I > M hnh mng LAN Workgroup 1 M hnh mng LAN Workgroup

2 Gii thiu tng qut Mng LAN (Local Area Network) hay cn gi l mng ngang hng (Peer To Peer), l mt nhm (Workgroup) cc my tnh ni mng vi nhau, chia s v s dng chung cc ti nguyn. Hin nay, m hnh mng LAN c trin khai rt ph bin trong cc c quan, trng hcvi quy m nh (20-30 my). y l m hnh mng c bn, n gin v d cu hnh nht. Yu cu s dng ch l chia s d liu, my in, v truy cp internet. (Nh cc bn b sung tip vo nh) 3 Nhng u, nhc im ca m hnh * u im Chi ph thp: Ch cn 2 my tnh c kt ni chung vi nhau qua card mng l c th tr thnh mt Workgroup. D cu hnh: Chc nng cu hnh mng c tch hp sn trong h iu hnh windows D qun l: V y l m hnh dng ngang hng nn khng c s qun l ca bt k my tnh no trong mng. Tc cao: Cc my ni chung vi nhau qua mng ni b nn tc rt cao. * Nhc im D liu phn tn: D liu chia s trong mng LAN c lu tr cc b trn mi my tnh trong mng nn nu 1 my no khng bt th cc my khc khng th truy sut n cc file chia s trn my c. an ton v tnh bo mt khng cao: Vic bo mt v an ton mng ngang hng th hin qua vic nh r mt m cho mt ti nguyn no , chng hn nh mt th mc dng chung trn mng. V tt c ngi dng trong mng ngang hng t mnh thit lp h thng mt m ring, v vic chia s ti nguyn c th xy ra bt c my no ch khng xy ra my tp trung, nn rt kh iu khin tp trung. Hn na, vic xut hin cc loi virus ly lan qua mng ht sc nguy him, nu 1 my nhim c th ly lan ra ton mng, do s nh hng rt nhiu n vic bo tr h thng. Khng c cng tc qun tr v kim sot ngi dng cng nh qun l cc my tnh trong mng. 4 Cu hnh chi tit * Cc bc trin khai - Cu hnh modem ADSL Zyxel - Kim tra kt ni Internet - i tn my tnh - Thit lp workgroup

- Chia s d liu gia cc my trong cng nhm - Ci t v chia s my in II> M hnh mng LAN - File Server 1 M hnh mng LAN - File Server

2 Gii thiu tng qut M hnh ny m rng hn m hnh mng LAN Workgroup. D liu s c lu tr tp trung trn server, in n cng c phn quyn v t ch u tin nhm tng cng tnh bo mt v an ton d liu. M hnh mng ny ph hp vi cc c quan, t chc vi quy m va v nh c kh nng ti chnh tng i thp. 3 Nhng u, nhc im * u im Qun l tp trung: d liu c lu tr tp trung trn server, cc ti khon truy cp ti th mc chia s cng c server qun l. Tng cng tnh bo mt v an ton d liu trong mng ni b. Tc truyn ti d liu cao. * Nhc im Chi ph tng cao hn do u t vo h thng my ch. Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng. Kh nng m rng km: khi s lng ti khon v s lng my tnh ln s gy kh khn trong qun l. Kh nng ngn chn tn cng t internet km do cha c h thng firewall chuyn bit. 4 Cu hnh chi tit * Cc bc trin khai - Thit lp a ch IP - Kim tra kt ni Internet - Cu hnh thit b lu tr trn Server (Cu hnh RAID) - To nhm ngi dng - To cc ti khon ngi dng truy cp file chia s trn Server - To cc th mc chia s v phn quyn truy cp - Kim tra truy sut t cc my Client - Thit lp Map mng - Ci t v phn quyn chia s my in trn Server - Kim tra thng tin thuc tnh trn my in

III> M hnh mng Domain 1 M hnh mng Domain

2 Gii thiu tng qut Pht trin t m hnh mng LAN File server nhng xy dng m hnh mng qun l theo min (Domain controller - Active Directory) vi nhng yu cu cao hn v thit lp cc chnh sch bo mt, cc chnh sch phn quyn, qun l ti khon ngi dng, qun l my tnh. Thm vo l dch v phn gii tn min (DNS) v dch v cp pht IP ng (DHCP). 3 Nhng u, nhc im * u im Qun l tp trung: d liu c lu tr tp trung trn server. Tng cng tnh bo mt v an ton d liu trong mng ni b. Tc truyn ti d liu nhanh C kh nng m rng h thng mng Qun l, gim st cc ti khon ngi dng, cc my tnh cng nh thit lp cc chnh sch i vi cc nhm ngi dng v my tnh. * Nhc im Chi ph tng cao do u t vo h thng my ch. Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng. Kh nng ngn chn tn cng t internet km do cha c h thng firewall chuyn bit. 4 Cu hnh chi tit * Cc bc trin khai: - Thit lp a ch IP - Nng cp my ch ln Domain Controller - To cc n v t chc (OU) - To cc nhm ngi dng (Group) - To ti khon ngi dng - Cu hnh dch v DNS - Cu hnh dch v DHCP - Gia nhp my trm vo min - Thit lp cc chnh sch

IV. M hnh mng c nhiu di a ch.

1. M hnh mng

2. Gii thiu tng qut Xut pht t m hnh mng Domain, m hnh mng ny m rng hn bng vic dng ngay my ch Domain Controller ci t thm dch v Routing and Remote Access chia di a ch, nhm mc ch phn vng a ch - tc l khng cho php cc vng a ch lin h c vi nhau nhng vn c th s dng c mng Internet v chu s qun l ca my ch. 3. Nhng u, nhc im * u im Ngoi nhng u im t m hnh mng Domain Controller, m hnh mng ny c nhng u im khc nh: Phn vng a ch. Cch ly truy cp gia cc di mng. Tng cng tnh bo mt v an ton. * Nhc im Ngoi nhng nhc im xut pht t m hnh mng Domain Controller m hnh ny c mt s nhc im nh: Yu cu my ch phi c cu hnh cao chy nhiu dch v cng mt lc. Tc truy cp Internet b chm hn cht. 4. Cc bc thc trin khai: - Cu hnh DHCP -Cu hnh DNS - Ci t dch v Routing and remote Access - Cu hnh NAT - Cu hnh DHCP Relay Agent - Cu hnh Outbound filter - Kim tra kt ni t cc my Client

V. M hnh mng s dng ISA Server 2006

1. M hnh mng

2. Gii thiu tng qut M hnh mng s dng ISA Server 2006 c pht trin t m hnh mng Domain nhng m rng hn bng vic thm mt my ch ci t phn mm ISA server. M hnh ny hnh thc t trin khai nhiu nht trong cc c quan, doanh nghip c quy m va v nh bi l n c bo v bi mt phn mm tng la hu hiu nht hin nay. Phn mm ISA c rt nhiu tnh nng hu ch nh: Kim sot lung d liu trao i qua li gia cc mng vi nhau. Ngn chn cc cuc tn cng t bn ngoi Internet Tng tc truy cp internet Cho php kt ni quay s, VPN qua ng truyn internet Chc nng cn bng ti gip m bo ng truyn lun n nh 24/7 3. Nhng u, nhc im: * u im Ngoi nhng u im t m hnh mng Domain Controller, m hnh mng ny c nhng u im khc nh: - C h thng firewall chuyn bit - Ngn chn cc cuc tn cng t Internet - Kim sot cc giao thc c hot ng - H tr ngi dng di ng v kt ni t xa thng qua dch v VPN - Tng tc kt ni internet * Nhc im - Chi ph tng do u t vo h thng my ch. - Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng. 4. Cc bc trin khai - Thit lp a ch IP cho cc my. - Cu hnh DNS trn my Domain Controller. - Cu hnh DHCP trn my Domain Controller. - Ci t ISA - Cu hnh Access Rule cho php phn gii tn min ni b - Cu hnh Access Rule cho php truy cp web - Cu hnh Access Rule cho php gi nhn email - Cu hnh Access Rule cho php s dng lnh PING kim tra tnh thng mng. - Cu hnh Access Rule cho php gi nhn email bng phn mm Outlook Express. - Cu hnh HTTP Filter cm ngi dng download cc file thc thi. - Cu hnh Access Rule cm ngi dng trong gi lm vic xem phim, nghe nhc. - Cu hnh Access Rule cm mt s trang web v chuyn hng v

trang http://dantri.com.vn - Cu hnh Cache tng tc truy cp Internet

VI. M hnh Publish web qua ISA Server

1. M hnh mng

2. Gii thiu tng qut T m hnh mng s dng ISA 2006, m hnh publish web qua ISA c pht trin khi h thng mng mun m rng thm mt s dch v khc nh Webserver, Mail server... Phn mm ISA c tch hp chc nng Publish, cc server cn publish s c t sang 1 vng gi l vng DMZ (khu vc phi qun s) nhm nng cao tnh bo mt cho h thng. 3. Nhng u, nhc im ca m hnh * u im Ngoi nhng u im t m hnh mng c ISA Server, m hnh mng ny c nhng u im khc nh: Qung b cc mt s Server chy dch v Web, Mailcho php ngi dng trong mng ni b v ngi dng trn Internet c th truy cp vo website ca doanh nghip. Tng cng tnh nng bo mt cho h thng. Cch ly 2 vng mng ni b. Qun l chuyn nghip hn * Nhc im Chi ph tng do u t vo h thng my ch Qun tr phc tp hn v th cn c i ng qun tr vin duy tr h thng mng 4. Hng dn thc hin - Thit lp a ch IP. - Ci t dch v IIS - To mt website - Trn ISA Server chuyn i sang m hnh 3 chn (3-leg) - To Access Rule cho php phn gii tn min v truy cp web - Cu hnh Publish website qua ISA - Cu hnh VPN client to gateway.