Virtual IP Network Windows Server 2012 Windows 08 Dual Subnets

Virtual Network Setup Virtual Box as network simulator Setup pfSense as a firewall and router Frontier Router xxx Roeten PC Win7 Running Virtual Box software - network simulator 2 physical NIC’s SSD used as disk for speed WAN LAN /24 Roeten PC Win7 Running pfSense software – acts as firewall and router. Virtual LAN to Virtual Machines

Microsoft Server 2012 setup Base server 2012, Win08 setup, Server 2012, Win08 Clones pfSense datafill networks, 1 st NIC for internal network, 2 nd Bridged to external Sub Network Server Sub Network Clone Server Clone Win08 PC Clone Server Clone Win08 PC Win08 PC Clone Server Clone Win08 PC

Highlights pfSense Setup Setup adapter 1 as Network Adapter. This will be our WAN port in pfSense. Setup adapter 2 as Network Adapter. This will be our LAN port in pfSense. LAN IPv4 – Allow LAN access to any rule. NAT Firewall Rule – Important rule is to configure NAT rule to allow pfSense to port forward ports to VM’s 3389 MSRDP port. That is allow outbound traffic to pass from Network A to any network.

Highlights of Virtual Setup Install Windows 2012 with.ISO. Then install Windows Active Directory (AD) and shut down. Considered Base. Install Windows 08 with.ISO and shut down. Considered Base. Shutting down the base machines allow a stable base for VM’s. Each VM can now run their base machine.ISO and will only need to save the changes they make by saving snapshots to.vdi Create several Windows 2012 linked clones due to future Active Directory needs. Create a few Windows 08 linked clones for future use.

Highlights Active Directory Setup Previously installed AD on the base machine and automatic upgrade to a Domain Controller (DC) Create a domain Contoso.com – Its FQDN is Base2012.Contoso.com The AD is integrated Add Active Directory Domain Services (ADDS) server – From database authenticates users at login, resource changes, etc. Add Active Directory Certificate Services (ADCS) server Add Domain Name System (DNS) server – Computer name resolution to an IP address, etc. Add Dynamic Host Connection Protocol (DHCP) server – Automatically leases IP addresses to clients, instead of manual setup.

Virtual IP Network With AD Select view of network Sub Network Base2012 Server DNS (self) GW (LAN) Domain Contoso.com AD, ADDS, ADCS DNS DHCP Sub Network 2 Clone of Base2012 server Base2012Clone3 DNS (subnet 1 AD) DHCP no GW = LAN BaseWin08Clone Base2012Clone BaseWin08Clone BaseWin08 PC DNS = Base2012 DHCP no GW = LAN Base2012Clone BaseWin08Clone1

Verify Sub-Networks Interact Verify Network 1 can communicate with Network 2 and external network. Visa versa Network 2. From network 1 open command prompt window verify ping response from network 2, pfSense IP, Google.com From network 1 open command prompt window verify ping response from network 2 pfSense IP, Google.com Verify can ping DHCP and DNS from random servers and PC’s. Verify can login into pfSense

continued LDAP configuration allows Windows Server 2012 pfSense to communicate. Which allows AD to verify information.

Additional AD Setup Create a Group Policy Object (GPO) Link to domain GPO Add users and computers with read privileges Add domain users and domain computers with read privileges Add Domain and Enterprise Admin’s with edit privileges Create a OU (Organization Unit) and attach to GPO

Project Goals As MCSE certified engineer apply knowledge and create a Network with sub-networks Learn new software - pfSense, Virtual Box Learn hardware (virtual) configuration Configure from ground up an AD