Base2012Clone3 DNS 198.1.10 (subnet 1 AD) DHCP no GW 192.168.1.1 = LAN 192.168.2.15 BaseWin08Clone2 192.168.2.11 Base2012Clone4 192.168.2.16 BaseWin08Clone3 192.168.1.15 BaseWin08 PC DNS 192.168.1.10 = Base2012 DHCP no GW 192.168.1.1 = LAN 192.168.1.11 Base2012Clone2 192.168.1.16 BaseWin08Clone1

8. Verify Sub-Networks Interact Verify Network 1 can communicate with Network 2 and external network. Visa versa Network 2. From network 1 open command prompt window verify ping response from network 2, pfSense IP, Google.com From network 1 open command prompt window verify ping response from network 2 pfSense IP, Google.com Verify can ping DHCP and DNS from random servers and PC’s. Verify can login into pfSense

9. continued LDAP configuration allows Windows Server 2012 pfSense to communicate. Which allows AD to verify information.

10. Additional AD Setup Create a Group Policy Object (GPO) Link to domain GPO Add users and computers with read privileges Add domain users and domain computers with read privileges Add Domain and Enterprise Admin’s with edit privileges Create a OU (Organization Unit) and attach to GPO

11. Project Goals As MCSE certified engineer apply knowledge and create a Network with sub-networks Learn new software - pfSense, Virtual Box Learn hardware (virtual) configuration Configure from ground up an AD