70-741: Networking with Windows Server 2016

70-741: Networking with Windows Server 2016
6/23/2018 9:37 PM BRK3175 70-741: Networking with Windows Server 2016 BRK3175 Ed Baker Excalibur Services (UK) Ltd. MCT Regional Lead Enterprise Mobility MVP © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

About Ed UK Based MCT nearly a decade MVP – Enterprise Mobility
6/23/2018 9:37 PM About Ed UK Based Man, Mason, Motorcyclist, Photographer MCT nearly a decade MVP – Enterprise Mobility 3 years as a Microsoft Technical Evangelist 23 years as an IT Pro TechNet Blogger & Twitter aka.ms/ServerGuy ed-baker.com @edbaker1965 @ServerGuyUK © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Windows Server 2016 certification path
Course 20741A Module 0: Introduction MCSA: Windows Server 2016 Exam Installation, Storage and Compute with Windows Server 2016 Course 20740B Installation, Storage, and Compute with Windows Server 2016 Exam Networking with Windows Server 2016 Course 20741B Exam Identity with Windows Server 2016 Course 20742B Exam Upgrading Your Skills to MCSA: Windows Server 2016 Course 20743B OR

6/23/2018 Q&A If you have questions please proceed to the Q&A MICROPHONE located nearest to you. © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

70-741: Networking with Windows Server 2016
6/23/2018 9:37 PM 70-741: Networking with Windows Server 2016 Implement Domain Name System (DNS) Implement DHCP Implement IP Address Management (IPAM) Implement Network Connectivity and Remote Access Solutions Implement Core and Distributed Network Solutions Implement an Advanced Network Infrastructure © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Session Objectives And Takeaways
Tech Ready 15 6/23/2018 Session Objectives And Takeaways Session Objective(s): Help you prepare for exam : Networking with Windows Server 2016 Key Takeaway 1 Exam study material, links, resources Key Takeaway 2 Exam topics and breakdown of questions © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

01-Implement Domain Name System (DNS)
6/23/2018 9:37 PM 01-Implement Domain Name System (DNS) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Install and configure DNS servers
6/23/2018 9:37 PM Install and configure DNS servers Determine DNS installation requirements Determine supported DNS deployment scenarios on Nano Server Install DNS Configure forwarders, configure Root Hints, configure delegation Implement DNS policies Implement DNS global settings using Windows PowerShell Configure Domain Name System Security Extensions (DNSSEC) Configure DNS Socket Pool, configure cache locking Enable Response Rate Limiting Configure DNS-based Authentication of Named Entities (DANE) Configure DNS logging Configure delegated administration Configure recursion settings Implement DNS performance tuning Configure global settings using Windows PowerShell © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

DNS on Nano Server To use Nano Server as a DNS Server:
4: Implementing DNS DNS on Nano Server To use Nano Server as a DNS Server: Install the NanoServer Package Create a VHD with the Microsoft-NanoServer-DNS-Package Import the VHD into Hyper-V as a virtual machine Configure networking settings and enable the remote management firewall ports Connect remotely to the server running Nano Server by using Windows PowerShell 5.0 on a Windows client or a server Run the command Enable-WindowsOptionalFeature -Online -FeatureName DNS-Server-Full-Role Manage DNS remotely by using the Windows PowerShell 5.0 DNS commands

Implementing DNS security
20741A 4: Implementing DNS Implementing DNS security DNS security feature Description DNS cache locking Prevents entries in the cache from being overwritten until a percentage of the TTL has expired DNS socket pool Randomizes the source port for issuing DNS queries. Enabled by default in Windows Server 2012. DANE Uses TLSA records that state the CA from which they should expect a certificate DNSSEC Enables cryptographically signing DNS records so that client computers can validate responses

Create and configure DNS zones and records
6/23/2018 9:37 PM Create and configure DNS zones and records Create primary zones; configure Active Directory integration of primary zones Create and configure secondary zones Create and configure stub zones Configure a GlobalNames zone Analyze zone-level statistics Create and configure DNS Resource Records (RR), including A, AAAA, PTR, SOA, NS, SRV, CNAME, and MX records Configure zone scavenging Configure record options, including Time To Live (TTL) and weight Configure round robin Configure secure dynamic updates Configure unknown record support Use DNS audit events and analytical (query) events for auditing and troubleshooting; configure Zone Scopes Configure records in Zone Scopes Configure policies for zones © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Install & Configure DNS
TechEd 2013 6/23/2018 9:37 PM Install & Configure DNS DNS Terminology that you should know… DNS = Host Name Resolution Forward and reverse lookups Types of DNS Primary, secondary, Active Directory-Integrated, and stub zones For AD-Integrated, what is the domain partition, forestDNSZone, and domainDNSZone? Records =SOA, NS, A, CNAME, PTR, SRV, and MX Hint: replication scope © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure DNS zones Configure stub zones
TechEd 2013 6/23/2018 9:37 PM Configure DNS zones Configure stub zones Stub zone used to identify authoritative DNS servers for a zone – useful in a merger/acquisition Watch for scenarios that offer stub zone and conditional forwarding as potential solutions Stub zones best when needing to dynamically maintain authoritative DNS servers for child zone Configure conditional forwarders Forwards to specific DNS servers which can then build up a cache for efficient resolution Often the best solution for merger/acquisition but can also speed up internal name resolution Configure zone and conditional forward storage in Active Directory DNS must be a domain controller, zone must be primary/stub/conditional Replication – all DNS + DCs in forest, all DNS + DCs in domain, all DCs in domain, all DCs in partition Configure zone delegation Key scenarios – delegate management, distribute load/improve perf/fault tolerance © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 6/23/2018 9:37 PM Configure DNS records Create configure Resource Records (RR) including A, AAAA, PTR, SOA, NS, SRV, CNAME, and MX records Know that AAAA is IPv6 A record Use dnscmd /recordadd for mass record creation (or PowerShell) Add-DnsServerResourceRecord -A -Name “test" -ZoneName "woodgrovebank.com" -IPv4Address Configure zone scavenging Must enable at server level and at zone level (watch for troubleshooting scenarios or choose all) Must also be enabled at resource record level (by default it is, but watch for troubleshooting) Cleans up dynamic records only (not static) Configure record options including TTL and weight TTL default is 1 hour – can be updated at zone level or individual resource record level © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Key Tips to Remember: DNS
6/23/2018 9:37 PM Key Tips to Remember: DNS Tip #1 Review your subnetting! IPv6 Global Unique or Local Addresses Stub Zones Forward Lookup Reverse Lookup Tip #2 PowerShell is only ONE way to configure DNS and DHCP zones and settings Tip #3 Know the different DNS ZONES IP address ( ) Subnet mask ( ) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 6/23/2018 9:37 PM Example question You are the system administrator for Tailspin Toys. You administer the Active Directory Domain Services (AD DS) environment along with DNS. Recently, another administrator added a new DNS Address (A) record for www2.tailspintoy.com. The record points to Forward name resolution is fully functional. However, the web administrators are reporting that is not resolving to www2.tailspintoys.com. You need to ensure that resolves to www2.tailspintoys.com. What should you do? Add a second Address (A) record for and point it to www2.tailspintoys.com. Add a second Address (AAAA) record for and point it to www2.tailspintoys.com. Add a PTR record for www2.tailspintoys.com and point it to Add a PTR record for and point it to www2.tailspintoys.com. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Install and configure DHCP
6/23/2018 9:37 PM Install and configure DHCP Install and configure DHCP servers, authorize a DHCP server Create and configure scopes, create and configure superscopes and multicast scopes Configure a DHCP reservation, configure DHCP options Configure DNS options from within DHCP Configure policies Configure client and server for PXE boot Configure DHCP Relay Agent, Implement IPv6 addressing using DHCPv6 Perform export and import of a DHCP server Perform DHCP server migration © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Install and Configure DHCP Service
TechEd 2013 6/23/2018 9:37 PM Install and Configure DHCP Service Understand the DHCP options available © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement an advanced DHCP solution
Create and configure superscopes Handles multiple networks Add-DhcpServerv4Superscope Use cases Create and configure multicast scopes Stream packets DHCPv6 Stateful and stateless configurations Add-DhcpServerv6Scope –Name”Name”-Prefix <Address> DHCP High Availability Failover cluster role, split-scope DHCP, two server max, IPv4 only

Manage and maintain DHCP
6/23/2018 9:37 PM Manage and maintain DHCP Configure a lease period Back up and restore the DHCP database Configure high availability using DHCP failover Configure DHCP name protection Troubleshoot DHCP © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

<Event Name Here>
6/23/2018 Example question You are the system administrator for Fabrikam, Inc. You have a main office, a single DHCP server, and a single DHCP scope. You need to configure DHCP for high availability. What should you do? (Choose all that apply.) A. Add the Failover Cluster feature. B. Add the Network Load Balancing feature. C. Add the DHCP Server to the failover cluster. D. Configure NLB for network affinity. E. Deploy a new server. F. Add the DHCP role. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Key Tips to Remember: DHCP
6/23/2018 9:37 PM Key Tips to Remember: DHCP Tip #1 know how to create scopes and configure options Superscopes handle multiple networks DHCP High-Availability Tip #3 Importing and exporting DHCP Tip #2 PowerShell is only ONE way to configure DNS and DHCP zones and settings © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

03-Implement IP Address Management (IPAM)
6/23/2018 9:37 PM 03-Implement IP Address Management (IPAM) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Install and configure IP Address Management (IPAM)
6/23/2018 9:37 PM Install and configure IP Address Management (IPAM) Provision IPAM manually or by using Group Policy Configure server discovery Create and manage IP blocks and ranges Monitor utilization of IP address space Migrate existing workloads to IPAM Configure IPAM database storage using SQL Server Determine scenarios for using IPAM with System Center Virtual Machine Manager for physical and virtual IP address space management IPAM distributed architecture Domain europe.corp.woodbridge.com IPAM Server (UK) DHCP, DNS, DC, and NPS servers IPAM Server (Bangalore) Domain fareast.corp.woodbridge.com IPAM Server (Hyderabad) Site: Hyderabad Branch office Site: Bangalore Branch office Site: UK Branch office Domain corp.woodbridge.com IPAM server (Redmond) Site: Redmond Head office © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Manage DNS and DHCP using IPAM
6/23/2018 9:37 PM Manage DNS and DHCP using IPAM Manage DHCP server properties using IPAM Configure DHCP scopes and options Configure DHCP policies and failover Manage DNS server properties using IPAM Manage DNS zones and records Manage DNS and DHCP servers in multiple Active Directory forests Delegate administration for DNS and DHCP using role-based access control (RBAC) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Audit IPAM Audit the changes performed on the DNS and DHCP servers
6/23/2018 9:37 PM Audit IPAM Audit the changes performed on the DNS and DHCP servers Audit the IPAM address usage trail Audit DHCP lease events and user logon events © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IP Address Management (IPAM)
Inbox feature for integrated management of IP addresses, domain names, and device identities Tightly integrates with Microsoft DNS and DHCP servers Provides custom IP address space display, reporting, and management Audits server configuration changes and tracks IP address use Migrates IP address data from spreadsheets or other tools Monitors and manages specific scenario-based DHCP and DNS services IPAM distributed architecture Domain europe.corp.woodbridge.com IPAM Server (UK) DHCP, DNS, DC, and NPS servers IPAM Server (Bangalore) Domain fareast.corp.woodbridge.com IPAM Server (Hyderabad) Site: Hyderabad Branch office Site: Bangalore Branch office Site: UK Branch office Domain corp.woodbridge.com IPAM server (Redmond) Site: Redmond Head office

Windows Server 2016 IPAM WS 2016 IPAM
IP addressing management of physical and virtual networks (SCVMM integration) Integrated IP addressing, DNS and DHCP management Tracking activity of IP address/user/mc IP utilization & trend Audit config WS 2016 IPAM Unified IP address Mgmt. Delegated Admin Network services Mgmt. Scale, robustness & automation Network audit & visibility Granular RBAC to manage IP address space, DHCP & DNS Delegated administration within and across datacenters Disaster Recovery Multiple instance deployment SQL Server database Extensive PS support Cross AD Support Automatic server discovery Single console DHCP and DNS management across datacenters Management of granular DNS properties

IP Address Management Configure IPAM Requirements Trivia
Distributed, Centralized, and Hybrid Database not shared between servers Server discovery What can be discovered? Manage or not Windows Internal Database

Key Tips to Remember: IPAM
6/23/2018 9:37 PM Key Tips to Remember: IPAM Tip #1 Know what’s new in Server 2016 No longer need spreadsheets to manage IP Addresses Server discovery across datacenters WS 2016 IPAM Unified IP address Mgmt. Delegated Admin Network services Mgmt. Scale, robustness & automation Network audit & visibility Tip #2 Allows for delegated management. Granular RBAC to manage IP address space, DHCP & DNS Tip #3 Monitors the IP Address space, including utilization © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

04-Implement Network Connectivity and Remote Access Solutions
6/23/2018 9:37 PM 04-Implement Network Connectivity and Remote Access Solutions © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement network connectivity solutions
6/23/2018 9:37 PM Implement network connectivity solutions Implement Network Address Translation (NAT) Configure routing © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement virtual private network (VPN) and DirectAccess solutions
6/23/2018 9:37 PM Implement virtual private network (VPN) and DirectAccess solutions Implement remote access and site-to-site (S2S) VPN solutions using remote access gateway Configure different VPN protocol options Configure authentication options Configure VPN reconnect Create and configure connection profiles Determine when to use remote access VPN and site-to-site VPN and configure appropriate protocols Install and configure DirectAccess Implement server requirements Implement client configuration Troubleshoot DirectAccess © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

VPN and Routing Install and configure the Remote Access role
TechEd 2013 6/23/2018 9:37 PM VPN and Routing Install and configure the Remote Access role Add-WindowsFeature RemoteAccess -IncludeManagementTools –IncludeAllSubFeature Run the Configure and Enable Routing and Remote Access wizard Implement Network Address Translation (NAT) Need two interfaces prior to enabling via wizard Configure VPN settings For SSTP, need to select the proper SSL certificate post install Configure remote dial-in settings for users Default in AD is control access through NPS Network Policy Need to adjust policy or create new policy in order to allow users in Configure Web Application proxy Configure Web Application proxy in pass-through mode © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

How DirectAccess works for internal clients
7: Implementing DirectAccess How DirectAccess works for internal clients Internet websites DirectAccess server Internal client computers Active Directory domain controller DNS server CRL distribution point Network location server Internet websites DirectAccess server Internal client computers AD DS domain controller DNS server Network location server Connection security rules NRPT Internal network resources

How DirectAccess works for external clients
7: Implementing DirectAccess How DirectAccess works for external clients DirectAccess server DNS server Internet websites Active Directory domain controller DNS server Infrastructure Intranet Connection security rules Internal network resources NRPT External client computers

DirectAccess Implement server requirements
No longer requires PKI (can use Kerberos proxy over HTTPS instead along with port 443) New simplified deployment but then won’t get force tunneling, Network Access Protection (NAP) integration, or two-factor authentication Can use a single NIC card behind NAT (Windows Server 2012 required) Remote access servers and all client computers must be domain members IPv6 not required and IPv6 transition technologies are used (however, IPv6 = best performance) If using internal CA or self-signed certificate, CRL distribution point must be available externally Implement client configuration Need to have security groups in place and then create GPOs DirectAccess offline domain join Join a domain without physical or VPN connection

Implement Network Policy Server (NPS)
6/23/2018 9:37 PM Implement Network Policy Server (NPS) Configure a RADIUS server including RADIUS proxy Configure RADIUS clients Configure NPS templates Configure RADIUS accounting Configure certificates Configure Connection Request Policies Configure network policies for VPN and wireless and wired clients, import and export NPS policies © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure NPS Configure multiple RADIUS server infrastructures
TechEd 2013 6/23/2018 9:37 PM Configure NPS Configure multiple RADIUS server infrastructures 5 parts – access clients, access servers, NPS servers, NPS proxies, user account DBs Configure RADIUS clients Required: shared secret, friendly name, FQDN or IP, optional is vendor info (e.g. Cisco) Manage RADIUS templates Watch for questions involving administrative overhead as that may indicate the creation of a template or use of existing template Configure RADIUS accounting Can log to SQL DB, text file on local computer, both simultaneously, or SQL with text file logging for failover (if SQL logging fails, continue to log via text file) If logging stops (out of disk, SQL down), users can’t get in (watch for situations that call out default install and sudden loss of functionality – could be out of disk space, consider moving logging to non-system disk) © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure NPS policies
TechEd 2013 6/23/2018 9:37 PM Configure NPS policies Configure connection request policies Policies have conditions such as connection type, day/time, network, computer Useful to authenticate untrusted domain (proxy policy first in the policy order) while still authenticating locally via NPS (to AD DS) If no local processing by NPS, then server is a proxy (can forward one place or multiple) Configure network policies for VPN clients (multilink and bandwidth allocation, IP filters, encryption, IP addressing) Watch for default installation questions Can use IP filters to enhance security, limit traffic type (IPv4 and IPv6) Manage NPS templates Can use templates for shared secrets, RADIUS clients, RADIUS servers, IP filter, health policies, and remediation server groups (minimize administrative overhead, speed up deployment) Can export templates to .XML file and import to another server © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Key Tips to Remember: Network Connectivity
6/23/2018 9:37 PM Key Tips to Remember: Network Connectivity Tip #1 Implementing NAT’ing and Routing NPS Policies, NAT, Routing, VPN, DirectAccess RADIUS: clients, proxy, server, accounting Tip #2 Configure NPS and NPS policies in your lab to become familiar Tip #3 Add the Routing and Remote Access feature and PLAY AROUND © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

05-Implement core and Distributed Network Solutions
6/23/2018 9:37 PM 05-Implement core and Distributed Network Solutions © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement IPv4 and IPv6 addressing
6/23/2018 9:37 PM Implement IPv4 and IPv6 addressing Configure IPv4 addresses and options Determine and configure appropriate IPv6 addresses configure IPv4 or IPv6 subnetting Implement IPv6 stateless addressing Configure interoperability between IPv4 and IPv6 by using ISATAP, 6to4, and Teredo scenarios Configure Border Gateway Protocol (BGP) Configure IPv4 and IPv6 routing © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Configure IPv4 and IPv6 Addressing
TechEd 2013 6/23/2018 9:37 PM Configure IPv4 and IPv6 Addressing Important factors to know about Addressing… Understand IPv4 Subnetting & Supernetting Understand IPv6 Addressing Assign an IPv6 Addresses and check the route (route print) Tunneling Automatic or Manual Configuration 6to4 ISATAP Teredo NAT64 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement Distributed File System (DFS) and Branch Office solutions
6/23/2018 9:37 PM Implement Distributed File System (DFS) and Branch Office solutions Install and configure DFS namespaces Configure DFS replication targets Configure replication scheduling Configure Remote Differential Compression (RDC) settings Configure staging Configure fault tolerance Clone a Distributed File System Replication (DFSR) database Recover DFSR databases Optimize DFS Replication Install and configure BranchCache Implement distributed and hosted cache modes Implement BranchCache for web, file, and application servers Troubleshoot BranchCache © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

DFS (1/3) Namespace server File server File server Site1 Site2 2 3 IT
DFS Replication (hub and spoke) File server Site1 Site2 continuous referral \\Contoso.com\Shares 2 Namespace (\\Contoso.com\Shares) 3 IT HR 1 RDC differences only 1 Exec Sales 3 2 referral File server Namespace server Where do you install the DFS Replication role service? Is this environment a stand-alone namespace?

DFS (2/3) Main features (since Windows Server 2012)
PowerShell module (Namespaces), WMI mgmt., site awareness for DirectAccess, dedupe Main features (since Windows Server 2012 R2): PowerShell for DFS 23 cmdlets for DFS Namespaces New-DfsnFolder, Set-DfsnServerConfiguration, Grant-DfsnAccess, Revoke-DfsnAccess 42 cmdlets for DFS Replication Import-DfsrClone, New-DfsReplicationGroup, Reset-DfsrCloneState, Set-DfsrGroupSchedule Database cloning for initial synchronization, database corruption recovery, disable cross-file remote differential compression (RDC), configure variable file staging, capability to restore files from folders (ConflictAndDeleted, PreExisting) – reduce initial sync time Exported cloned database, preseed (next slide), copy exported cloned database files, import

DFS (3/3) - preseeding Pre-seeding files with DFS-R
Offline synchronization of files Manual use of tools to create identical shares Robocopy, Windows Server Backup, or Windows NTBackup robocopy \\source\share \\destination\share /MIR Mirrors the share file and directory structure from source to destination Other hardware or third-party options Validate hash after copy PowerShell Get-DfsrFileHash \\Destination\Share Also accepts local paths and mapped drives Users accessing files can change hash

Key Tips to Remember: Core and Distributed Networks
6/23/2018 9:37 PM Key Tips to Remember: Core and Distributed Networks Tip #1 IPv4 and IPv6 are in this section, too! BranchCache for web, file, and application servers Border Gateway Protocol Tip #2 DFS: know how to implement and manage Tip #3 Lots of PowerShell cmdlets for managing DFS. Be familiar with them IT HR Exec Sales Namespace (\\Contoso.com\Shares) © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

<Event Name Here>
6/23/2018 Example question You are a system administrator for Contoso, Ltd. You have a main office and a branch office. The main office has a single file server. The branch office does not have a secure facility to house servers and has a high latency connection to the main office. You need to improve the performance when branch offices users access documents from the file server. What should you do? Implement Branch Cache using the Hosted Cache mode Implement Branch Cache using the Distributed Cache mode Implement DirectAccess for all branch office users. Implement universal group membership caching for all branch office users. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

06-Implement an Advanced Network Infrastructure
6/23/2018 9:37 PM 06-Implement an Advanced Network Infrastructure © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Implement high performance network solutions
6/23/2018 9:37 PM Implement high performance network solutions Implement NIC Teaming or the Switch Embedded Teaming (SET) solution, and identify when to use each Enable and configure Receive Side Scaling (RSS) Enable and configure network Quality of Service (QoS) with Data Center Bridging (DCB) Enable and configure SMB Direct on Remote Direct Memory Access (RDMA) enabled network adapters; enable and configure SMB Multichannel Enable and configure virtual Receive Side Scaling (vRSS) on a Virtual Machine Queue (VMQ) capable network adapter Enable and configure Virtual Machine Multi-Queue (VMMQ) enable and configure Single-Root I/O Virtualization (SR-IOV) on a supported network adapter © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Virtual switch expanded functionality
10: Configuring advanced networking features The virtual switch improvements in Windows Server 2016 include: Extended port ACLs Dynamic load balancing Coexistence with third-party forwarding extensions RSS support on the virtual machine network path Network tracing enhancements Router guarding DHCP guarding Trunk mode for virtual machine Port mirroring VLAN isolation through a Private VLAN Extended bandwidth management

Network adapter advanced features
10: Configuring advanced networking features Hardware acceleration: VMQ Ipsec task offloading SR-IOV

6/23/2018 9:37 PM Determine scenarios and requirements for implementing software-defined networking (SDN) Determine deployment scenarios and network requirements for deploying SDN Determine requirements and scenarios for implementing Hyper-V Network Virtualization (HNV) using Network Virtualization Generic Route Encapsulation (NVGRE) encapsulation or Virtual Extensible LAN (VXLAN) encapsulation Determine scenarios for implementation of Software Load Balancer (SLB) for North-South and East-West load balancing Determine implementation scenarios for various types of Windows Server Gateways, including L3, GRE, and S2S, and their use Determine requirements and scenarios for distributed firewall policies and network security groups © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is Generic Route Encapsulation?
11: Implementing Software Defined Networking What is Generic Route Encapsulation?  GRE Key=5001 MAC   GRE Key=6001 MAC  (PA) (PA) (CA) (CA) (CA) (CA)     Customer address space based on virtual machine configuration Provider address space based on physical network and is not visible to the virtual machines

What are network virtualization policies?
11: Implementing Software Defined Networking Define CA-PA mappings: Specify the Hyper-V server on which the virtual machines are running Hyper-V implements policies by translating incoming and outgoing packets If a virtual machine is moved, policies are modified, but the virtual machine configuration stays the same Policy settings PA space Blue Yonder Airlines CA PA VSID 5001 SQL WEB Datacenter network Hyper-V Host 1 Hyper-V Host 2 Woodgrove Bank CA PA VSID 6001 SQL SQL WEB WEB SQL WEB CA spaces

Network Controller Overview
6/23/2018 9:37 PM Network Controller Overview Highly available and scalable server role Southbound API for NC to communicate with the network Northbound API allows you to communicate with the NC Southbound API Network Controller can discover network devices, detect service configurations, and gather all of the information you need about the network Provides pathway to send information to the network infrastructure, such as configuration changes that you have made Northbound API (Rest interface) Provides you with the ability to gather network information from Network Controller and use it to monitor and configure the network Configure, monitor, troubleshoot, and deploy new devices on the network by using Windows PowerShell, REST, SCVMM, SCOM etc. Can manage: Hyper-V VMs & vSwitches, Physical Network Switches, Physical Network Routers, Firewall Software, VPN Gateways incl. RRAS, Load Balancers… Management applications Network aware applications Network Controller Virtual network infrastructure Physical network infrastructure NIC © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Network Controller features
6/23/2018 9:37 PM Network Controller features Fabric Network Management IP subnets VLANS, L2 and L3 switches Host NICs Firewall Management Allow/Deny Rules East/West & North/South Firewall rules plumbed into vSwitch port of VMs Rules for incoming/outgoing traffic Log traffic allowed/denied Network Topology Automatic discovery of network elements & relationships Service Chaining Rules for redirecting traffic to one or more virtual appliances Software Load Balancer Centralized configuration of SLB policies Network Monitoring Physical & Virtual Active network data: network loss, latency, baselines, deviations Fault localization Element data: SNMP polling & traps Limited set of critical data via public management info bases (MIB) i.e. Link state, system restarts, BGP peer status Device (switch, router) and Device Group (racks, subnets etc.) health Gathers network loss, latency, device CPU/memory usages, link utilization, and packet drops Impact analysis: overlay networks affected by underlying faulty physical networks using topology information to determine vNet footprint & health System Center Operations Manager integration for health & statistics. Virtual Network Management Deploy Hyper-V Network Virtualization Deploy Hyper-V Virtual Switch Deploy Virtual Network Adaptors to VMs Store and Distribute virtual network policies Supports NVGRE and VXLAN Windows Server Gateway Management Deploy, configure & manage WSGs -> Host & VMs S2S VPN with IPsec, S2S VPN with GRE P2S VPN, L3 Forwarding, BGP Routing Load balancing of S2S and P2S connections across Gateway VMs + logging config/state changes © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/23/2018 9:37 PM Datacenter Firewall Highly scalable, manageable, and diagnosable software-based firewall Freedom to move tenant virtual machines to different compute hosts without breaking tenant firewall policies Deployed as a vSwitch port host agent firewall Tenant virtual machines get the policies assigned to their vSwitch host agent firewall Firewall rules are configured in each vSwitch port, independent of the actual host running the virtual machine Guest OS agnostic Protect traffic between VMs on same/different L2 subnets © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Related content Breakout Sessions/Chalk Talks/Theater Sessions
Tech Ready 15 6/23/2018 Related content Breakout Sessions/Chalk Talks/Theater Sessions CDP201 Demystifying Patching with Windows Server 2016 CDP217 CDP304 Windows Containers - Real World Use Cases from CCEP …and many, many, more! Instructor-led Labs CDPIL101 Failover Clustering - Hands on with the new 2016 feature CDPIL202 Getting started with Windows Containers & Docker CDPIL303 Nano Server, you've heard of it, time to experience it. Hands-on Labs CDPHOL203 Discover new storage capabilities in Windows Server 2016 CDPHOL204 Experience Nano Server (you've heard of it) CDPHOL302 Containers and Docker © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

In Summary: Session Objectives And Takeaways
Tech Ready 15 6/23/2018 In Summary: Session Objectives And Takeaways Session Objective(s): Help you prepare for exam : Networking with Windows Server 2016 Key Takeaway 1 Exam study material, links, resources Key Takeaway 2 Exam topics and breakdown of questions © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Course 20741 - outline Module 1
Course 20741A Module 0: Introduction Course outline Module 1 Planning and implementing an IPv4 network Module 2 Implementing DHCP Module 3 Implementing IPv6 Module 4 Implementing DNS Module 5 Implementing and managing IPAM

Course 20741 outline, continued
Course 20741A Module 0: Introduction Course outline, continued Module 6 Remote access in Windows Server 2016 Module 7 Implementing DirectAccess Module 8 Implementing VPNs Module 9 Implementing networking for branch offices Module 10 Configuring advanced networking features Module 11 Implementing software-defined networking

Born To Learn Site http://borntolearn.mslearn.net/ 6/23/2018
© 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/23/2018 TechNet Virtual Labs © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Virtual Academy
6/23/2018 © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/23/2018 Q&A If you have questions please proceed to the Q&A MICROPHONE located in your session room. © 2015 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session
Tech Ready 15 6/23/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite Phone: download and use the Microsoft Ignite mobile app Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

70-741: Networking with Windows Server 2016

Similar presentations

Presentation on theme: "70-741: Networking with Windows Server 2016"— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

70-741: Networking with Windows Server 2016

Similar presentations

Presentation on theme: "70-741: Networking with Windows Server 2016"— Presentation transcript:

Similar presentations

About project

Feedback