Homework 8

powered by FreeFind

Modified: 

Routing/Domain Name Service/Network Monitoring/Address Resolution Protocol


Overview

The TCP/IP Administration consists of three related exercises, it will take less time overall if you can complete them as a unit.

There are several topics covered in the assignment. Static routing will be examined in the context of using a W2K server to route IP packets between two IP networks. Domain name service (DNS) will be implemented for the hosts on the two IP networks. Network monitoring of traffic will be performed using the Network Monitor. Address Resolution Protocol used to translate an IP address into a NIC address on a LAN will be examined using the monitor results.

Equipment/Supplies/Time

Routing

The general idea is to connect independent IP subnetworks into a single network. The connection point is a router. We will use static routing to construct a routing table by hand on the router (W2K server) that instructs the router where to send IP packets. Note that a router normally has two NICs in order to connect two IP subnets.

The following diagram illustrates how the IP subnets 149.160.24.xxx and 149.160.25.xxx can be joined by an IP router. The router has two NICs, one with IP 149.160.24.1 and 149.160.25.1 on the appropriate nets. The IP client NICs have been assigned the IP numbers of 149.160.24.2 and 149.160.25.2.

For IP routing, both the client and router need information about the network. The clients need to know the gateway router to send off net packets. The router needs to know where to send packets, for example that a packet arriving on NIC 149.160.24.1 for net 149.160.25.xxx should be routed through NIC 149.160.25.1. Note that this is an obvious routing example, where both the router and destination client are on 149.160.25.xxx. A more realistic example is at right where several routers must be crossed to reach a host. The A router must know that a packet arriving for new 149.160.26.xxx (it could only arrive on NIC 149.160.24.1) must be forwarded on NIC 149.160.25.2 to reach 149.160.26.2 host. Router B must also know that a packet for 149.160.26.xxx must be sent through NIC 149.160.26.1.

The assignment is to construct two networks and join them through a router. The networks are simple, a single client directly connected to your server using a cable with the wires crossed (similar to a null modem) to eliminate the need for multiple hubs. The server will be configured for routing IP packets, the clients must be configured to send packets to the router gateway.

Routing Instructions

The following provide certain details, though not all instructions, needed to construct two IP subnets and install the router. The first step is to configure the server NICs with static IP numbers and the Router services.

Server NIC

  1. On server machine:
  2. Login on the server as Administrator.
  3. Open Settings | Network and Dialup Connections and click on either connection icon as in the figure: 
  4. Select Properties | TCP/IP from list as at right | Properties button: 
  5. Change the properties for the NIC to the IP numbers you wish to use. The figure at right is host IP address 149.160.29.3 and uses itself as the Domain Name Server. The subnet mask should match that used by other hosts on the network. 
  6. Click back through the OK buttons for the changes to take effect.
  7. Do the same for the other NIC but use a different IP address, the DNS server can be the same.

Server Routing

  1. Open Programs | Administrative Tools | Routing and Remote Access
  2. Router Configuration - By default the server has IP routing should be enabled, you must define the route that packets must take to be delivered to another IP network.

Client NIC - The two client machines adjacent to the server must have static IPs installed and instructed where to send off net packets as was done for the server.

  1. On each client machine:
  2. Login to the client machine by its name, not using ADS.
  3. IP - Follow the instructions for the Server NIC but use an IP number in the network given in the Destination for the Routing and Remote Access. You will need to assign the default gateway.

Router Testing - The following is the basic test of an IP network, determining whether a path exists from one point to another using ping. The examples are using the IPs from the simple network diagram above, you'll need to use your network IPs.

Finish - If you are done for the day, restore the cabling and TCP/IP configuration back by:

  1. Reconnect NIC of the two machines to IUS LAN. Server connects via the built in NIC.
  2. TCP/IP - Follow the instructions for the Server NIC setting to automatic configuration.
  3. Put the crossed wires back in the B438 cabinet or leave attached.

Domain Name Service

The general idea of DNS is that it is easier to remember names than IP addresses and it is simpler to have name administration done centrally than each host maintain its own name database. DNS is a service that translates the name into an IP that is used for routing, etc. over the network. The names are used as indexes in a database of IP numbers. Hosts needing DNS must know the IP of the machine with the DNS database, usually the DNS machine is part of a heirarchy of name servers. For example, DNS requests for ius.indiana.edu would be forwarded to the DNS machine for edu which would forward to indiana.edu which would forward to the ius.indiana.edu DNS machine. Our test network is not connected to a DNS heirarchy so only those names defined by us will be translated into IP addresses.

DNS Instructions

DNS Server Instructions

Testing - With the W2K Server running routing and DNS, and the clients using the server as a gateway and DNS server, you should be able to test using either raw IP or names.

  1. 7) Print - At the Command prompt:
  2. 8) Print - If the pings worked, try the browser on either host to reach the W2K server page test.htm using the server name.

Network Monitoring and Address Resolution Protocol

The general idea of a packet monitor is to selectively examine traffic on a network. W2K Server comes with a Network Monitor package that monitors the traffic to and from the server, much more powerful monitors are commerically available that monitor all traffic on a network. The network monitor can selectively monitor traffic for selected NIC address numbers, protocols (IP, IPX, etc.),  computer names, etc. combined using Boolean operators. The philosphy of Network Monitor is to capture traffic and then view the captured data.

The exercise is intended to provide some experience with traffic monitoring and specifically to examine Address Resolution Protocol (ARP). ARP is used by LAN stations to translate the destination IP number into the NIC number. The figure at right lists the ARP table generated when a ping of an IP address is made on a LAN. Since LAN traffic uses only NIC numbers for addressing with the IP packet carried in the frame data load, ARP is needed for IP address resolution to an NIC address before two LAN connected machines can communicate using the higher level IP protocol numbers of the ping command. The command arp -a  lists the current table of IP to NIC addresses. Using the Network Monitor the ARP interaction can be fully examined.

Network Monitor Instructions

Configuration

Monitoring - With the W2K Server running routing and DNS, and the clients using the server as a gateway and DNS server, you should be able to test using either raw IP or names. To monitor traffic some traffic will need to be generated. You'll notice that the server generates some traffic by broadcasting service advertising packets, you will generate traffic using TCP/IP applications such as ping and a Web browser.

    Server

    1. At a Command Prompt, generate ping and ARP traffic by pinging each client host.
    2. 9) Print - List the ARP table by:
    3. At a Command prompt clear the ARP table.
    4. Start Network Monitor - Programs | Administrative Tools | Network Monitor
    5. At the server Command prompt, ping the client IP address on the NIC being monitored to generate ARP traffic.
    6. View the captured data - Capture | Stop and View

Client - The client browser will be used to access the router Web server. This will generate communication of an ARP, DNS, TCP, and HTTP protocol interchange between the client and the server so that each protocol frame or packet can be examined in detail.

  1. Client - Verify that a client browser can access the test.htm page on the server using the server DNS entry (e.g. http://www.wisman.com/test.htm).
  2. Client - Restart the client machine to force it to forget the ARP and DNS lookup since we want to monitor the process.
  3. Server - Start the Network Monitor and capture from the router NIC address connected to the client machine.
  4. Client - Access the test.htm page on the server.
  5. Server - Capture | Stop and View | Window | uncheck HEX | Window | Check HEX

Performance Monitoring

W2K provides a tool for monitoring a rich set of factors affecting network performance. These include CPU, Web services, raw network byte count and many others. The following explores the use of the performance monitor tool of the Network Monitor to determine the approximate maximum number of bits that can be sent over the network between two machines.

Programs - Two programs are used to exercise the network: PERFserver and PERFclient. The server receives and displays bytes to the screen, the client sends bytes to the server over the network as TCP segments. The client has three parameters:

  1. IP - the IP number of the PERFserver.
  2. bytes - the number of data bytes to send in each TCP segment. Range is 0 to 231.
  3. packets - the number of packets (well really segments) to send. Range is 0 to 231.

The server has one parameter: the number of bytes to allocate for the receive buffer. Generally the larger the faster it can process bytes received.

Performance - Performance is affected by many variables. In this exercise only a few variables can be controlled: the client and server parameters, whether the server displays received bytes to the screen or writes to a file (which is faster), and whether one client and or two clients are transmitting. As discussed in the text, utilization of a resource is higher for larger data transmissions so one would expect the maximum to be reached when the number of bytes transmitted at one time was large.

Monitoring - A counter monitors some performance factor such as the network card total byte count. Several counters can be defined to monitor and display in graph form several factors simultaneously. The following details running the Performance Monitor and placing a load on the network using the client and server programs.

  1. Download to your server and both connected hosts the PERFserver and PERFclient programs. You'll need to run on both machines.
  2. In the Network Monitor click Tools | Performance Monitor
  3. Right click in right window | click on Add Counters
  4. Select Performance Object: Network Interface. See figure at right.
  5. Select Bytes Total/sec and click Add button. Do the same for Bytes Sent/sec and Bytes Received/sec.
  6. Select Performance Object: Processor.
  7. Select %Processor Time and click Add button.
  8. Close.
  9. The display should be updated each second. The figure at right is a graph of a network under load. 
  10. Load the network with data.
    1. Determine the IP of the machines using ipconfig /all.
    2. On one host machine run the Command prompt run the PERFserver program using defaults by:
      1. PERFserver

    3. On the other host machine run the PERFclient using defaults by:
      1. PERFclient <IP of PERFserver>

    4. The graph should display similarly to that at right and give the maximum number of bytes for a counter. You can click on each counter to read the performance measures.
  11. 12) Print - Determining maximum bits transferred. Try to increase the load on the network and processor to determine the maximum under different loads by the following:
    1. Run both PERFserver and PERFclient simultaneously on each machine with PERFserver output to the screen.
    2. Redirect the PERFserver output to a file instead of the display by:
      1. PERFserver > x

    3. Send a larger number of bytes from the client to the server. To send 50 segments of 10000 bytes in each segment to 149.160.29.92:
      1. PERFclient 140.160.29.92 10000 50

Turn In


Document last modified: