You are here:
Advanced Linux Network Administration
Advanced Linux Network Administration provides strong practical instruction coupled with hands-on labs, covering the use of Linux in the typical enterprise environment. This course includes topics such as Samba (Windows file and print sharing), Email, Web serving with Apache, remote access, networking setup, Internet proxy services, firewalling and security administration, installation as well as the day-to-day administration of a Linux system in place of Windows servers.
 
Who Should Attend
System administrators and network support personnel who run or plan to run Linux in a heterogeneous environment, especially in conjunction with Windows-based servers.
 
Prerequisites
Students should have a basic background in systems administration concepts.
 
Benefits of Attending this Class

Upon completion of this course, students should be able to:

Students gain extensive real-world knowledge through the use of practical exercises during this Linux course. Students will leave the course with a hands-on understanding of how to configure and run a Linux server in an enterprise environment. Students will also learn how to make Linux interact with versions of Windows and other *nix servers.
 
Course Contents

Basic networking review

  • Configuration
  • Single and multiple interfaces
  • Subnetting re-visited
  • Configure TCP/IP logging
  • arpwatch
  • /etc/sysconfig/network and network-scripts

Advanced Network Configuration and Troubleshooting

  • aliases
  • Testing
  • route,ifconfig, netstat, ping, arp, arpwatch
  • tcpdump, ethereal, etherape, ntop
  • nc, nmap

Configuring a Samba/SMB file server

  • Samba basics
  • Definitions – Domains, master browsers, WINs
  • Replacing Windows PDCs
  • Installation
  • Configuration tools
  • SWAT
  • File sharing and Security
  • Printer sharing

Configuring and Managing a Mail Server (Sendmail or Exim)

  • Managing Sendmail or Exim
  • Email aliases
  • Mail quotas
  • Virtual mail domains
  • Configuring internal mail relays
  • Monitoring SMTP servers
  • /etc/aliases
  • exim.conf or sendmail.cf

Basic BIND 8/9 configuration

  • Configure BIND as a caching-only DNS server
  • Configuring BIND logging
  • Configuring BIND options
  • Directories and files
  • /named.conf
  • ndc
  • Sleuth/dnslint

Managing DNS

  • Managing the directory tree
  • Managing the files
  • Running in a chrooted environments
  • dnskeygen
  • Types of records
  • Loading changes

Implementing a web server

  • Installation
  • Modules
  • Apachetoolbox
  • Restricting client user access
  • Using PHP
  • Using MySQL/PostgreSQL/Oracle
  • Setting up client user authentication
  • Configuring Apache server options
  • The configuration file
  • Virtual Hosts
  • SSL
  • Log files and analysis

Implementing a proxy server

  • Squid vs. Apache
  • Configuration
  • Log files
  • Analysis
  • Implementing access policies
  • Setting up authentication
  • Utilizing memory usage
  • squid.conf
  • acl

DHCP configuration

  • What is DHCP?
  • Static hosts
  • Dynamic hosts
  • dhcpd.conf
  • dhcpd.leases

LDAP configuration

  • Configuring an LDAP server
  • LDIF files
  • User configuration
  • slapd and slapd.conf

Configuring a Firewall

  • IP tables/netfilter
  • Packet filtering rules
  • Network address translation (NAT)
  • Configuration tools
  • Testing tools

Secure shell (OpenSSH)

  • What is SSH
  • sshd
  • Generating keys
  • Sharing keys/trusts
  • Port forwarding
  • X forwarding

TCP wrappers

  • Security need for TCP wrappers
  • tcpd
  • /etc/inetd.conf
  • /etc/hosts.allow and /etc/hosts.deny
  • xinetd

Daily Security Administration

  • Getting security alerts
  • Open mail relays
  • IDS/LIDS/ HIDS
  • Port scanning
  • Vulnerability Testing

Troubleshooting network issues

  • Errors in /etc/network and /etc/sysconfig/network-scripts/
  • System log files
  • Troubleshooting configuration files
  • tcpdump
  • arpwatch