Lab00 ‐ Routing and Windows - derek-hash/SYS-265-02 GitHub Wiki
Firewall (FW01)
Virtual Network Configuration:
WAN Interface: VMX0/em0
LAN Interface: VMX1/em1
IP Configuration:
WAN IP: [Your Assigned Public IP]
WAN Gateway: 10.0.17.2
LAN IP: 10.0.5.2/24
Settings:
Disable IPv6 on both WAN and LAN.
Set the hostname to fw01-yourname.
Set domain to yourname.local.
Primary DNS: 8.8.8.8
Uncheck "Block RFC1918 Private Networks."
Windows 10 (WKS01)
Virtual Network: SYS265-LAN
Static IP Configuration:
IP Address: 10.0.5.100
Netmask: 255.255.255.0
Gateway: 10.0.5.2
DNS: 10.0.5.2
Hostname: wks01-yourname
Created a Local Named Administrator Account:
Username: yourname
AD01 (Server Core)
Network Settings:
IP Address: 10.0.5.5
Netmask: 255.255.255.0
Gateway: 10.0.5.2
Preferred DNS: 10.0.5.2
Hostname: ad01-yourname
Active Directory Installation:
Domain Name: yourname.local
Used PowerShell to install Active Directory.
MGMT01 (Server 2019 with GUI)
Network Configuration: SYS265-LAN
Static IP Configuration:
IP Address: 10.0.5.10
Gateway: 10.0.5.2
DNS: 10.0.5.5 (AD DNS Server)
Hostname: mgmt01-yourname
Joined the Domain: yourname.local
Active Directory Users and Computers
Created Users:
first.lastname
first.lastname-adm
Assigned first.lastname-adm to Domain Admins Group.
DNS Configuration
Created Reverse Lookup Zone for 10.0.5.0/24.
Added A and PTR Records:
fw01-yourname
Manually added records for ad01 and mgmt01.
Commands for Deliverables
PowerShell Query for Windows Computers in AD:
* Get-ADComputer -Filter * | Select-Object Name
Query for Domain Users:
* Get-ADUser -Filter "Name -like '*lastname*'" | Select-Object Name
DNS A Records:
* Get-DnsServerResourceRecord -ZoneName "yourname.local" -Node "@"
Enumerate PTR Records:
* Get-DnsServerResourceRecord -ZoneName "10.in-addr.arpa" -Node "5"
Traceroute to Google:
* tracert google.com
Research Topics
-
pfSense Firewall Configuration
-
Server Core Management with PowerShell
-
DNS Zone Configuration and Troubleshooting
Research Results
- pfSense Firewall Configuration
-
Overview: pfSense is an open-source firewall/router software based on FreeBSD.
-
Useful Commands:
* pfctl -sr (Show active rules) * ipconfig (Check interface configuration)
- Server Core Management with PowerShell
-
Command: sconfig for basic setup.
* Useful Cmdlets: * Add-WindowsFeature AD-Domain-Services * Install-ADDSForest -DomainName "yourname.local"
-
DNS Zone Configuration
-
Reverse Lookup Zones: Essential for mapping IP addresses to hostnames.
-
Troubleshooting Tools:
* nslookup to test DNS name resolution.
-