70-412 Chapter 12: Deploying And Managing Ipam

Front 1

cmdlet sets the IP Address Management (IPAM) server configuration, including the TCP port over which the computer running the IPAM Remote Server Administration Tools (RSAT) client connects and communicates with the computer running the IPAM server.

Back 1

Set-IpamConfiguration

Front 2

cmdlet imports IP address range objects from the specified comma-separated values (.csv) file
into the computer running the IP Address Management (IPAM) server. The computer running the IPAM server does not

Back 2

Import-IpamRange

Front 3

cmdlet imports one or more IP address objects from the specified comma-separated values (.csv) file into the computer running the IP Address Management (IPAM) server. Any objects that fail being imported during the operation are logged in the appropriate error log file for further analysis.

Back 3

Import-IpamAddress

Front 4

cmdlet gets the IP Address Management (IPAM) custom field information.

Back 4

Get-IpamCustomField

Front 5

cmdlet gets the configuration for the computer running the IP Address Management (IPAM) server, including the software version number and the TCP port number over which the computer running the IPAM Remote Server Administration Tools (RSAT) client connects and communicates with the computer running the IPAM
server.

Back 5

Get-IpamConfiguration

Front 6

cmdlet exports all of the IP address ranges of the specified address family from the computer running the IP Address Management (IPAM) server as a comma-separated values (.csv) file or as an array of Windows
PowerShell® objects or both.

Back 6

Export-IpamRange

Front 7

cmdlet exports all of the IP addresses of the specified address family from the computer
running the IP Address Management (IPAM) server as a comma-separated value (.csv) file or as an array of Windows
PowerShell® objects or both.

Back 7

Export-IpamAddress

Front 8

cmdlet adds a new custom value to the specified multi-valued custom field name in IP Address Management (IPAM). The multi-valued custom field can either be built-in or user-defined.

Back 8

Add-IpamCustomValue

Front 9

cmdlet adds a new custom field name to the computer running the IP Address Management
(IPAM) server. The user can indicate if the newly added custom field is free form or multi-valued.

Back 9

Add-IpamCustomField

Front 10

cmdlet creates and links three group policies specified in the Domain parameter for provisioning required access settings on the server roles managed by the computer running the IP Address Management (IPAM) server.

Back 10

Invoke-IpamGpoProvisioning

Front 11

What is IP Address Management?

Back 11

keeps track of address leases, static assignments in the busy day to day operation, who leased a particular IP address, deals with things such as potential legal issues, governmental, regulatory industry compliance, able to manage aspects of the DHCP console, and monitor DNS.

Front 12

IPAM gives us excellent Administration over our IP infrastructure, that broken down into 4 focus areas:

Back 12

#1.Planning
#2.Managing
#3.Tracking
#.4 Auditing

Front 13

IPAM Planning-this deals with ?

Back 13

• “How do we design and plan our IP address address ranges,
• how do we plan, design, and implement our DHCP scopes
• How can we build our scopes, and build our IP Addresses,
• How can we build our subnets to support maximum growth, at the same time, be intuitive to understand, intuitive to track.

Front 14

IPAM Managing-this deals with?

Back 14

• Ex: We get a fleet of laser printers and we need to deploy them throughout our Enterprise; How can we quickly and easily create DHCP reservations or address exclusions for these devices
• How do we know by picking a particular IP address out of one of our scopes, that it’s not already in use;

Front 15

IPAM Tracking/Auditing-this deals with?

Back 15

deals with things such as potential legal issues, governmental, regulatory industry compliance, schemes that require us to document the use of our IP address space and be able to pull those records up to year a more from the past.

Front 16

Why is The NPS Server is part of the IPAM scheme?

Back 16

because we can devote blocks of IP address for use by our remote access server, and we also want to be able track these as well

Front 17

How does IPAM work?

Back 17

#1. DNS, DHCP, Domain Controllers, and NPS servers, may be spread among multiple sites
#2. We use IPAM to gather data from all of these , to a central front end (IPAM management console) & inturn IPAM uses the WID to actually store and structure the data.

Front 18

What are IPAM's Deployment' Limitations?

Back 18

#1.There is no central reporting with IPAM; Every IPAM server is an island unto itself and can’t communicate with other servers
#2.IPAM server can’t be on a DC, bust must be a domain member
#3.Each IPAM server writes to its own WID
#4. Shouldn't be installed on a Infrastructure Server, use to remotely manage only.
#5. IP Address Reclamation: gathering, scavenging…etc; is limited to IPv4 &IPAM only discovers and tracks Microsoft network elements
#6. Can't manage stand-alone servers or servers in a different forest.

Front 19

this is useful to see at a glance how many IPs we might have left in a given DHCP scope.

Back 19

IP Utilization Trends and Reclamation Support (Advanced Data Gathering)

Front 20

What are the stats of an IPAM server?

Back 20

#1.*-A single IPAM server can track up to:
-*150 DHCP Servers
-*500 DNS Server
#2. *-IPAM store 3 years of forensics data for up to 100,000 user, consisting of:
-*IP address leases
-*Mac Addresses
-*User Logon/Logoffs

Front 21

What sub-administrative groups does IPAM create in your AD database?

Back 21

Multi-Server-Management (MSM)
#1.IPAM MSM Administrators-
#2.IPAM Audit Administrators,
#3.IPAM ASM Administrators
#4.IPAM Administrators.
#5.PAM Users

Front 22

What server will be affected from a client perspective, which “Infrastructure Servers” will be clients of a particular IPAM server and this is configured through GPOS

Back 22

Provisioning the server scope

Front 23

refer to what we have in terms of full on IPv4/6 address pools

Back 23

Blocks

Front 24

are subsets of those pools, that are typically going to be deployed as DHCP scopes; We have the ability to report on utilization, trends, etc.

Back 24

Ranges

Front 25

What steps do we take to deploy the IPAM server?

Back 25

#1. Connect to IPAM Server
#2. Provision the IPAM server
#3. Configure Server Discovery
#4. Start server discovery
#5. Select or add servers to manage and verify IPAM access
#6.Retrieve data from managed servers

Front 26

Explain each step in deploying the IPAM servrer?

Back 26

#1. First we need to install the IPAM feature and select the appropriate server (spademem01
#2. (Provision the IPAM Server)-here we will manage the scope of our servers running the DHCP, DNS, NPS, and DC roles
#3. Configuring Automated IPAM discovery; select the domain to discover
#4. Start Server Discovery” to run the discovery job manually
#5. Select or add servers to manage and verify IPAM Access”, Set Manageability Status, run the powershell cmdlet Invoke-IpamGpoProvisioning
#6. Retrieve Data from managed servers

Front 27

allows us to create Range Groups, which will show all our scopes on our DHCP server, and show us the utilization statistics for all of them

Back 27

IP Address Range Groups node

Front 28

This node is important if we are having connectivity problems

Back 28

Server Inventory node

Front 29

which shows us how many addresses are being utilized, Assigned Address: which are part of the range, but not handed out yet

Back 29

allows us to look at Event IDs that are pertinent for particular IP addresses

Front 30

we can monitor the status of a zone, and at a glance, we can tell whether it’s online or offline

Back 30

DNS Zone Monitoring node

Front 31

If we were interested in 192.168.2.50, and we’ll say “Who owns this address since ##/##/### to etc, what would we use in IPAM?

Back 31

IP Address Tracking
By client id, host name, or user name

Front 32

How do we configure a reservation for a particular client or printer in IPAM?

Back 32

right click the Block > “Find and Allocate Availabe IP Addresses>specify the mac address and specify the assignment type...etc

Front 33

the process where IPAM server checks with AD to locate DCs, DNS, and DHCP servers.

Back 33

Server Discovery

Front 34

What 3 Group Policy objects are created when run the PowerShell cmdlet "Invoke-IPamGpoProvisioning"

Back 34

#1.IPAM_DC_NPS
#2.IPAM_DHCP
#3.IPAM_DNS

Front 35

What is the benefit of having an IPAM server?

Back 35

#1.Enables us manage all the IP addresses in our organization
#2.Detects overlapped IP address ranges, determine IP address utilization, and what IP addresses are free
#3. Can Create DHCP scopes, reservations, and create DNS reocrds based on IP address lease info.

Front 36

IPAM seperates the IP address space into blocks, ranges, and individual addresses. What is a IP address block?

Back 36

a large collection of IP addresses that you use to organize the address space used in your organization at the highest level. An IP address "range" is part of an IP address block and can't map to multiple IP address blocks. Ex: Start IP Address: 172.16.0.0 End IP Address: 172.31.255.255

Front 37

users have the rights to perform common IPAM management task such as managing server inventory, and have read only access to the IP address space, and are unable to view or perform IP address tracking tasks.

Back 37

IPAM MSM Administrators

Front 38

Members of this group are able to view IPAM server information such as address space and operational server information, but they are unable to view IP address tracking information

Back 38

IPAM Users

Front 39

these users are able to perform all tasks that can be performed by members of the IPAM users group, but they can also manage the IP address space, but can't perform monitoring tasks and are unable to perform IP address tracking tasks.

Back 39

IPAM ASM (Address Space Management) Administrators

Front 40

Members of this group are able to manage server inventory and perform common management tasks, but they have read-only access to the IP address space and IP address tracking information

Back 40

IPAM IP Audit Administrators

Front 41

Members of this group are able to perform all task on the IPAM server, including viewing IP address tracking information

Back 41

IPAM Administrators