windows server 2003 dhcp 安裝設定與管理維護 林寶森 [email protected]

19
Windows Server 2003 DHCP 安安安安安安安安安 林林林 jeffl@ms11.hinet.net

Upload: rosamund-armstrong

Post on 24-Dec-2015

288 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Windows Server 2003DHCP 安裝設定與管理維護

林寶森[email protected]

Page 2: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

How DHCP Allocates IP Addresses

DHCP Server DHCP Server

DHCP Database

IP Address1: Leased to DHCP Client1IP Address2: Leased to DHCP Client2IP Address3: Available to be leased

IP Address1: Leased to DHCP Client1IP Address2: Leased to DHCP Client2IP Address3: Available to be leased

DHCP Client2:IP configuration

from DHCP server

DHCP Client2:IP configuration

from DHCP server

Non-DHCP Client:Static IP

configuration

Non-DHCP Client:Static IP

configuration

DHCP Client1:IP configuration

from DHCP server

DHCP Client1:IP configuration

from DHCP server

Lease Renewal

Lease Generation

Page 3: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

The DHCP Lease Generation Process

DHCP ServersDHCP Client

1111 IP Lease RequestIP Lease Request

3333 IP Lease SelectionIP Lease Selection

2222IP Lease OfferIP Lease Offer

4444IP Lease Acknowledgement

IP Lease Acknowledgement

Page 4: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

The DHCP Lease Renewal Process

DHCPREQUESTDHCPREQUESTDHCPREQUESTDHCPREQUEST

Source IP Address = 192.168.0.77Dest. IP Address = 192.168.0.108Requested IP Address = 192.168.0.77Hardware Address = 08004....

Source IP Address = 192.168.0.77Dest. IP Address = 192.168.0.108Requested IP Address = 192.168.0.77Hardware Address = 08004....

DHCPACKDHCPACK

Source IP Address = 192.168.0.108Dest. IP Address = 192.168.0.77Offered IP Address = 192.168.0.77 Client Hardware Address = 08004...Subnet Mask = 255.255.255.0Length of Lease = 8 daysServer Identifier = 192.168.0.108DHCP Option: Router = 192.168.0.1

Source IP Address = 192.168.0.108Dest. IP Address = 192.168.0.77Offered IP Address = 192.168.0.77 Client Hardware Address = 08004...Subnet Mask = 255.255.255.0Length of Lease = 8 daysServer Identifier = 192.168.0.108DHCP Option: Router = 192.168.0.1

DHCP Client DHCP Server

Page 5: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Automatic Private IP Addressing

Computer RunningWindows XP / 2003

DHCP Server (Offline)

Request for IP AddressRequest for IP AddressRequest for IP AddressRequest for IP Address

Assigns IP AddressAssigns IP AddressAssigns IP AddressAssigns IP Address

No Response

No Response

Broadcasts the Broadcasts the IP AddressIP Address

Broadcasts the Broadcasts the IP AddressIP Address

APIPAAPIPAGenerates IP AddressGenerates IP Address

APIPAAPIPAGenerates IP AddressGenerates IP Address

169.254.X.X169.254.X.X

No IP Address Returned

No IP Address Returned

Page 6: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Securing the DHCP Service

DHCP Administrators

DHCP Users

Active Directory

DHCP Server 1DHCP Server 1 DHCP Server 2DHCP Server 2

Authorized ListAuthorized List

DHCP Server 1DHCP Server 1

DHCP Server 2DHCP Server 2

DHCP LogDHCP Log

Page 7: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Overview of Scopes

ScopeScopeScopeScope

192.168.1.0192.168.1.1192.168.1.2192.168.1.3192.168.1.4

IP Addresses Available for Lease to Client Computers

DHCP Server

Page 8: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Selecting DHCP Options

DHCP option Description

Routers A preferred list of IP addresses for routers on the same subnet as the DHCP clients

DNS servers IP addresses for DNS name servers that DHCP clients use to resolve names

DNS domain Domain name that DHCP clients should use when resolving names

WINS node type A preferred NetBIOS name resolution method for the DHCP client to use

WINS server IP addresses of primary and secondary WINS servers for the DHCP client to use

Page 9: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Reserving IP Addresses for Client Computers

A reservation is a specific IP address, within a scope, that is permanently reserved for leased use to a specific DHCP client

New Reservation

Provide information for a reserved client.

Reservation name:

IP address:

MAC address:

Description:

Supported types

Both

DHCP only

BOOTP only

Add Close

Stuttgart Server

192 . 168 . 1 . 201

DHCP Reservation for Server

00a024e2b01a

Page 10: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Examining Option Classes• Vendor-defined classes manage DHCP options that are

assigned to clients that are identified by vendor type• User-defined classes manage DHCP options that are

assigned to clients with common configuration requirements

Client1

Client2

Client3DHCPServer

Configuration AConfiguration A

Configuration BConfiguration B

Configuration CConfiguration C

Page 11: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Relative IPCONFIG Options

• IPCONFIG /allDisplay full configuration information

• IPCONFIG /renewRenew the IP address for the specified adapter

• IPCONFIG /releaseRelease the IP address for the specified adapter

Page 12: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Configuring a Superscope

SuperscopeASuperscopeA

Scope1192.168.1.1

192.168.1.254

Scope1192.168.1.1

192.168.1.254

DHCPServer

192.168.1.1192.168.1.1 192.168.1.254192.168.1.254 192.168.2.1192.168.2.1 192.168.2.254192.168.2.254

Scope2192.168.2.1

192.168.2.254

Scope2192.168.2.1

192.168.2.254

Page 13: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Configuring a Multicast ScopeComputer2

Computer3

Computer4

Computer1

MulticastGroup

DHCP Server

Request for Request for Multicast AddressMulticast Address

Request for Request for Multicast AddressMulticast Address

Multicast Multicast Address AssignedAddress AssignedMulticast Multicast Address AssignedAddress Assigned

Page 14: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Routed Network Configuration OptionsDHCP Client

DHCP Client

Non RFCCompliant

RouterRouter RouterRouter

RFC-1542Compliant

Windows 2003 Server

DHCPDHCPRelayRelayAgentAgent

DHCP Server

Broadcast

Broadcast

DHCP Client

DHCP Client

Non RFCCompliant

RouterRouter Router

RFC-1542Compliant

DHCPDHCPRelayRelayAgentAgent

Broadcast

Broadcast

DHCP Client

DHCP Client

Non RFCCompliant

Router

DHCPRelayAgent

RouterRouter

RFC-1542Compliant

DHCP Client

Non RFCCompliant

RouterRouter RouterRouter

RFC-1542Compliant

DHCPDHCPRelayRelayAgentAgent

Page 15: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

Enhancing DHCP Availability with Distributed Scopes

DHCP Server DHCP Server

Scope for 192.168.1.X/24defined in both DHCP Servers

Active Addresses

Active Addresses Excluded Addresses

Excluded Addresses

Page 16: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

What Is a DHCP Database?• The DHCP database contains DHCP configuration data,

such as information about scopes, reservations, options, and leases

• Windows Server 2003 stores the DHCP database in the directory %Systemroot%\System32\Dhcp

• The DHCP database files include:

DHCP.mdb Tmp.edb J50.log and J50*.log

DHCP.mdb Tmp.edb J50.log and J50*.log

Res*.log J50.chk

Res*.log J50.chk

Page 17: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

How a DHCP Database Is Reconciled

Example

Summary information Detailed information Reconciled DHCP database

Client has IP address 192.168.1.34

IP address 192.168.1.34 is available Create an active lease entry

DHCP ServerDHCP Server

DHCPDatabase

Registry Summary IP address lease information

Summary IP address lease information

Detailed IP address lease information

Detailed IP address lease information Compares

information to find inconsistencies

Compares information to find

inconsistencies

Reconciles inconsistencies in

the DHCP database

Reconciles inconsistencies in

the DHCP database

Page 18: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

What Are DHCP Statistics?

DHCP statistics represent statistics collected at either the server level or scope level since the DHCP service was last started DHCP statistics represent statistics collected at either the server level or scope level since the DHCP service was last started

DHCP ServerDHCP Server

Page 19: Windows Server 2003 DHCP 安裝設定與管理維護 林寶森 jeffl@ms11.hinet.net

What Is a DHCP Audit Log File?A DHCP audit log is a log of service-related events, such as when: the service starts and stops; authorizations have been verified; or IP addresses are leased, renewed, released, or denied

A DHCP audit log is a log of service-related events, such as when: the service starts and stops; authorizations have been verified; or IP addresses are leased, renewed, released, or denied