|
|
|
|
|
|
DNS Training Description:
Reliable, robust and secure operation of the DNS hierarchy - from the root servers to an individual domain name server - is critical to all Internet operations. With the advent of IPv6, whose address format is extremely user-hostile, it is imperative that names be used rather than physical addresses. DNS and DHCP are the vehicles by which this goal will be achieved. The course covers the configuration and operation of DNS systems used for IPv6 and IPv6 based mobile applications with particular emphasis on DHCPv6 integration. While the primary focus of the course is BIND other DNS software will be discussed.
Students will review the theory behind the DNS hierarchy, the DNS protocol, forward and reverse mapping zone files. The course covers IPv6 forward mapping (AAAA RR) and reverse mapping using the PTR RRs. While the current IETF recommendation uses AAAA and PTR - the experimental A6 and DNAME RRs will be covered since they contain important principles. Dynamic DNS (DDNS), secure integration with DHCPv6, diagnostic tools and security models are also covered. The course includes a number of hands-on configuration exercises.
The primary focus of the course is BIND which is available on Linux, UNIX and Windows platforms. The course is offered with Linux (Fedora Core), FreeBSD or Windows 2003 as the platform for all exercises.
DNS Training Audience:
The course is designed for DNS administrators, Network and System Administrators, Mobile system administrators and those who need a thorough understanding of the DNS when used for IPv6. Students should either have attended the Basic DNS course or have two years of DNS operational experience.
DNS Training Course duration:
1 day
DNS Training Course outline:
Module 1: DNS Refresher
- The DNS hierarchy (name servers and resolvers)
- Authoritative and cached responses
- Delegation - Parent and child domains
- Forward and Reverse mapping
- DDNS, AXFR, IXFR, NOTIFY
- Zone files - best practice
- DNS types
- Diagnostic Tools - DIG, NSLOOKUP
- DNS software - options and overview
Module 2: DNS Security Basics
- Security overview
- Security threat analysis
- DNS security scope (Zone transfer, DDNS, Zone integrity)
- Stealth configurations
- Administrative security (jails, permissions, server configurations)
- BIND Logs
- BIND's server clause
- Cache Poisoning 101
- RNDC - advanced configuration
- Mail Anti-SPAM (SPF, DKIM)
- Software diversity
Module 3: IPv6 and DNS
- IPv6 hierarchical Address Structure
- IPv6 Address Notation
- IPv6 Forward mapping (AAAA/A6 RR)
- IPv6 Reverse Mapping (PTR/DNAME RRs)
- Exercise
Module 4: IPv6 and Mobile Telephony
- The mobile environment
- mobile and IPv6 (3GPP)
- Status and plans
- DNS (and DHCP) implications
Module 5: DHCPv6 and Forward Mapping
- The DHCP protocol
- IPv6 node initialisation
- Auto-updating DNS from DHCP - strategic choices
- Securing the auto-update process - TSIG/SIG(0)
- Exercise
Module 6: DHCPv6 and Reverse Mapping
- IPv6 Reverse Mapping
- Secure Auto-updating DNS from DHCPv6 - configurations
- Exercise
Module 7: Summary
|
|
|
|
|
