CORE MODULE - 2

Computer Networking

© Edunet Foundation
[Link]

Learning Outcome - Able to use basic PC hand tools effectively

Crimp CAT 6 cables using crimping tool (0.5 Hrs.)

Crimp CAT 6 cable to RJ 45 connector (1 Hrs.)

Activity 1
Aim: Crimp CAT 6 cables using crimping tool

Learning outcome: Able to use basic PC hand tools effectively.

Duration: 0.5 hour

List of Hardware/Software requirements:

1. CAT 6 Cables

2. Crimping Tool

3. Connectors

Code/Program/Procedure (with comments):

Step 1

• This procedure generally applies to Cat 6 RJ45 connectors.

• An alternate method is given for connectors utilizing a "load bar".

Step 2
 • Cut the cable to the length needed.
• If you plan to use snag less boots, this would be a good time to slide them on.
• Be sure the boots will be facing "out" towards the connector.

Snaggle boots

Step 3

• Strip back the cable jacket approximately 1 inch.

• Use the cutter provided with the crimping tool or strip by hand.
• Be careful not to nick the individual wires.
• Un-twist each of the 4 pairs and straighten each wire as much as possible between the
fingers.

Step 4

• Use the 568-B wiring scheme on both ends for a standard patch cable.
Step 5

• Bring all of the wires together as closely as possible.

• Hold the grouped (and sorted) wires together tightly between the thumb, and the forefinger.
• Cut all of the wires at a perfect 90-degree angle from the cable,
• 1/2 inch from the end of the cable jacket.
• Use a sharp cutting tool so as not to "squash" the wire ends.

Step 6

• With the connector pins facing up, carefully insert the wires into the connector.
• Apply a moderate amount of force in order to properly seat the wires against the contacts
in the connector.

Alternate for "load bar" Type Connectors

A.

• Note that the load bar has slots on one side with a flanged edge on one end.
• The slotted side should face the pins inside the connector.
• The wires are inserted into the flanged end.
B.

• Hold the grouped (and sorted) wires together tightly, between the thumb, and forefinger.
• Cut all of the wires at a sharp angle from the cable.
• Use a sharp cutting tool so as not to "squash" the wire ends.

C.

• Hold the load bar so the staggered holes face toward the cable.
• Insert the wires through the load bar, one at a time, carefully observing the orientation.
• Slide the load bar as far down as possible.

D.

• Cut off the excess wire ends with a straight cut about 0.25" past the load bar.
• With the connector pins facing up, slide the load bar assembly into the connector.
• Ensure that the wires are firmly seated to the end of the connector.

The brown pair wires should be on the right side.

Step 7

• Observe the tip of the connector to confirm that all the wires are fully inserted.
• The end of each wire you should be in full view.
• There should be enough of the cable jacket inside the connector to crimp against.
• Tip: Slide the load bar forward as necessary to provide the ideal placement.

Step 8

• Place the connector into the crimp tool, and squeeze hard so that the handle reaches its
full swing.

Step 9

• Repeat the process on the other end using the desired wiring scheme.
• Be sure to slide the snag less boots snugly over the connectors when finished.
 Before Crimping After Crimping

Step 10

• Always use a cable tester to check for continuity, opens and shorts.

Step 11

• Building patch cables takes practice so keep at it until you master your technique!

Output/Results snippet:

References:

• [Link]
• [Link]
Activity 2
Aim: Crimp CAT 6 cable to RJ 45 connector

Learning outcome: Able to work with different cables, connectors and its Crimping techniques
for PC.

Duration: 1 hour

List of Hardware/Software requirements:

• CAT 6 cable
• RJ 45 connector
• Connector/Cable tool

Code/Program/Procedure (with comments):

Step 1

This procedure generally applies to Cat 6 RJ45 connectors.

An alternate method is given for connectors utilizing a "load bar".

Step 2

Cut the cable to the length needed.

If you plan to use snag less boots, this would be a good time to slide them on.

Be sure the boots will be facing "out" towards the connect

Step 3

Strip back the cable jacket approximately 1 inch.

Use the cutter provided with the crimping tool or strip by hand.

Be careful not to nick the individual wires.

Un-twist each of the 4 pairs and straighten each wire as much as possible between the fingers.

Step 4

Use the 568-B wiring scheme on both ends for a standard patch cable.
Step 5

• Bring all of the wires together as closely as possible.

• Hold the grouped (and sorted) wires together tightly between the thumb, and the forefinger.
• Cut all of the wires at a perfect 90-degree angle from the cable,
• 1/2 inch from the end of the cable jacket.
• Use a sharp cutting tool so as not to "squash" the wire ends.

Step 6

With the connector pins facing up, carefully insert the wires into the connector.

Apply a moderate amount of force in order to properly seat the wires against the contacts in the
connector.

Alternate for "load bar" Type Connectors

A.

Note that the load bar has slots on one side with a flanged edge on one end.

The slotted side should face the pins inside the connector.

The wires are inserted into the flanged end.

B.

Hold the grouped (and sorted) wires together tightly, between the thumb, and forefinger.

Cut all of the wires at a sharp angle from the cable.

Use a sharp cutting tool so as not to "squash" the wire ends.

C.

Hold the load bar so the staggered holes face toward the cable.

Insert the wires through the load bar, one at a time, carefully observing the orientation.

Slide the load bar as far down as possible.

D.

Cut off the excess wire ends with a straight cut about 0.25" past the load bar.

With the connector pins facing up, slide the load bar assembly into the connector.
Ensure that the wires are firmly seated to the end of the connector.

The brown pair wires should be on the right side.

Step 7

Observe the tip of the connector to confirm that all the wires are fully inserted.

The end of each wire you should be in full view.

There should be enough of the cable jacket inside the connector to crimp against.

Tip: Slide the load bar forward as necessary to provide the ideal placement.

Step 8

Place the connector into the crimp tool, and squeeze hard so that the handle reaches its full

swing.

Step 9

Repeat the process on the other end using the desired wiring scheme.

Be sure to slide the snagless boots snugly over the connectors when finished.

Step 10

Always use a cable tester to check for continuity, opens and shorts

Step 11

Building patch cables takes practice so keep at it until you master your technique!
Learning Outcome – Configure Network Protocols
After completing this course, student would be able to configure and use various network
protocols

1. Install and Configure DNS service

2. Install and Configure DHCP Services
3. Install and Configure FTP Services
4. Install and Configure HTTP Services
Activity 1

Aim: Installation and Configuring DNS Services

Learning outcome: Able to configure different protocol services

Duration: 3 hour

List of Hardware/Software requirements:

Windows Server 2012 R2

VMWare Workstation

Computer with 8GB RAM/500 GB HD

Code/Program/Procedure(with comments):
Installing DNS Server Role

Step 1: From task bar, open server manager dashboard

1. Read the notes and meet the prerequisites. Click Next when you are done

2. Choose Role-based or feature-based installation and click Next

3. Select the destination server from server pool on which you want to configure
DNS and click Next
4. Choose DNS Server from server roles. When prompted to install additional
necessary features along with DNS server, click Add Features

5. Click Next
6. Keep default selections and click Next

7. Read the important notes and click Next

 8. Click Install. Wait for a moment before DNS role is installed

Configuring Forward Look Up Zone:

1. Open server manager dashboard, and then open tools. Scroll to DNS and click it

2. Right-click Forward Lookup Zones and click New Zone

3. Click Next

4. Provide the zone name and click Next

5. Choose Create a new file with this file name and click Next
6. Choose Do not allow dynamic updates and click Next

7. Click Finish to successfully create the new zone

Configuring Reverse Look Up Zone

1. Open server manager from task bar and click on Tools. Scroll to DNS and then click on it

2. Right-click Reverse Lookup Zones and then click New Zone

3. Click Next

4. Choose Primary zone and click Next

5. Choose IPv4 Reverse Lookup Zone and click Next
6. Provide network ID and click Next

7. Choose Create a new file with this file name: and click Next
8. Choose Do not allow dynamic updates and click Next
 9. Click Finish to end the wizard

Adding a New Host Record in Forward Look Up Zone

1. Locate the zone in forward lookup zones and right-click on it. Scroll to New
Host (A or AAAA) and click on it
2. Provide the name and click Add Host

3. To determine DNS Server ->Open Command Prompt in Windows Server and type
ipconfig /all.
Output/Results snippet:

References:

[Link]
Activity 2
Aim: Installation and Configuring DHCP Services
Learning outcome: Able to configure different protocol services

Duration: 2 hour

List of Hardware/Software requirements:

1. Windows Server 2012 R2

2. VMWare Workstation

3. Computer with 8GB RAM/500 GB HD

Code/Program/Procedure (with comments):

Installing DHCP Server

1. Open Server Manager from task bar and click Add roles and features
2. Before you run the installation wizard, make sure that an administrator account
has a strong password, static IP is configured, and security updates from Windows
updates are installed. When you are done, click Next

3. Select Role-based or feature-based installation and click Next

4. Select a destination server on which you want to install the DHCP server. In our
case, there is only one server which is local server and it is selected by default.

Click Next

5. Select DHCP server role by checking the appropriate box. As soon as you check
the box, a small window will pop up alerting you that there are some other features
which are also required to be installed along with DHCP server. Click Add
Features
6. Click Next

7. Click Next
8. Note the things outlined in the screen and click Next

9. Confirm your installation selections and click Install

10. Click Close to finish the installation
Configuring DHCP Server and Creating Scope

11. Open Server Manager and click notifications icon. A small window will
appear. Click Complete DHCP configuration

12. Click Next

13. Choose Skip AD authorization since we do not have any AD configured
and click Commit

14. Read the summary and click Close

15. Open Server Manager and click on Tools. When a small window appear,
scroll to DHCP and click it

16. In management console, right click on IPv4 and scroll to New Scope and click it.
17. Click Next

18. Provide name and meaningful description of this new scope and click Next
19. Provide IP address range along with sub net you need to distribute to client
machines and click Next

20. Provide any IP addresses you need to exclude from pool and click Add. I have
excluded a first IP address which is statically assigned to my DHCP server. Click
Next
21. Keep lease duration as 8 days and click Next

22. Choose No, I will configure these options later and click Next
23. Click Finish to end the new scope wizard

24. Right-click on new scope you just created in above step and click Activate
 25. Right-click on your server, scroll to All Tasks and then click Restart to finish
with configuration

Output:

Open Command Prompt and Type : ipconfig /all

 References:

[Link]
Activity 3
Aim: Install and Configure FTP Services.
Learning outcome: Able to configure different protocol services

Duration: 3 hour

List of Hardware/Software requirements:

1. Windows Server 2012 R2

2. VMWare Workstation

3. Computer with 8GB RAM/500 GB HD

Code/Program/Procedure (with comments):

1. Open the Windows Server Control Panel and find the Add roles and features.
2. As the installation type, specify Role-based or feature-based installation.

3. Select your server from the server pool.

4. In the next window, check the IIS web server
5. In the window that opens, click Add features.

6. In the next window Features do not select anything.

Next in the Role services window, check the FTP server.
7. Install all selected features on the server using the Install button.
Creating an FTP site on a Windows server

8. Open IIS Manager.

9. Right-click on Sites and select Add FTP Site from the menu.
10. Enter the site name and path to the directory.

11. Next, select your IP address in the drop-down list. For encryption, check No SSL.
12. In the next window, select Basic for authentication. Authorization - Specified roles
or groups, enter the name of the group of FTP users (example of creation below).
Check the desired read and write permissions and click the Finish button.
 13. Your website will appear in the tree structure of the Windows web server

Create user group

14. Creating a Windows group is necessary to determine the users who will have
access to the ftp server. Open Computer Management. In the menu on the right,
select Groups. Use the right mouse button to create a new group (New Group).
 15. In the window that opens, enter the name of the group, a description if
necessary. To add a user, click Add.

16. Enter a name in the input field, to check it, click Check Names. If Windows users
exist, click Ok.

User isolation
17. In order for each user to get to his own directory and not have access to other files
after connecting to the server, it is necessary to set up isolation. To do this, open
your ftp site settings and select FTP User Isolation.

18. Select the User name directory and click Apply.

19. Then, using the right mouse button, open the menu of your ftp site and select Add
Virtual Directory.

20. In the Alias field, enter a nickname or name, in the path field enter the path to the
user directory, to do this, create a subdirectory in the ftp site directory on your
Windows server. Click Ok.
21. To configure permissions in IIS Manager, expand the hierarchical structure of your
ftp server. Using the right mouse button, open the Windows virtual directory menu
and select Edit Permission.

22. Click the Security tab and click the Advanced button.
23. In the window that opens, click the Disable inheritance button, select the first
option in the new window, and then click Apply - Ok.
24. Return to the Security tab and click the Edit button.

25. Select the Users group in which all users are located and click the Remove
button. This is necessary so that only the owner of the directory has access to it.
26. Now add a Windows user who will have full access to the directory.
Click the Add button.

27. Enter the username of the virtual directory in the input field, to check it, click
Check
Names. If users exist, click Ok.
28. Next you need to add rights for complete control of the directory. Select the created
user
and check all fields Allow (Permissions).

29. Next, click Apply - Ok.

Firewall Setup

30. For an external connection to the ftp server, you must configure the firewall. To do
this, open Windows Firewall with Advanced Security. In the vertical menu on
the left, select Inbound rules, then in the vertical menu on the right New Rule.
31. In the window that opens, check the Predefined type and select FTP Server
from the drop-down list. Click Next.

32. Select and Mark all the lines and click Next.
33. In the next step, select Allow the connection and click Finish. For these rules
to take effect - restart the server.
Connect to an FTP server

34. You can connect to an FTP server in several ways, for example, through the
standard Windows utility - Explorer, or through the FileZilla program.
Consider connecting through Explorer. In the address bar,

enter: [Link]

For example,

[Link]
35. The login and password input window will open, specify the connection data from
the server control panel.
Output:

As a result, you will see the contents of the FTP server folder:

References:
● [Link]
Activity 4
Aim: Install and Configure HTTP Services
Learning outcome: Able to configure different protocol services

Duration: 2 hour

List of Hardware/Software requirements:

1. Windows Server 2012 R2

2. VMWare Workstation

3. Computer with 8GB RAM/500 GB HD

Code/Program/Procedure (with comments):

1. Download the Apache Software form [Link] and

select the Operating system type 32-bit or 64-bit.

2. Go to Downloads and extract the ZIP file to the root of the C: drive
3. Open ” C:/Apache24/conf “and select [Link] and open with notepad.

If there is no any other web services running on your machine then keep “Listen 80”
otherwise change it to “Listen 81”.

4. Test your installation open command prompt and type C:\Apache24\bin press
enter and Next-> type httpd –t in command prompt.
5. To Start Apache in the command prompt

type: [Link]

6. We can test your installation by opening up your Browser and typing in the address:
[Link]

7. To stop the apache service press Ctrl+C in Command Propmpt.

8. To install as a service. Open command prompt as Administrator and type:

>[Link] -k install
 9. we can start/stop the service with the command:

>[Link]

Output:

Reference:

[Link]
windows/[Link]/windows/configure-dns-windows-server-2012-r2-2/
Learning Outcome - Able to install & configure the different types of
network devices in a network
After achieving this learning outcome, a student will be able to install & configure the
different types of network devices in a network. In order to achieve this learning
outcome, a student has to complete the following:

1. Configure & Implement Unmanageable Network Switch (3Hrs)

2. Configure & Implement Manageable Network Switch (2Hrs)
3. Install and configure router, bridges and HUB (3Hrs)
4. Configure Wireless Access Point ( 2Hrs)
5. Install and Configure Wire Network ( 2Hrs)
6. Install and Configure Wireless Network ( 2Hrs)
7. Install of AD-hoc Wireless Network ( 1Hr)
8. Configure Gateway Service for Internet Connectivity (3 Hrs)
9. Configure ADSL+2 Router for ISP Internet Connectivity (2Hrs)
10. Troubleshoot Internet Connectivity (5Hrs)

/
Activity 1
Aim: Configure & Implement Unmanageable Network Switch.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 3 hours

List of Hardware/Software requirements:

1. Unmanaged network switch

2. Ethernet cables with connectors

3. Computers/Digital Devices with pre-installed operating system (Windows, Linux,

etc)

Code/Program/Procedure (with comments):

Figure 1: Configure & Implement Unmanageable Network Switch

• It allows for networking of Ethernet devices for data communication.

/
• The dedicated path between the sender and the receiver for the exchange of

data at full speed.

• Forward broadcasts.

• No user configuration.

• Compatible with other switches.

Figure 2: Ethernet Devices for data communication

• Five Ethernet ports 10/100 Base-TX.

• Din rail mountable.

• Automatic MDI//MDI-X crossover for plug-and-play.

• Supports=10~+30 VDC voltage input reverse polarity protection.

• Supports operating temperatures from -40~+75*C (-40F~ 167F).

• Full-duplex IEEE 802.3x and half-duplex backpressure movement control.

• Each port reinforcement 10/100mbps speed auto negotiation store-and-

forward architecture.
 Figure 3: Ethernet ports

References:

[Link]
and-unmana ged-switch/

/
Activity 2
Aim: Configure & Implement Manageable Network Switch.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 2 hours

List of Hardware/Software requirements:

1. Managed network switch

2. Ethernet cables with connectors

3. Computers/Digital Devices with pre-installed operating system (Windows, Linux,

etc)

Code/Program/Procedure (with comments):

Figure 9: Configure & Implement Manageable Network Switch

/
 Figure 10: Manageable Network Switch

• IEEE 802.3ab 10000BASE-T Gigabit Ethernet.

• L2+features provide good manageability, security, QoS, and performance.

• Network redundant ring failover protection.

• Multicasting support IGMP v1/v2/v3, proxy and snooping.

• Multicast/flooding/broadcast storm control.

Figure 11: Ethernet ports

• Two dual-media for flexible fiber connection.

• Port mirroring helps supervisor monitoring network.

• IEEE802.1Q tag base VLAN for performance and security and 4094 VLAN entries.

• IEEE802.1X access control improves network security.

• IEEE802.1D compatible, IEEE802.1w rapid spanning tree and

IEEE802.1s multiple spanning tree.

/
• Unknown unicast/broadcast/multicast storm control.

• Multicast VLAN management for IPTV.

• IP-MAC port binding for LAN security.

• QCL based on application traffic for QoS and speed limitation management.

• Support IGMPv3 snooping and IGMP proxy.

• Support DHCP snooping.

Figure 12: RS-232 Ports

Port-Based VLAN Configuration

/
Procedure:

Step 1: Connect the computer to the unmanaged switch (e.g. Dlink DGS 1210) with
ethernet cable connected to any port of the switch.

Step 2: Set the IP address of the computer with a static IP address of the range
10.90.90.X

Step 3: Power on the switch. Type the default IP address of the switch (Dlink DGS 1210)
– [Link] in the URL of the browser to open the login of the switch.

Output/Results snippet:

Figure 4: Type the default password as ‘admin’ to get into the dashboard of the
configuration page of the switch.

/
 Figure 5: After logging in to the homepage of Dlink DGS 1210 switch

Figure 6: The system contains many options like Port Settings where the different
ethernet ports of the switch could be configured.

/
 Figure 7: 802.1Q VLAN settings

Figure 8: The VLAN options could be used to setup vlans.

References:

● [Link]

/
Activity 3
Aim: Install and configure router, bridges and HUB.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 3 hours

List of Hardware/Software requirements:

1. Router, Bridge, HUB

2. Ethernet cables with connectors

3. Computers/Digital Devices with pre-installed operating system (Windows, Linux,

etc)

4. Cisco Packet Tracer Software

Code/Program/Procedure (with comments):

1. Provide power to the switch, if required. For a stand-alone switch, this

means plugging in the power supply. For rack-mounted switches, this means

using a slot that has power provided to it.

2. Connect the incoming network cable to the switch. Although any time can be

used on most network switches, it is a good idea to use the first slot so anyone

can quickly identify the incoming cable. For home and small office software, the

incoming cable will be the one coming from your modem.

3. Connect a Cat5 or Cat6 cable to another slot in the network switch. Connect

the other end to a computer you want to be connected to the network. Provide

power to the switch, if required. For a stand-alone switch, this means plugging

/
 in the power supply.

For rack-mounted switches, means using a slot that has power supplied to it.

4. Connect the incoming network cable to the switch. Although any time can be

used on most network switches, it is a good idea to use the first slot so anyone

can quickly identify the incoming cable. For home and small office applications,

the arriving cable will be the one coming from your modem.

5. Connect a Cat5 or Cat6 cable to another slot in the network switch. Connect

the other end to a computer you want to be connected to the network.

Need to install pocket tracer software

• Press RETURN to get started

• Router>Enabled

• Router#configure t

• Enter configuration commands, one per line. End with CNTL/Z

• Router? (? select which router from 0 to many)(config-if)#shot down.

Figure 9: Packet Tracer Software

/
 Figure 10: configure router, bridges, and HUB

Figure 11: IP Configure

References:

● [Link]
and-c [Link]
● [Link]

/
Activity 4
Aim: Configure Wireless Access Point.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 2 hours

List of Hardware/Software requirements:

1. Computer with pre-installed operating system (Windows, Linux, etc)

2. Access point

Code/Program/Procedure (with comments):

Configure a wireless access point (By taking DLink access point). These guidelines

are provided for illustrative purposes and do not represent an endorsement of the

DLink access point over other competing products.

Please take the following steps:

1. Change the default admin password.

2. Change the default SSID to something of your picking.

3. Enable encryption.

4. Disable the DHCP Server task, if your access point has this feature.

5. Register the hardware (MAC) address of the wireless card.

By using these steps while connecting wireless access point there will be no problem.

/
Figure 12: TCP/IP Properties

Figure 13: IP Address

/
 Figure 14: Wireless access point Setup

References:

● [Link]
● [Link]
access-point
/

/
Activity 5
Aim: Install and Configure Wire Network.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 2 hours

List of Hardware/Software requirements:

1. Computer with pre-installed operating system (Windows, Linux, etc)

2. Ethernet cable with connector

3. Router

Code/Program/Procedure (with comments):

1. Take the router to connect the Modem and router with the help of cables.

Figure 15: Connection between Modem and Router

2. Connect the router to the modem. Routers and wireless routers enable to

share broadband internet connection with multiple [Link] need to connect

broadband modem to the router. For better results, place your router near your

/
modem. Fix the router and the modem with an Ethernet cable.

Figure 16: Modem with an Ethernet cable

3. The arrow mark shows the LAN is not connected, Or a problem with your LAN

connection.

Figure 17: LAN connection

1. Select the Local area connection, right click on that and select the status option.
 Figure 18: Status Option

4. Check the IPv4 connection and click on properties.

Figure 19: IPv4 connection

3. After that select the internet protocol version TCP/IPv4 and click on ok.

/
 Figure 20: Version of TCP/IPv4

Figure 21: LAN Status Icon

References:

● [Link]
a-wire d-network/
● [Link]

/
Activity 6
Aim: Install and Configure Wireless Network.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 2 hours

List of Hardware/Software requirements:

1. Computer with pre-installed operating system (Windows, Linux, etc)

2. Wireless router

Code/Program/Procedure (with comments):

1. When you power on the router, it will only generate its wi-fi network, and the

device will be connected to the router's wi-fi connection, not the internet. To

connect the

router to the internet need a MAC address to the internet service provider's website.

Figure 22: MAC address

/
2. The MAC address will display already the old one need to Reset the MAC address

Figure 23: Reset MAC Address

3. Enter the administrator name and password and click on login

Figure 24: Administrator Name and Password

/
 Figure 25: Wireless Tools

4. Select the wireless network name and select the enable the wireless router

radio and SSID broadcast

Figure 26: Wireless Router Radio and SSID broadcast

1. Select the WPA/WPA2 and fill all the fields.

Figure 27: WPA/WPA2

2. Enter the wireless password and click on the save button.

/
 Figure 28: Wireless Password

Figure 29: Save the Features

3. Gave old administrator name and password and a new username and

password then click on save

/
 Figure 30: Administrator Name and Password

Figure 31: Administration Information

4. Open the WIFI portal see the name is displaying then click on connect.

/
 Figure 32: WIFI portal

5. Enter the password0r security key which was given before and click on next button.

Figure 33: Password/Security Key

6. The WIFI is connected finally it is displaying in WIFI portal.

Figure 34: Check Connected or not

References:

● [Link]
network

/
● [Link]

/
Activity 7
Aim: Installation of AD-hoc Wireless Network.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 1 hour

List of Hardware/Software requirements:

1. Computer with pre-installed operating system (Windows, Linux, etc)

2. WinLAN software

Code/Program/Procedure (with comments):

First, need to install [Link] software, and double-click on that it will open
[Link].

1. Give your network name and password in the fields SSID and PASS respectively.

Figure 35: AD-hoc Wireless

2. Enter the SSID and PASS and click on create button.

Figure 36: Enter the SSID and PASS

3. See in the network and security center portal and will get the created LAN.

Figure 37: Network and Security Center Portal

References:

● [Link]
up-a-wi reless-ad-hoc-network/
● [Link]

/
Activity 8
Aim: Configure Gateway Service for Internet Connectivity.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 3 hours

List of Hardware/Software requirements:

1. Router

2. Broadband modem

3. Computer with pre-installed operating system (Windows, Linux, etc)

4. Ethernet cables

Code/Program/Procedure (with comments):

To configure your NETGEAR router (gateway) for cable internet connection with

Smart Wizard:

• Connect your modem to the internet port of the NETGEAR router and your

PC to any of the four LAN ports.

/
 Figure 38: NETGEAR router

• Change the computer, router, and broadband/cable modem, off and on

again. Pause for them all to finish booting up.

• Open a web browser and sort the router's IP address which would be

either [Link] or [Link] in the address bar and press

Enter.

• You are pressed to log into the router.

• The defaulting username is admin and the default password is password.

• The username and password are case-sensitive.

• If the default username and password are not functioning, you might have

changed the password. Please try additional passwords that you might have

changed too.

• Click the Setup Wizard.

• The Setup Wizard monitor displays.

• Select the Yes button and click Next.

Figure 39: Setup for NETGEAR router

The Setup Wizard identifies the type of internet connection. For cable internet

/
connections, the Setup Wizard identifies Dynamic IP.

• Click the Next. The router saves the settings.

Figure 40: Save the settings

• Check that the internet connected, select Router Status under Maintenance.

Figure 41: Router Status

• Appearance at the IP Address field to see if you have a valid IP address

(that is, not blank or filled with zeroes, such as [Link]).

References:

[Link]
GT4_Programming_Guide.p df

/
Activity 9
Aim: Configure ADSL+2 Router for ISP Internet Connectivity.

Learning outcome: Able to install & configure the different types of network devices in a
network.

Duration: 2 hours

List of Hardware/Software requirements:

1. Computer with pre-installed operating system (Windows, Linux, etc)

2. ADSL+2 Router

3. Broadband modem

4. Ethernet cables

Code/Program/Procedure (with comments):

1. Open a web browser and enter the IP address of the DSL-300T. Press Enter.

2. Type the Login name and password. Click on login.

3. Click on the Setup at the top. Click on Connection on the left.

4. Configure the following for your connection:

• Type - Set the connection to PPPoA

• Name – Enter the name on name field for the connection.

• Encapsulation - set the encapsulation as suggested by ISP.

/
• Username - Enter ISP login username

• Password – Enter the login password

• Keep alive - leave the default

• MAX Fail - left the field as default

• MTU - leave as default

• MRU - leave the default

• Set Route - enable set route(default)

• VPI - set to ISP suggested settings (i.e. 0)(UK ADSL commonly uses

VPI=0 and VCI=38)

• VCI - set to ISP recommended settings (i.e.38) (UK ADSL usually uses

VPI=0 and VCI=38)

• QoS - leave the default

• PCR - leave the default

• SCR - leave default

Click on Apply when

done.

5. Click on the Status tab at the top and then click on Connection Position on the left

side. The Connection data can be seen in the WAN section of the page. After

connecting, the machine will now get the IP address from the ISP.

6. Click on Tools at the top. Click on System Commands on the left. Click on Save

to permanently save the changes.

/
References:

● [Link]
setup-m y-adsl-router-for-internet-access
● [Link]

/
Activity 10
Aim: Troubleshoot Internet Connectivity

Learning outcome: Able to configure and manage network security.

Duration: 5 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:

Troubleshooting using IPCONFIG Command

If you are trying to diagnose and fix a network problem, you should know about the
Ipconfig program as one of the troubleshooting arrows in your quiver.

Ipconfig can be used to display TCP/IP network configuration values, discard the
current IP and DHCP settings for a device, and renew the DHCP settings for a device.

If your computer is connecting to the Internet or your local network properly, an easy thing
to try is to use Ipconfig to release (meaning, discard) its current settings and then renew
itself with new settings.

Ipconfig is a command-line program. To see the results of the program, you should run
it from a Command Prompt box. To open a Command Prompt box, select the Command
Prompt icon in the Accessories program group from the Windows XP Start menu.

/
Next, at the command line, type the command you want to run. Here are some of
the most important ways you can use Ipconfig. The command Ipconfig /? displays
all the Ipconfig commands and the syntax of the program. So this is the
command to run if you want to learn more about what Ipconfig can do, and how
to use it.

The command Ipconfig /all displays the network settings for a TCP/IP device on the
network, as you can see in Figure 15.10. You can use this information to track the IP
addresses assigned to computers on your network, and make sure that there is no
conflict caused by two computers having been assigned the same address. You can
also use the IP address of a device on the network to access the device directly without
knowing its name.

The command Ipconfig /release sends a message to the DHCP server to release the
current IP address for a device on the network.

The command Ipconfig /renew sends a message to the DHCP server to renew the IP
address of your computer, provided your computer is set up to automatically obtain its
IP address. The results of running this command on my computer are shown in
Image.

Troubleshooting using PING Command

1. Open a DOS command window. To do this, click Start, click Run, type cmd,
and then press Enter.
2. At the command prompt, type the following command. Replace [Link]
with the domain that you want to test:
3. “ping [Link]” write on the command prompt.
4. Interpret the output from ping.

Troubleshooting using TRACERT Command

1. Open a DOS command window. To do this, click Start, click Run, type cmd,
and then press Enter.
2. At the command prompt, type the following command. Replace [Link]
with the domain that you want to test:
“tracert [Link]”

/
 3. Interpret the output from tracert:

○ Tracert displays each hop, indicated by a number in the left

column. It also displays the domain and IP address at each hop, as
well as the time spent.

Troubleshooting using NSLOOKUP Command

Run the following command and check whether the DNS server is reachable
from client computers.

Cmd

nslookup <client name> <server IP address>

● If the resolver returns the IP address of the client, the server does not have any
problems.

● If the resolver returns a "Server failure" or "Query refused" response, the zone
is probably paused, or the server is possibly overloaded. You can learn whether
it's paused by checking the General tab of the zone properties in the DNS
console.

If the resolver returns a "Request to server timed out" or "No response from server"
response, the DNS service probably is not running. Try to restart the DNS Server
service by entering the following at a command prompt on the server:

Cmd

net start DNS

/
 If the issue occurs when the service is running, the server might not be listening on the
IP address that you used in your nslookup query. On the Interfaces tab of the server
properties page in the DNS console, administrators can restrict a DNS server to listen
on only selected addresses. If the DNS server has been configured to limit service to a
specific list of its configured IP addresses, it's possible that the IP address that's used to
contact the DNS server is not in the list. You can try a different IP address in the list or
add the IP address to the list.

1. In rare cases, the DNS server might have an advanced security or firewall
configuration. If the server is located on another network that is reachable only
through an intermediate host (such as a packet filtering router or proxy server),
the DNS server might use a
non-standard port to listen for and receive client requests.

Output/Results snippet:

/
/
References:

● [Link]/Networking/
https
Learning Outcome - Able to configure and manage network security
After achieving this learning outcome, a student will be Able to configure and manage
network security. In order to achieve this learning outcome, a student has to complete
the following:

• Managing Server Network Security (3Hrs)

• Set up security base line (2 Hrs)
• Configure Audit Policy (2 Hrs)
• Monitor and Troubleshoot Network protocol (3Hrs)
• Configure Protocol Security (2 Hrs)
• Plan security for Wireless Network (1Hr)
• Install and Configure Different Antivirus Software (2 Hrs)
• Install and Configure Admin Console ( 3Hrs)
• Configure a Local Security Policies ( 2Hrs)
• Configure Domain Security Policies ( 3Hrs)
• Configure RRAS Policies ( 2Hrs)
Activity 1
Aim: Managing Server Network Security

Learning outcome: Able to configure and manage network security.

Duration: 3 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:

There are two important things to understand about virtual secure mode. First,
virtual secure mode doesn't really provide any security by itself. Instead, virtual
secure mode is more of an infrastructure- level component of the operating system,
and is the basis for other security features which will be discussed later on.

The other thing that must be understood about virtual secure mode is that the word
virtual is there for a reason. As you probably know, modern CPUs include on-chip
virtualization extensions. Historically, these virtualization extensions have been the
basis of server virtualization. The hypervisor sits on top of the CPU and acts as an
intermediary between the virtual machines and the hardware.

One of the big advantages to using this approach to server virtualization is that the
hypervisor is able to ensure that virtual machines are truly isolated from one another.
Virtual secure mode uses a similar technique to create a virtualized space on top of the
hypervisor. Sensitive operations can be securely performed within this space, without

/
being exposed to the host operating system.

Feature No. 1: Credential Guard

As previously noted, virtual secure mode is not a security feature itself, but rather a
platform that can be used by other security features. Credential Guard is one of the
security features that relies on virtual secure mode. As its name implies, Credential
Guard is designed to prevent user credentials from being compromised.

The authentication process used by the Windows operating system is a function of the
Local Security Authority (LSA). Not only does the LSA provide interactive authentication
services, but it also generates security tokens, manages the local security policy and
manages the system's audit policy. Credential Guard works by moving the LSA into
Isolated User Mode, the virtualized space created by virtual secure mode.

Although the operating system must be able to communicate with the LSA in order to
perform authentication services, Microsoft has designed the operating system to
protect the integrity of the LSA. First, the memory used by the LSA is isolated, just as
a virtual machine's memory is isolated. Microsoft also limits the LSA to running only
the bare minimum binaries, and strict signing of those binaries is enforced. Finally,
Microsoft prevents other code, such as drivers, from running in Isolated User Mode.

Feature No. 2: Device Guard

Device Guard is another operating system feature that leverages virtual secure mode.
Device Guard isn't really a feature per se, but rather a collection of three security
features that fall collectively under the Device Guard label. These three features include
Configurable Code Integrity, VSM Protected Code Integrity, and Platform and UEFI
Secure Boot (which has been around since Windows 8). Collectively, these three
features work together to prevent malware infections.

The Device Guard component that is designed to work with virtual secure mode is
VSM Protected Code Integrity. This component ensures the integrity of code
running at the kernel level. Although moving kernel mode code integrity into virtual
secure mode goes a long way toward protecting the operating system, the
Configurable Code Integrity feature is equally noteworthy. This feature is designed
to ensure that only trusted code is allowed to run.
Administrators can use the PowerShell New-CIPolicy cmdlet to create integrity
policies that essentially act as whitelists for applications.

/
In case you are wondering, these policies are based on application signatures. Since not
all applications are signed, Microsoft provides a tool called [Link] that can create
a catalog (a signature) for unsigned applications.

Feature No. 3: Host Guardian and Shielded Virtual Machines

Although server virtualization has been proven to be relatively secure, it has always had
one major Achilles heel: virtual machine portability. Today, there is little to prevent a
virtualization administrator, or even a storage administrator for that matter, from copying
a virtual machine's virtual hard disk to removable [Link] rogue administrator would
then be able to take the media home, mount the virtual hard disks on his own computer
and gain full access to the virtual hard disk's contents. If necessary, the administrator
could even go so far as to set up their own host server and actually boot the stolen
virtual machine. Microsoft's Host Guardian Service is designed to prevent this from
happening by allowing the creation of shielded virtual machines.

The Host Guardian Service is a Windows Server 2016 attestation and key protection
service that allows a Hyper-V host to be configured to act as a guarded host. A guarded
host must be positively identified on the network and attested at the Active Directory
and/or TPM level. If TPM trusted attestation is being used, then Windows goes so far as
to verify the host's health by comparing its configuration against a known good baseline
configuration. It is worth noting, however, that Active Directory trusted attestation does
not support host configuration verification.

The Host Guardian Service enables the use of shielded virtual machines. A shielded
virtual machine is a virtual machine whose virtual hard disks are encrypted via virtual
TPM. This encryption prevents a shielded virtual machine from running on any Hyper-V
server other than a designated guarded host. If a virtual hard disk is removed from the
organization, its contents cannot be accessed and the virtual machine cannot be run.

Shielded virtual machines are BitLocker encrypted. BitLocker makes use of a virtual
TPM device, residing on the host server. The virtual TPM is encrypted using a transport
key, and the transport key is in turn protected by the Host Guardian Service.

/
Output/Results snippet:

References:

• [Link]/Networking/
• [Link]

/
Activity 2
Aim: Set up security baseline

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:

Copy the ADMX from the Templates to the GPO Central Store

Duplicate the ADML from the templates to the GPO Central Store EN-US subfolder

/
IMPORT GPOS

● Create a new blank GPO

● Right-click on the GPO, and click on Import Settings

/
● Click Next

© Edunet Foundation. All rights reserved. 344

/
● Click Next, no need of backup of a new blank GPO.

● Browse to the GPOs file and click Next.

d. 345
© Edunet Foundation. All rights reserve

/
● Select the GPO to be imported, built on the name and click Next.

● Click Next

© Edunet Foundation. All rights reserved.

346
/
● Select Copying them identically from the source and click on next

. 347
© Edunet Foundation. All rights reserved

/
 ● Click Finish

Output/Results snippet:

The Output as follows in the security baseline.

© Edunet Foundation. All rights reserved. 348

/
References:

• [Link]/Networking/
• [Link]

© Edunet Foundation. All rights reserved. 349

/
Activity 3
Aim: Configure Audit Policy

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:

Open the server manager, click on tools and select the group policy management.

© Edunet Foundation. All rights reserved. 350 /

© Edunet Foundation. All rights reserved. 351
Select forest windows ae from group policy management, then select

domain from their windows ae from their select default domain controller

policy then right-click and select edit.

After that select the computer configuration.

© Edunet Foundation. All rights reserved. 352

/
Double click on audit account logon events,

• If you select the Define these policy settings check box, the policy is applied.

• If you select Success, only success audits are logged.

• If you select Failure, only failure audits are logged.

© Edunet Foundation. All rights reserved. 353

/
Repeat the step 1 and 3, then click Audit policies.

© Edunet Foundation. All rights reserved. 354

/
After that ten categories will display, then select account logon

© Edunet Foundation. All rights reserved. 355

/
In that four subcategories will display

© Edunet Foundation. All rights reserved. 356

/
Select Configure the following audit events, select Success, select Failure,

and then click Apply.

© Edunet Foundation. All rights reserved. 356

/
 Close the Audit Kerberos Authentication Service Properties dialog box, click OK.

Output/Results snippet:

On DC-CLOUD, in the Right-Click Start, then click Command Prompt.

© Edunet Foundation. All rights reserved. 357

/
References:

• [Link]/Networking/
• [Link]

© Edunet Foundation. All rights reserved. 358

/
Activity 4
Aim: Monitor and Troubleshoot Network protocol

Learning outcome: Able to configure and manage network security.

Duration: 3 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:
This is from the Frame Summary pane and is a general overview of each frame

sent on the wire.

These are the connection points involved in a domain join between a workstation and
a domain controller.
© Edunet Foundation. All rights reserved. 359

/
Expand the IPv4 header information, the attribute named Identification with a value of
3201.

Line up the conversation of two traces taken simultaneously is to compare the

Sequence and Acknowledgement numbers.

© Edunet Foundation. All rights reserved. 360

/
The last packet sequence number sent in this frame is 4167329214, and the last
packet that received from a partner in this communication is 1946363494.

© Edunet Foundation. All rights reserved. 361

/
Output/Results snippet:

By using Network Monitor, you can avoid time spent troubleshooting the wrong
component.

References:

• [Link]/Networking/
• [Link]

© Edunet Foundation. All rights reserved. 362

/
Activity 5
Aim: Configure Protocol Security

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

● RV34x Series Cisco Router

Procedure:
Step 1. Log in to the web-based utility of the router and choose VPN > IPSec Profiles

Step 2. The IPsec Profiles Table shows the existing profiles. Click Add to create a new
profile.

© Edunet Foundation. All rights reserved. 363

/
 Step 3. Create a name for the profile in the Profile Name field. The profile name
must contain only alphanumeric characters and an underscore (_) for special
characters.

Note: In this example, IPSec_VPN is used as the IPSec profile name.

Configure the Auto Settings

Step 1. In the Phase 1 Options area, choose the appropriate Diffie-Hellman (DH)
group to be used with the key in Phase 1 from the DH Group drop-down list. Diffie-
Hellman is a cryptographic key exchange protocol which is used in the connection
to exchange
pre-shared key sets. The strength of the algorithm is determined by bits. The
options are:

● Group2 - 1024 bit — Computes the key slower, but is more secure than
Group1.

© Edunet Foundation. All rights reserved. 364

/
 ● Group5 - 1536-bit — Computes the key the slowest, but is the most secure.

Note: In this example, Group2-1024 bit is chosen.

© Edunet Foundation. All rights reserved. 365

Step 2. From the Encryption drop-down list, choose the appropriate encryption method
to encrypt and decrypt Encapsulating Security Payload (ESP) and Internet Security
Association and Key Management Protocol (ISAKMP). The options are:

● 3DES — Triple Data Encryption Standard.

● AES-128 — Advanced Encryption Standard uses a 128-bit key.
● AES-192 — Advanced Encryption Standard uses a 192-bit key.
● AES-256 — Advanced Encryption Standard uses a 256-bit key.

Note: AES is the standard method of encryption over DES and 3DES for its greater
performance and security. Lengthening the AES key will increase security with a
drop-in performance. For this example, AES-256 is chosen.

Step 3. From the Authentication drop-down menu, choose an authentication method

that will determine how ESP and ISAKMP are authenticated. The options are:

● MD5 — Message Digest Algorithm has a 128-bit hash value.

● SHA-1 — Secure Hash Algorithm has a 160-bit hash value.
● SHA2-256 — Secure Hash Algorithm with a 256-bit hash value.

© Edunet Foundation. All rights reserved. 366

/
 Note: MD5 and SHA are both cryptographic hash functions. They take a piece
of data, compact it, and create a unique hexadecimal output that is typically not
reproducible. In this example, SHA2-256 is chosen.

Step 4. In the SA Lifetime field, enter a value ranging between 120 to 86400. This is the
length of time the Internet Key Exchange (IKE) Security Association (SA) will remain
active in this phase. The default value is 28800.

Note: In this example, 28801 is used.

Step 5. (Optional) Check the Enable Perfect Forward Secrecy check box to generate a
new key for IPSec traffic encryption and authentication.

Step 6. From the Protocol Selection drop-down menu in the Phase II Options area,
choose a protocol type to apply to the second phase of the negotiation. The
options are:

© Edunet Foundation. All rights reserved. 367

/
 ● ESP — If this is chosen, skip to Step 7 to choose an encryption method on
how the ESP packets will be encrypted and decrypted. A security protocol
which provides data privacy services and optional data authentication, and
anti-replay services. ESP encapsulates the data to be protected.
● AH — Authentication Header (AH) is a security protocol which provides
data authentication and optional anti-replay services. AH is embedded in
the data to be protected (a full IP datagram). Skip to Step 8 if this was
chosen.

Step 7. If ESP was chosen in Step 6, choose the appropriate encryption method to
encrypt and decrypt ESP and ISAKMP from the Encryption drop-down list. The
options are:

● 3DES — Triple Data Encryption Standard.

● AES-128 — Advanced Encryption Standard uses a 128-bit key.
● AES-192 — Advanced Encryption Standard uses a 192-bit key.
● AES-256 — Advanced Encryption Standard uses a 256-bit key.

Note: In this example, AES-256 is chosen.

Step 8. From the Authentication drop-down menu, choose an authentication method

that will determine how ESP and ISAKMP are authenticated. The options are:

● MD5 — Message Digest Algorithm has a 128-bit hash value.

● SHA-1 — Secure Hash Algorithm has a 160-bit hash value.
● SHA2-256 — Secure Hash Algorithm with a 256-bit hash value.
© Edunet Foundation. All rights reserved. 368

/
 Note: In this example, SHA2-256 is used.

Step 9. From the DH Group drop-down list, choose the appropriate Diffie-Hellman (DH)
group to be used with the key in Phase 2. The options are:

● Group2 – 1024 bit — Computes the key slower, but is more secure than
Group1.
● Group5 – 1536 bit — Computes the key the slowest, but is the most secure.

Note: In this example, Group5 – 1536 bit is chosen.

Output/Results snippet:

Note: You will be taken back to the IPSec Profiles Table and the newly-created IPSec
profile should now appear.

© Edunet Foundation. All rights reserved. 369

/
References:

• [Link]/Networking/
• [Link]
• [Link]

© Edunet Foundation. All rights reserved. 370

/
Activity 6
Aim: Plan security for Wireless Network

Learning outcome: Able to configure and manage network security.

Duration: 1 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Hathway Wifi Router

Procedure:

● Ensure that no one can easily connect to your wireless network and use
the Internet without any permission.
● Personalize access on who can configure your wireless settings.
● Protect all data that is transmitted through the wireless network

1. Open the browser enter url on Address bar, enter your router’s local IP Address

then press enter. When the login credential appears, enter your router’s Username

and Password.

© Edunet Foundation. All rights reserved. 371

/
You will now be redirected to the main screen of the status page.

© Edunet Foundation. All rights reserved. 371

/
After clicking on the Wireless Tab

You can now select Primary Network. modes which you can choose from WEP, WPA
Personal, WPA2 Personal, and WPA2/WPA Mixed Mode.

© Edunet Foundation. All rights reserved. 372

/
Output/Results snippet:

Note: Your wifi Network will appear as secured when you set password.

© Edunet Foundation. All rights reserved. 373

/
References:

23. [Link]/Networking/
24. [Link]
25. [Link]

© Edunet Foundation. All rights reserved. 374

/
Activity 7
Aim: Install and Configure Different Antivirus Software

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

● Computer with 500GB Hard Disk

● 8 GB Ram

● Windows Server 2016 / 2019

Procedure:

Browse for the antivirus software and click on any software which you feel comfort

© Edunet Foundation. All rights reserved. 375

/
 Click on free download and save the file. After that double click on that file.

Click on install, it will ask to restart the computer.

Output/Results snippet:

Note: Now the antivirus software is installed in your computer.

© Edunet Foundation. All rights reserved. 376

/
References:

26. [Link]/Networking/
27. [Link]
28. [Link]

© Edunet Foundation. All rights reserved. 377

/
Activity 8
Aim: Install and Configure Admin Console

Learning outcome: Able to configure and manage network security.

Duration: 3 hour

List of Hardware/Software requirements:

1. Personal Computer

2. Microsoft Windows 10 operating system

Code/Program/Procedure (with comments):

1. First need to Login the Admin console, enter valid credential and click on login.

© Edunet Foundation. All rights reserved. 378

/
2. Select the sage pay from the menu and then select the settings.

© Edunet Foundation. All rights reserved. 379

/
© Edunet Foundation. All rights reserved. 380

/
Output/Results snippet:

References:

29. [Link]
pay
© Edunet Foundation. All rights reserved. 381

/
Activity 9
Aim: Configure a Local Security Policies

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

1. Personal Computer with minimum 4 GB RAM & 50 GB HDD

2. Microsoft Windows 10 operating system

Code/Program/Procedure (with comments):

1. Open Control Panel.

2. The Control Panel items should be listed as "Large" or "Small icons", click on
Administrative Tools.

© Edunet Foundation. All rights reserved. 382

/
3. If the Control Panel items are displayed by "Category", click System and
Security, and then click Administrative Tools.

4. In the list of the tools find and double-click the Local Security Policy shortcut.

© Edunet Foundation. All rights reserved. 383

/
 5. Also, as a shortcut you can open Run or Command Prompt and type
[Link] and press enter.

6. You will get Local Security Policy access for further activities of configuration.

Output/Results snippet:

© Edunet Foundation. All rights reserved. 384

/
References:

30. [Link]
policy-setti ngs/how-to-configure-security-policy-settings

© Edunet Foundation. All rights reserved. 385

/
Activity 10
Aim: Configure Domain Security Policies

Learning outcome: Able to configure and manage network security.

Duration: 3 hour

List of Hardware/Software requirements:

1. Personal Computer

2. Microsoft Windows operating system

Code/Program/Procedure (with comments):

The following procedure describes how to configure a security policy setting for only a
domain controller (from the domain controller).

1. To open the domain controller security policy, in the console tree, locate
GroupPolicyObject [ComputerName] Policy, click Computer Configuration,
click Windows Settings, and then click Security Settings.
2. Alternatively, open Run and type [Link] and press enter.

© Edunet Foundation. All rights reserved. 386

/
3. Do one of the following:
● Double-click Account Policies to edit the Password Policy, Account
Lockout Policy, or Kerberos Policy.

© Edunet Foundation. All rights reserved. 387

/
● Click Local Policies to edit the Audit Policy, a User Rights
Assignment, or Security Options.

© Edunet Foundation. All rights reserved. 388

/
© Edunet Foundation. All rights reserved. 389

/
© Edunet Foundation. All rights reserved. 390

/
 4. In the details pane, double-click the security policy that you want to modify. If
this security policy has not yet been defined, select the Define these policy
settings check box.
5. Modify the security policy setting, and then click OK.

Output/Results snippet:

References:

31. [Link]
policy-setti ngs/how-to-configure-security-policy-settings

© Edunet Foundation. All rights reserved. 391

/
Activity 11
Aim: Configure RRAS Policies

Learning outcome: Able to configure and manage network security.

Duration: 2 hour

List of Hardware/Software requirements:

1. Personal Computer

2. Microsoft Windows 10 operating system

Code/Program/Procedure (with comments):

It uses policies to create and stored in Network Policy Server to finely control remote
access.

1. Configure the user accounts to use remote access policy for dial-in access.
2. Click Start > Programs > Administrative Tools > Active Directory Users and
Computers.

3. Verify that the user accounts have the Remote Access Permission (Dial-in or
VPN) option set to Control access through Remote Access Policy.
4. Open the Routing and Remote Access management console to configure the
policy, then click Start > Programs > Administrative Tools > Routing and Remote
Access.
© Edunet Foundation. All rights reserved. 392
/
5. If necessary, double-click Routing and Remote Access and the server name.
6. In the left pane, right-click Remote Access Policies, then click New Remote
Access Policy.
7. Select the appropriate policy settings as discussed above.
8. Delete the default policies.
9. Head over to Programs and Features in the Control Panel and click on Turn
Windows features on or off.

© Edunet Foundation. All rights reserved. 393

/
10. At this point, scroll down until you see the Remote Server Administration Tools
section. Under this, you'll see lots of different tools to enable.

11. From here, you can enable and disable any of the toolsets that you want or would
rather not have. Once you've done this, you can then find any of these tools by
typing a subset of the name into the Cortana search bar.

© Edunet Foundation. All rights reserved. 394

/
Output/Results snippet:

References:

• [Link]
access/ras/manage-remo te-clients/install/step-1-configure-the-remote-access-
infrastructure

• [Link]
administration-to [Link]

• [Link]

© Edunet Foundation. All rights reserved. 395

/
© Edunet Foundation. All rights reserved. 396
Learning Outcome
After achieving this learning outcome, a student will be Able to configure and
perform remote accessing & routing. In order to achieve this learning outcome, a
student has to complete the following:

1. Manage TCP/IP Routing (5 Hrs)

2. Configure Remote Access Authentication Protocol (5 Hrs)
3. Connect remote Desktop using Remote Assistance(5 Hrs)
4. Connect Remote Desktop using Telnet (3Hrs)
5. Connect Remote Desktop using HyperTerminal ( 2 Hrs)
6. Connect Remote Desktop using Team Viewer (5Hrs)

© Edunet Foundation. All rights reserved. 397

Activity 1
Aim: Manage TCP/IP Routing

Learning outcome: Able to configure and perform remote accessing & routing.

Duration: 5 hour

List of Hardware/Software requirements:

1. Personal Computer
2. Microsoft Windows Server

Code/Program/Procedure (with comments):

Instead of spending a hardware-based router from a vendor like Cisco, Windows

Server 2003 can be used as a software-based router. It supports both static routing
and dynamic routing with Open Shortest Path First (OSPF) which uses link state
routing and Routing Information Protocol (RIP V2) which uses distance vector
routing.

One of the advantages is that a hardware-based router usually has over a

Windows router is the number and types of interfaces offered. A Windows router
is narrow by its number of network cards, and other interfaces, that may be
installed. Before to use Windows Server 2003 as a router, the user must enable
Routing and Remote Access. All of the routing utilities in Windows can be
configured with the RRAS MMC snap-in.

1. Open PowerShell, type 'control panel' and press enter. Select network and
sharing center.
2. Click on change adapter settings. Right click on the Ethernet adapter
that's connected to your switch and select rename. Change its name to
LAN.
3. Now double click on the LAN adapter and select properties. Next, highlight
TCP/IPV4 and change the configuration to the one shown below. Note: Do
not enter a default gateway for the LAN. Only the WAN
© Edunet should have
Foundation. All reserved. 398
rights a
 default gateway. Make sure the LAN interface is connected to a switch.

4. Next, click on the server manager icon on the bottom left hand side of the desktop.

5. In the server manager, click on manage > add roles and features.
6. From the server list, select your server. Finally, add the server roles:
a. DHCP Server
b. DNS Server
c. Remote Access
7. Click next until you reach Remote Access role services. Place a
checkmark by DirectAccess and VPN as well as by Routing. Finish the
installation.

© Edunet Foundation. All rights reserved. 399

8. Right click on the server name and select configure and enable routing
and remote access.
9. In the setup wizard, select network address translation (NAT)

10. Open PowerShell and type firewall and press enter. Windows firewall
console will display. Click Advanced Settings.

© Edunet Foundation. All rights reserved. 400

[Link] Windows Firewall with Advanced Security, click on inbound rules.

[Link] add an inbound rule, highlight inbound rule and select new rule from the
actions pane.

© Edunet Foundation. All rights reserved. 401

[Link] new inbound rule wizard will appear. Follow these steps to add a
rule for Remote Desktop: Select a port to allow.

14. Select the protocol and port number.

15. Select the zone where the firewall will allow traffic to traverse.
© Edunet Foundation. All rights reserved. 402
 16. Give the rule a friendly name and click finish.

[Link] finishing, it's a good idea to run NMap to make sure that only the
specified ports are open.

Output/Results snippet:

References:
• [Link]
qNum=3
• [Link]
© Edunet Foundation. All rights reserved. 403
 [Link]

Activity 2
Aim: Configure Remote Access Authentication Protocol

Learning outcome: Able to configure and perform remote accessing & routing.

Duration: 5 hour

List of Hardware/Software requirements:

3. Personal Computer
4. Microsoft Windows Server

Code/Program/Procedure (with comments):

The authentication methods can be selected from the Routing and Remote Access >
Remote Access Policies folder by double-clicking a policy, then selecting to edit that
policy's settings, and finally working to the Authentication tab for the policy as shown below.

Configuring Authentication Protocols:

1. Open the RRAS MMC snap-in by selecting Start > Administrative Tools >
Routing And Remote Access.

© Edunet Foundation. All rights reserved. 404

2. Navigate to the server whose authentication support you want to change.
Choice the server and then select Action > Properties to open the server
Properties dialog box.

© Edunet Foundation. All rights reserved. 405

 3. Switch to the Security tab and make sure that Windows Authentication is
selected in the Authentication Provider drop-down.
4. Click the Authentication Methods button. When the Authentication Methods
dialog box looks, Extensible Authentication Protocol (EAP).
5. Select the two MS-CHAP checkboxes, then select the CHAP checkbox and
verify that the SPAP and PAP checkboxes are cleared.
6. Verify that Allow Remote Systems To Connect Without Authentication
checkbox is cleared and click OK.
7. When the server Properties dialog box reappears, click OK.
8. When asked if you want to view the help files associated with configuring
authentication protocols click No to finish this activity.

Output/Results snippet:

References:

• [Link]
[Link]
Activity 3
Aim: Connect remote Desktop using RemoteAssistance.
Learning outcome: Able to configure and perform remote accessing

& routing. Duration: 5 hour

List of Hardware/Software requirements:

1. Any kind of Laptop / Desktop with internet connection

2. Windows 8 OS

Code/Program/Procedure (with comments):

1 - On the Computer That the user Wants To CONNECT TO Open the
Windows 8 System folder. In Windows 8, swipe in from the right edge of the
screen. Tap Search.

Image: Desktop

2. Type remote in the Search Text Box field.

3. Click Settings, located on the right.

4. Click Allow Remote Access to your computer, located on the left

Image: Settings

5. Enter the system Admin Password or confirm your Choice, if requested.

6. Select the checkbox - Allow users to connect remotely to this computer,

located in the lower section.
7. Uncheck the checkbox option, allow connection only from computers
running Remote Desktop with Network Level Authentication
(recommended).
8. Click the Select Users button of the window. (FWindow Remote Assistance)
9. Add your PAWS ID and any other users that need access to remotely connect
to your computer using Remote Desktop.

10. Click the OK button to save your changes that have added all necessary
Remote Desktop Users.

Output/Results snippet:

The connection will now be established. According to the Quick Assist dialog, it
may take a few minutes before the devices connect, so you may have to be
patient.
References:
• [Link]
[Link]

Activity 4
Aim: Connect Remote Desktop using Telnet

Learning outcome: Able to configure and perform remote accessing

& routing. Duration: 3 hour

List of Hardware/Software requirements:

1. Any kind of Laptop / Desktop with internet connection

2. Windows 8 OS

Code/Program/Procedure (with comments):

Step 1: Press Windows- X and select the search from the context menu and
enter the control panel in the search field.
Step 2: Click the Programs and features and then click Turn Windows

Features On or Off. Step 3: Select the Telnet Client checkbox and then click

OK to install telnet to Windows 8.

 It may take some time to install telnet.

Step 4: Enter cmd in the search field and click Command Prompt from the context

menu. Step 5: Type the command- telnet [IP Address or host name] [port-number]

Determine the IP
Address or hostname of the server and the TCP port number required to establish a
connection and press enter.

Step 6: Type the username and password, if applicable, to log in to the computer.

Output/Results snippet:

The connection will now be established. The telnet screen appears as follows:

References:

• [Link]
• [Link]
ceId=1
Activity 5
Aim: Connect Remote Desktop using HyperTerminal

Learning outcome: Able to configure and perform remote accessing &

routing. Duration: 2 hour

List of Hardware/Software requirements:

1. Any kind of Laptop / Desktop with internet connection

2. Windows XP OS

Code/Program/Procedure (with comments):

Step 1: Open HyperTerminal by clicking the Windows Start button, clicking "All Programs,"
clicking "Accessories," clicking "Communications" and clicking "HyperTerminal."

Step 2: Create a connection by clicking the "File" menu, selecting "New Connection" and
entering your connection information. Open an existing connection by clicking the File menu
and selecting "Open."

Step 3: Connect to the remote computer by clicking the "Call" icon. Alternatively, wait for
the remote computer to call you by clicking the Call menu and selecting the "Wait for a Call"
option.

Step 4: Send a file to the remote computer by clicking the Transfer menu and selecting the
"Send File..." option. This opens the Send File window. Click the "Browse..." button to select
a file, choose a transfer protocol and click the "Send" button.

Step 5: Click the "Transfer" menu and select the "Receive File..." option to receive a file
from the remote computer. Click the "Browse..." button and select a location to which you
want to save the file. Select the same receiving protocol that the remote computer is using
to send the file and click the "Receive" button.

References:

• [Link]
• [Link]
Modem-Connections---Connecting-to-a-Remote-System---Performing-File-
[Link]
Activity 6
Aim: Connect Remote Desktop using Teamviewer

Learning outcome: Able to configure and perform remote accessing & routing.

Duration: 5 hour

List of Hardware/Software requirements:

1. Any kind of Laptop/ Desktop with internet connection
2. Windows 8 OS
3. Teamviewer Software

Code/Program/Procedure (with comments):

Step 1 First, install the team viewer software. Just open this team viewer page. Select
Download Now button. It will automatically download the software for the particular user
OS.

Step 2 After downloaded, install it and click on the run which appears as a pop-up window to
start the setup program.
Step 3 The setup window will open and select the necessary option and click the Accept-
finish button.

Image: Accept to Finish Setup

Step 4 Finally installing is done and Wait for the setup to finish downloading the files on your
C: drive. Then, TeamViewer will automatically generate a random ID and password to be used to
connect to other computers.
 Image:Connect to other Computer

Step 5 It will take some time to connect and the screen blurs. After the while, the user can
be able to see your panner screen, and the user can make changes to it as well.
 Step 6 Share a file remotely by using a team viewer. Just tick on “file transfer” instead of
“remote control” and then connect to the partner by using his/her ID and Password. Just
drag the files which are to be referred.

Step 7 And can have a conversation with the partner by using the simple chat box at the
bottom of the right side. Once connected to the partner, the user can use chat
effectively.

Step 8 And even allowed to adjust the visuals of the screen by heading over to the “view” which is at
the top of the screen

Step 9 And the user may feel better to add some recorded videos of that team viewer
session and it provides it too.
Output/Results snippet:

References:

• [Link]
teamviewer/
• [Link]