RHCE administration iii book by moamen hany

RHCE
RHCE ~
Red Hat Certified Engineer
Red Hat Administration III Book Author :
Mo’men Hany ©
2012 Copyright © July 2012 ,
Engineer Mo’men Hany Mohamed

RH 255 - Red Hat Administration III
RHCE
N P
F
L
Welcome in
Copyright © July 2012 ,

RHCE
Contents
Copyright
Unit1:Introducation
Unit2:TCP/IP Concepts
Unit3:Configure TCP/IP
Unit4:FTP Server
Unit5:NFS
Unit6:Routing
Unit7:DHCP
Unit8:DNS
Unit9:Mail Server
Unit:10:SSH
N P
F
L
By Eng Mo’men Hany © Copyright © July 2012 ,

Copyright
N P
F
L
The contents of this book are copyright © July 2012 ,
Engineer Mo’men Hany Mohamed.
Does not allow the amendment in this book , A free copy
of any one.
The Instructors also have the right to be assisted
in this book in their own explanations and labs.
Been used to create this book with Eng.M-Hany
Experience , IBM, red hat and general books.
Contact book owner : -
Mobil: (Egypt) +2 011 437 395 45
Email: IT.momenhany@hotmail.com
http://www.facebook.com/MomenHanyFP
By Eng Mo’men Hany ©

By Eng Mo’men Hany © Mobil: 01143739545 ^ Email: IT.momenhany@hotmail.com
RHCE
N P
F
L

Unit1:
Introduction
N P
F
L

Module Overview
o s
N P
F
L

N P
F
L
x

N P
F
L

Unit2:
TCP/IP Concepts
N P
F
L

Module Overview
o What is the Network ?
o OSI Layers
o Planning Network
o IPAddressing
o Sub netting
N P
F
L

N P
F
L
What is the Network ?
A network consists of two or more computers that are linked in order to share
resources ( Printers , Servers , Internet , .. etc )

N P
F
L
OSI layers
Transport
Internet
Link
Application
Ethernet
Frame
Relay
Token
Ring ATM
HTTP FTP SMTP DNS RIP SNMP
TCP/IP Protocol Suite
TCP UDP
IPARP IGMP ICMP

N P
F
L
OSI layers
TCP/IP Protocol Suite
TCP/IP
OSI
TCP UDP
ARP
IGMP ICMPIP
Ethernet
Frame
Relay
Token
Ring ATM
Application
Transport
Link
HTTP FTP SMTP
DNS RIP SNMP
Application
Transport
Network
Data-Link
Presentation
Session
Physical
Internet

N P
F
L
OSI layers
All Application Layer:-
The Interface Of user
People  Presentation Layer :-
Formatting All Data to XML Language and Determine Data Encryption.
Seem  Session Layer :-
Open , Manage , Terminate , Session Between Source and Destination .
To  Transport Layer :-
End to End Deliver all Data .
Need  Network Layer :-
Route Data and Select the Short Path .
Data  Data-Link Layer :-
Check for error detection and error correction ,Check H.W Device ,Convert Data to
Binary System .
Processing  Physical Layer :-
Check Media , and transfer all data as a Binary format .

N P
F
L
Planning Network
Selecting Data-Link Layer
***Means of network Physical Infrastructure .
Device Connectivity Media
Device Connectivity :-
*Router
*Bridge
*Switch
*Hub
*SAN Storage
Media :-
*Unshielded Twisted Pear UTP Voltage
*Shielded Twisted Pear STP Voltage
*Fiber Optic Plastic or Glass Light
*Wire Less Radio Segment

N P
F
L
Select Transport and Network Layer
**TCP/IP Or UDP/IP
Standard For Network O.S called Microsoft and Other Vendors.
**IPX/SPX
Supported TCP/IP For Network O.S called Novell.
**Apple Talk
Were Developed by Apple Machines For Network O.S called Apple.
**NET-BEUI NetBIOS Name
For Network O.S called NT.4 with WINS Technology
Based on Broad Cast.
Planning Network

N P
F
L
IPAddressing

N P
F
L
IPAddressing
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
8 Bit Octet
Decimal Value
128 64 32 16 8 4 2 1
27 26 25 24 23 22 21 20
(How Dotted Decimal Notation Relates to Binary Numbers)

N P
F
L
IPAddressing
LAB:-
• Broad Cast
• Network ID
• Host ID
• Loopback Test
• Change from Binary to Decimal
• Change from Decimal to Binary

N P
F
L
IPAddressing
IPv4 IPv6
Source and
destination addresses
32 bits (4 bytes) in length 128 bits (16 bytes) in length
IPsec support Optional Required
Address Resolution
Protocol
Broadcast ARP Request frames
resolve IPv4 address to link layer
address
ARP Request frames replaced with
multicast Neighbor Solicitation
messages
Digit Type Decimal Hexadecimal
IP Addresses Number 232 = 4294967296
2128 =
3.40282366920938463463374607
43177e+38
Broadcast addresses
Sends traffic to all nodes on a
subnet
Uses a link-local scope, all-nodes
multicast address instead of an
IPv6 broadcast address
Configuration
Configured manually or through
DHCP
Does not require manual
configuration or DHCP
Resource records
Uses A resource records in DNS to
map host names to IPv4
addresses
Uses AAAA resource records in DNS
to map host names to IPv6
addresses

N P
F
L
IPAddressing
IPv6 New Features
✓ IP-Sec
✓ No Broad-Cast
✓ Any-Cast Between Machines Special Nearest.
✓ No Subnet Mask or Class Range
✓ Dual Stack-Interface IPv4 and IPv6
✓ No Need Manual or DHCP Configuration
✓ Hexadecimal

N P
F
L
IPAddressing
IPv4 232 
4 Octet=32 Bit Decimal
----------------------------------------------------------------------
IPv6 2128 
8 Octet=128 Bit Hexadecimal
Every Octet=4 Hexadecimal Digit
Every 1Hexadecimal Digit = 4 Bit
Every Octet = 4x4 = 16 Bit
Such as  16:16:16:16:16:16:16:16

N P
F
L
IPAddressing
128+64+32+16+8+4+2+1Decimal 10 . 9 . 8 . 7
Binary 00001010.00001001.00001000.00000111
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
0 1 2 3 4 5 6 7 8 9 A B C D E F
8+4+2+1

N P
F
L
IPAddressing
Example’s
Here is an example of a full IPv6 address:
FE80:0000:0000:0000:0202:B3FF:FE1E:8329
Here is an example of a collapsed IPv6 address:
FE80::0202:B3FF:FE1E:8329
Here is an example of an IP address that contains a port number:
[2001:db8:0:1]:80
-Collapsed [2001:db8::1]:80
Here is an example of an IP address that contains a URL:
http://[2001:db8:0:1]:80

N P
F
L
IPAddressing
64 Bit 64 Bit
FE80:0000:0000:0000:0202:B3FF:FE1E:8329
Network Addresses (Network Prefix).
Host Addresses (Host ID).
FE80:0:0:0:0202:B3FF:FE1E:8329
FE80::0202:B3FF:FE1E:8329

N P
F
L
Note : You can’t use over double colon in the same ip addresses
FE80::202
“Double colon replaced with the full zero octets”
How to Convert to the Full IPv6 ?
Existed Octets – Default Octets (8) = (?)
? X Bits per Octets (16) = Number of zero Bits
2 – 8 = 6
6 x 16 = 96 Bits
FE80:0000:0000:0000:0000:0000:0000:0202
IPAddressing

N P
F
L
Network Prefix
2607:f0d0:1002:0051:0000:0000:0000:0004 / 48
16 x 3 = 48 Bits
2607:f0d0:1002:FFFF:FFFF:FFFF:FFFF:FFFF / 48
Network ID (Prefix)
Host ID (Host Addresses)
IPAddressing

N P
F
L
IPv4 IPv6
Public (Real) ~ Global
Private ~ Site- local
APIPA ~ Link -Local
Loopback 127.0.0.1 ~ ::1
0 . 0 . 0 . 0 ~ ::
IPAddressing

N P
F
L
Sub netting
Subnet 1
131.107.10.0
Main network
131.107.12.0
Subnet 2
131.107.3.0
131.107.10.12
131.107.12.31
131.107.3.27
131.107.12.7
Router
Router

N P
F
L
255 255 224 0
1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0
1. 00000000 = 0
2. 00100000 = 32
3. 01000000 = 64
4. 01100000 = 96
5. 10000000 = 128
6. 10100000 = 160
7. 11000000 = 192
8. 11100000 = 224
1
2
Eight networks
are possible
Sub netting

N P
F
L
Sub netting
LAB:-

Unit3:
Configure TCP/IP
N P
F
L

Module Overview
o Configure hostname
o Assign IPAddressee
o Define Routing Information Gate way
o Define Name Resolution
N P
F
L

N P
F
L
Configure hostname
Show Computer hostname
# hostname
Change hostname
# hostname momenserver
To change hostname permanently
# vi /etc/sysconfig/network in most other Dis.
# vi /etc/HOSTNAME

N P
F
L
Assign IPAddressee
Assign IPAddressee using ifconfig
# ifconfig eth0 192.168.1.100 netmask 255.255.255.0 up
# system-config-network<TAB>
# neat  GUI
To Activate and Deactivate NIC
# ifup eth0
# ifdown eth0

N P
F
L
Configure WLAN
Assign IPAddressee using iwconfig
# iwconfig eth1 rate auto essid “wlan-momen” enc “P@ssW0rd”
# neat  GUI
# yast
Other power Command
# iwlist
# iwspy

N P
F
L
Assign Aliases IPAddressee
Useful :
-Using multiple logical networks on one physical network
-Creating High-Availability clusters
-Testing
# ifconfig eth0:0 172.168.1.100 netmask 255.255.255.0 up
# ifconfig eth0:1 10.10.1.100 netmask 255.255.255.0 up
# ifup eht0:0

N P
F
L
Define Gate way
Assign default gateway using route
# route add default 192.168.1.1
or
# neat  GUI

N P
F
L
Define Name Resolution
Using /etc/hosts file to resolve name to IP :
# vi /etc/hosts
# vi /etc/resolve.conf

N P
F
L
Testing your Configuration
Verify Local Interface
# ifconfig
Verify Routing
# route
Verify ARP Table
# arp
Verify Connectivity
# ping 192.168.1.20

N P
F
L
Testing your Configuration
Verify Hostname Resolution
# host mhany-machine
# host 192.168.1.20
Verify Open Ports
# netstat -a

Unit4:
FTP Server
N P
F
L

Module Overview
o File Transfer Protocol
o Configure FTP Server
o FTPAccess
N P
F
L

N P
F
L
FTP Overview

N P
F
L
Configure Server
(1) Install FTP package using CD or yum tool
# yum install vsftpd*
Or
# rpm -ivh vsftp0000.rpm
(2) Restart vsftpd Service
# service vsftpd restart
(3) Disable Firewall
# System-Config-firewall-tui
FTP Configuration File
# vi /etc/vsftpd/vsftpd.conf

N P
F
L
FTPAccess
Login Access
Anonymous User Access
# vi /etc/vsftpd/userlist

Unit7:
DHCP
N P
F
L

Module Overview
o Introduction to DHCP
o Configure DHCP Server
N P
F
L

N P
F
L
Introduction
DHCP reduces the complexity and amount of administrative work by using
automatic TCP/IP configuration
Manual TCP/IP Configuration
• IP addresses are entered
manually
• IP address could be entered
incorrectly
• Communication and network
issues can result
• Frequent computer moves
increase administrative effort
Automatic TCP/IP Configuration
• IP addresses are supplied
automatically
• Correct configuration
information is ensured
• Client configuration is updated
automatically
• A common source of network
problems is eliminated

N P
F
L
Introduction
DHCP client broadcasts a DHCPDISCOVER
packet1
DHCP servers broadcast a DHCPOFFER packet2
DHCP client broadcasts a DHCPREQUEST packet3
DHCP Server1 broadcasts a DHCPACK packet4
DHCP
Client
DHCP
Server1
DHCP
Server2
DHCP client broadcasts a DHCPDISCOVER
packet1
DHCP servers broadcast a DHCPOFFER packet2
DHCP client broadcasts a DHCPREQUEST packet3
DHCP Server1 broadcasts a DHCPACK packet4
DHCP
Client
DHCP
Server1
DHCP
Server2

N P
F
L
Introduction
DHCP Client sends a DHCPREQUEST packet1
DHCP Server1 sends a DHCPACK packet2
If the client fails to renew its lease, after 50% of the lease duration has expired,
then the DHCP lease renewal process will begin again after 87.5% of the lease
duration has expired
If the client fails to renew it’s lease, after 87.5% of the
lease has expired, then the DHCP lease generation
process starts over again with a DHCP client
broadcasting a DHCPDISCOVER
DHCP Client
DHCP
Server1
DHCP
Server2
50% of lease
duration has
expired
87.5% of lease
duration has
expired
100% of
lease
duration has
expired
Renewal

N P
F
L
Configuration
Copy Configuration File
# cp /usr/share/doc/dhcp-3.0.5/dhcpd.conf.sample /etc/dhcpd.conf

N P
F
L
Configuration
-Edit in dhcpd.conf
# vi /etc/dhcp.conf
-Restart dhcpd service
# service dhcpd restart

Unit8:
DNS
N P
F
L

Module Overview
o Introduction to Domain Name System (DNS)
o Root Hints
o Query’s
o Forwarders
o Cache Server
o What is a Zone
o Configuring DNS Server
N P
F
L

N P
F
L
Introduction
Root Domain
Subdomain
Top-Level Domain
FQDN:
SERVER1.sales.south.momen.com
south
momen
com
sales
west east
orgnet
Host: SERVER1
Second-Level Domain

N P
F
L
DNS Servers on the InternetDNS ServersDNS Clients
Root “.”
.com
.edu
Resource
Record
Resource
Record
Introduction

N P
F
L
• SOA: Start of Authority
• A: Host Record
• CNAME: Alias Record
• MX: Mail Exchange Record
• SRV: Service Resources
• NS: Name Servers
• AAAA: IPv6 DNS Record
Introduction
DNS Resource Record

N P
F
L
Root Hints
Root hints contain the IP addresses for DNS root servers
momen
DNS Servers
DNS Server
Root (.) Servers
com
Client
Root Hints

N P
F
L
Query’s
DNS Client
mail1.momen.com
192.168.1.100
A recursive query is sent to a DNS server and requires a complete answer
Database
Local DNS Server

N P
F
L
Query’s
An iterative query directed to a DNS server may be answered with a
referral to another DNS server
Client Server
cal DNS Server
Root Hint (.)
.com
Iterative Query
Ask .com
momen.com
192.168.1.66

N P
F
L
Forwarders
A forwarder is a DNS server designated to resolve external or offsite
DNS domain names
Momen.com
192.168.1.66
Root Hint (.)
.com
Iterative Query
Ask .com
Forwarder
Local DNS Server Client Server

N P
F
L
Cache Server
Where’s
ServerA?
ServerA is at
192.168.1.44
Where’s
ServerA?
ServerA is at
192.168.1.44
Client1
Client2
ServerA
DNS server cache
Host name IP address TTL
ServerA.momen.com 192.168.1.44 28 seconds

N P
F
L
Zone
“.”
.com
momen.com zone
momen.com
domain
Internet
example.momen.com zone
DNS root domain
Zone database
Zone database
example.momen.com
www.example.momen.com
ftp.example.momen.com
momen.com
www.momen.com
ftp.momen.com
example.momen.com

N P
F
L
Zone
Zones Description
Primary/Master First DNS that create a Zone
Secondary/Slave Retrieve data from master server zone
Master Nameservers
Are "authoritative" for a domain
May initiate zone transfers to slave nameservers
Service all client requests
Cache lookups for other domains
Slave Nameservers
Are also authoritative for a domain
Retrieve data from a master nameserver in a zone transfer
Service all client requests
Cache lookups for other domains

N P
F
L
Zone
DNS Client2
DNS Client3
Namespace: training.momen.com
DNS Client1
DNS Server Authorized
for training
Forward
zone
Training
DNS Client1 192.168.1.45
DNS Client2 192.168.1.46
DNS Client3 192.168.1.47
Reverse
zone
1.168.192.in-
addr.arpa
192.168.1.45 DNS Client1
192.168.1.46 DNS Client2
192.168.1.47 DNS Client3
DNS Client2 = ?
192.168.1.46 = ?

N P
F
L
Configuring DNS
DNS in Linux
Package Name = BIND
Service Name = Named
1- install BIND Packages
# yum install bind bind-libs bind-chroot bind-utils caching-nameserver
___________________________________________________
2- Configure NIC
# ifconfig eth0 192.168.1.100 netmask 255.255.255.0 up
# neat
___________________________________________________
3- Test Connectivity
# ping localhost
# ping 192.168.1.100
___________________________________________________
4-change server name
# hostname dns1.momen.com
# vi /etc/sysconfig/network
HOSTNAME= dns1.momen.com

N P
F
L
Configuring DNS
5- Edit in hosts file add your server
# vi /etc/hosts
192.168.1.100 dns1.momen.com dns1
___________________________________________________
6- edit resolve name
# vi /etc/resolve.conf
Search momen.com
Nameserver 192.168.1.100
___________________________________________________
7- restart network service
# service network restart
___________________________________________________
8- edit in this file
# vi /etc/named.conf
Listen –on port 53 ( 192.168.1.100 ) Not Require
Allow-query { any; } ;

N P
F
L
Configuring DNS
9- edit in this file or set default files
# vi /etc/named.rfc1912.zones

N P
F
L
Configuring DNS
10- cd to /var/named
# cd /var/named
___________________________________________________
11- copy files to new name or rename it
# cp named.localhost forward.zone
Or
# cp localdomain.zone forward.zone
# cp named.loopbak reverse.zone
Or
# cp named.local reverse.zone
~Recommended
Not replace or
change zones file

N P
F
L
Configuring DNS
12- edit in forward zone file
# vi forward.zone
13- edit in revers zone file
# vi revers.zone

N P
F
L
Configuring DNS
14- restart named service
# service named restart
___________________________________________________
15- Test
# ping dns1
# dig dns1
# nslookup
>192.168.1.100

N P
F
L
Configuring DNS
Cache File
# vi /var/named/named.ca

N P
F
L
Forwarders

White Board
Last Viewed

RHCE administration iii book by moamen hany

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to RHCE administration iii book by moamen hany

Similar to RHCE administration iii book by moamen hany (20)

Recently uploaded

Recently uploaded (20)

RHCE administration iii book by moamen hany