| In this chapter, you have examined the basic history, configuration, implementation, and troubleshooting of TCP/IP in Windows Server 2003. In the following exercises, you will practice some of the concepts and methods discussed in this chapter. Exercises 1.1. Testing TCP/IP This exercise guides you through the process of retrieving IP address information. Then you use a few command-line entries to test the configuration and connectivity of the IP address. Estimated time: 5 minutes Select Start, Run. Then type CMD in the Run dialog box and press Enter. At the command prompt, type the command ipconfig and press Enter. What is your IP address? What is your subnet mask? Can you determine the IP address of the DNS server? Enter ipconfig/all. What additional information can you now see? Enter ping 127.0.0.1. This is a special loopback test that tells you whether your network interface card is dead, just playing sick, or, hopefully, just fine. Enter pingXX, where XX is your favorite Web site. If you have another computer on this network, ping the IP address of that computer. ping the name of the computer.
Did all your communications occur successfully? If not, you might need to perform some additional investigation and troubleshooting to determine where your problem lies. 1.2. Creating a TCP/IP Packet Filter This exercise walks you through the process of creating a TCP/IP filter on a computer. Estimated time: 20 minutes Open the Network Connections window by selecting Start, Settings, Network Connections. Double-click the Local Area Connection icon to bring up the Local Area Connection Status dialog box. Click the Properties button to open the Local Area Connection Properties dialog box. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. On the General tab of the Internet Protocol (TCP/IP) Properties dialog box, click the Advanced button. Select the Options tab and then click the Properties button to open the TCP/IP Filtering dialog box. Select the Enable TCP/IP Filtering (All Adapters) option to enable TCP/IP filters. Above TCP Ports, select the Permit Only option and then click the Add button. Specify port number 23 for Telnet sessions, and then click OK. Click Add and enter port number 80 for Web access, and then click OK. Select the Permit Only option for UDP ports and then click the Add button. Enter port number 69 for TFTP sessions, and then click OK. Click Add and enter port number 161 for SNMP, and then click OK. Select the Permit Only option for IP protocols and then click the Add button. Enter 2 for IGMP and then click OK. Click OK to approve these settings. Then restart the computer to test the changes. After the computer restarts, go to another computer on the network. Open a command prompt on that computer and ping the IP address of the server that has IP filtering configured. Are you able to ping the computer? Open the TCP/IP Filtering dialog box on the original computer again. In the Permit Only IP Protocol section, add 1 for ICMP. Approve these settings and restart the computer. Go to another computer on the network and try to ping the computer. Does it work now? Return once more to the original computer and remove all the IP packet filters. Approve your changes, reboot, and test the ping command again.
1.3. Manually Configuring TCP/IP In this exercise, you will manually configure TCP/IP on a network adapter. Estimated time: 10 minutes Open the Network Connections window. Open the Local Area Connection Status dialog box. Click the Properties button to open the Local Area Connection Properties dialog box. On the General tab, select Internet Protocol (TCP/IP) and then click Properties. On the Internet Protocol (TCP/IP) Properties dialog box, manually enter the IP address, subnet mask, default gateway, and DNS servers for this network adapter. If you need to make advanced settings, click the Advanced button. After you make your selections, click OK to accept them. Click Close to close the Local Area Connection Properties dialog box. Check your settings by opening a command prompt and using the ipconfig/all command.
1.4. Getting Familiar with netsh In this exercise, you will use the netsh command to return configuration information about your server. Estimated time: 10 minutes Select Start, Run. Then type CMD in the Run dialog box and press Enter. At the command prompt, type the command netsh and press Enter. The netsh> prompt appears; type ? to see a list of available contexts. Enter the interface context by typing interface and pressing Enter. The netsh interface> prompt appears; type ? to see a list of available sub contexts. Enter the ip context by typing ip and pressing Enter. The netsh interface ip> prompt appears; type ? to see a list of available subcontexts. Display the show menu by typing show and pressing Enter. Enter show config to display the TCP/IP properties for your network adapter. After you're done examining this information, type exit and press Enter to close netsh and return to the command prompt.
Exam Questions | 1. | Chris is a departmental systems administrator for Widgets, Inc. Her network consists of 15 Windows Server 2003 computers, 5 of which are domain controllers. The remaining 10 servers are file and print servers for her 750 Windows XP Professional workstation clients. The previous administrator had carefully assigned every computer a static IP address, equally split up among five Class C subnets. Now some users have started moving their computers from one location in the building to another; this trend will be the norm for Widgets, Inc. in the future. After moving, the users complain to Chris that they can no longer access network resources. What is the most likely cause of this problem, and what should Chris do about it? The senior systems administrator has DHCP servers available for Chris to use, should she decide to use them. 
| A. | There are not enough client access licenses (CALs) for the Windows Server 2003 computers. Chris should purchase the required number of CALs. |
| B. | The statically configured IP addresses are no longer valid on the subnet to which the computers have been moved. Chris should reconfigure the computers with the correct static IP addresses. |
| C. | The statically configured IP addresses are no longer valid on the subnet to which the computers have been moved. Chris should reconfigure the computers so that they are DHCP clients. |
| D. | The port to which the computers are connecting on the switch may be failing. Chris should replace the switches where computers cannot connect to network resources. |
| | | | 2. | As the systems administrator of a small legal firm, you are in the process of converting some IP addresses from decimal to binary. What would be the binary value of 209.168.241.158?
| A. | 11010001.10101000.11110001.10011110 |
| B. | 11001001.10101000.11110001.10011110 |
| C. | 11010001.10101000.11101001.10011110 |
| D. | 11010001.10101010.11110001.10011110 |
| | 3. | You are the systems administrator for your company. Your task is to configure the IP addresses of your network. You decide to implement DHCP to automate the process and reduce downtime. You have decided, however, to manually enter static IP addresses for certain hosts on the network. Of the following, which would be good candidates to have statically configured IP addresses? (Choose all that apply.)
| A. | A laptop that moves around within the company's building throughout the week |
| B. | A DNS server |
| C. | An Exchange server |
| D. | A print server |
| | 4. | Hannah, a user from the Accounting Department, calls you, the systems administrator, to report that she's having a tough time connecting to resources on your Windows Server 2003 domain. You ask for more information, and Hannah reveals that she is trying to connect to a server in Washington. Other users can connect to that server, but she cannot. Hannah can ping the IP address of other hosts on her segment, her default gateway, and even the IP address of the server in Washington, but when she uses the server's hostname to enter the name of the server, she cannot connect. What do you suspect is the problem?
| A. | Hannah has a blank or invalid DNS server IP address. |
| B. | Hannah has a blank or invalid subnet mask. |
| C. | Hannah has a faulty network adapter card. |
| D. | Hannah needs to renew her IP address by running the command ipconfig/release and then ipconfig/renew. |
| | | | 5. | You are the systems administrator for Tock's Clocks LTD. All your Windows XP Professional client computers are configured to get DHCP leases from your Windows Server 2003 DHCP server. This morning, one of your client computers no longer had connectivity with the rest of the network. The user claims that she did not change any network settings and has verified that the network cable is properly connected to both the network adapter and the wall jack. What is the most likely reason for the problem that the computer is experiencing?
| A. | The network cable has been damaged and is no longer passing a signal. |
| B. | The computer was not able to contact a DHCP server and has assigned itself an APIPA IP address. |
| C. | The computer is not a member of the domain and is being refused an IP address. |
| D. | The TCP/IP stack on the computer is corrupt and needs to be reset. |
| | 6. | You are trying to break down an IP subnet into smaller groups of IP addresses. Given the IP address 192.168.50.1/27, what is the corresponding dotted-decimal value subnet mask?
| A. | 255.255.192.0 |
| B. | 255.255.255.224 |
| C. | 255.255.255.240 |
| D. | 255.255.255.192 |
| | 7. | You are the systems administrator for Not Quite Right Sales, Inc. You are configuring a new Windows Server 2003 server to be a file server for your home office intranet that will be used only by local users. Which of the following will you need to have to suitably configure the IP address with a statically assigned address? (Choose all that apply.)
| A. | A valid IP address for the server |
| B. | A valid WINS server IP address |
| C. | A valid subnet mask |
| D. | A valid default gateway |
| | | | 8. | You are the systems administrator for Gilligan's Island Tours, Inc. You have recently hired a new assistant systems administrator. You are trying to explain to your assistant how two computers on the same subnet communicate with each other. Which of the following statements should you use to explain to your assistant the process that two computers use to communicate with each other on the same IP subnet?
| A. | The packets will be sent to the MAC address of the default gateway for routing to the destination computer's IP address. |
| B. | The packets will be sent to the MAC address of the destination computer. |
| C. | The packets will be sent to the IP address of the destination computer. |
| D. | The packets will be sent to the IP address of the default gateway for routing to the destination computer's MAC address. |
| | 9. | You are the systems administrator for Not Quite Enough, Inc. You manually assign IP address information to your network computers. You have three DNS servers on your network that you want to configure in the TCP/IP properties for a new computer that you are configuring. How will you configure three DNS servers for this computer?
| A. | You need to create a dns.ini file and place it in the Startup folder of the computer. |
| B. | You cannot configure three DNS servers because there is room for only two entries on the Internet Protocol (TCP/IP) Properties dialog box. |
| C. | You need to configure the third DNS server from the DNS tab of the Advanced TCP/IP Settings dialog box. |
| D. | You need to add the third DNS server by using the netsh command. |
| | 10. | While troubleshooting a Windows XP Professional computer, you discover that it has an IP address of 169.254.176.132, a subnet mask of 255.255.0.0, and no configured default gateway. What is the most likely reason this computer has gotten these IP settings?
| A. | The user of the computer has configured new settings without fully understanding how routed IP networks function. |
| B. | The TCP/IP stack on the computer is corrupt. |
| C. | The DHCP server scope has become corrupt. |
| D. | The computer has been unable to contact a DHCP server. |
| | | | 11. | You are troubleshooting network connectivity between two computers on a routed IP network. What command can you use to send a continuous flow of ICMP echo request packets to the destination IP address?
| A. | ping -a |
| B. | ping -t |
| C. | ping -l |
| D. | ping -f |
| | 12. | You are troubleshooting a network adapter that does not appear to have an IP address assigned to it. What command could you issue to cause this network adapter to acquire a DHCP lease?
| A. | ipconfig/acquire |
| B. | ipconfig/refresh |
| C. | ipconfig/renew |
| D. | ipconfig/lease |
| | 13. | You are part of the team of systems administrators for SunShine Networks. Your task is to segment your Class C IP address, 210.115.64.0, into three subnets. You must allow for the number of networks to increase. The maximum number of hosts per subnet will never surpass 14 hosts. What subnet mask would allow you to segment the network and allow for the required growth?
| A. | 255.255.255.224 |
| B. | 255.255.255.240 |
| C. | 255.255.255.248 |
| D. | 255.255.255.255 |
| | 14. | As a junior systems administrator, you are trying to troubleshoot one of your DNS servers. It seems that your computers running Windows XP Professional have not registered dynamically with your DNS server. You would like to force these computers to register with DNS. What should you do?
| A. | Get the user to reboot the system. |
| B. | At the command prompt, type ipconfig/renew. |
| C. | At the command prompt, type ipconfig/registerdns. |
| D. | At the command prompt, type ipconfig/release. |
|
Answers to Exam Questions | 1. | C. In this case Chris should definitely make the move to using DHCP to assign and manage IP address assignments. Even though it will be a fair amount of work initially, it will provide for ease of management later on, especially if more workstations will be moved around in the building. Purchasing CALs is not indicated in the problem and would present Chris with other indicators. Manually configuring the correct IP address settings provides only a temporary quick fix for the problem, but it will not help Chris in the long run. Chris should not replace network infrastructure devices, such as switches, without further investigation. In this situation, the problem is more likely due to the movement of workstations than anything else. For more information, see the section "Configuring TCP/IP." | | 2. | A. When converting from decimal to binary, 209.168.241.158 is equal to 11010001.10101000.11110001.10011110. For more information, see the section "IP Addresses." | | 3. | B, C, D. Typically, any server that provides a network service to clients should have a statically configured IP address. This includes DNS servers, Exchange (mail) servers, print servers, file servers, SQL (database) servers, routers, firewalls, and many other types of network devices. For more information, see the section "Configuring TCP/IP." | | 4. | A. If Hannah can successfully ping local and remote hosts, including the server to which she is trying to connect, most likely she has either a missing DNS IP address or a DNS IP address that has been configured incorrectly. For more information, see the section "Configuring TCP/IP." | | 5. | B. In the majority of cases in which a computer configured for DHCP suddenly cannot communicate with the rest of the network, the cause is due to the computer having assigned itself an APIPA IP address. Having a damaged network cable (or any other damaged network device) is certainly a possible cause of this problem, but it is not the most common one. For more information, see the section "Troubleshooting APIPA." | | 6. | B. The VLSM 192.168.50.1/27 would be the dotted-decimal equivalent of 255.255.255.224. For more information, see the section "Variable Length Subnet Masks (VLSM)." | | 7. | A, C, D. You need to have a valid IP address, subnet mask, and default gateway configured. Configuring other items, such as a WINS server or DNS server, is not required but will assist in network communications. For more information, see the section "Configuring TCP/IP." | | 8. | B. The packets are originally sent to the IP address of the destination computer, but IP uses ARP to determine the MAC address of the destination computer. The MAC address is in the header of the IP packets, and only the network adapter that has that MAC address accepts the packets. For more information, see the section "The Mechanics of IP." | | 9. | C. You need to add the third DNS server from the DNS tab of the Advanced TCP/IP Settings dialog box. You can add all three servers from here if you want, and you can change the order in which they are queried by the computer by using the up and down arrows. For more information, see the section "Advanced TCP/IP Configuration." | | | | 10. | D. The most likely reason to see an IP address in the 169.254.0.1-169.254.255.254 range is due to a client computer not being able to contact a DHCP server. IP addresses in this range have a subnet mask of 255.255.0.0 and no configured default gatewaythus preventing any communications outside the local IP subnet and also preventing communications with other client computers that are receiving the proper IP addresses from a DHCP server. For more information, see the section "Troubleshooting APIPA." | | 11. | B. By issuing the ping -t command, you can send a continuous stream of ICMP echo request packets to the destination IP address. You can stop the stream of packets by using the Ctrl+C key combination. For more information, see the section "ping." | | 12. | C. You can issue the ipconfig/renew command to force the network adapter to acquire a DHCP lease from a DHCP server. For more information, see the section "ipconfig." | | 13. | B. Because you will never exceed 14 hosts per subnet, your subnet mask should be 255.255.255.240. For more information, see the section "Variable Length Subnet Masks (VLSM)." | | 14. | C. To get a client computer to register dynamically with a DNS server at the command prompt, type ipconfig/registerdns. For more information, see the section "ipconfig." |
|
