SYLLABUS. Title: Unix Network Administration II

Transcription

1 Code: NETW 111 Division: Business & Technology Title: Unix Network Administration II Department: Engineering and Technology Course Description: This course will provide the student with a comprehensive understanding of the administrative aspects of the UNIX operating system. At the end of the course the student will have the skills required to administer a UNIX server. It focuses on an introduction to TCP/IP networking under UNIX, as well as on network monitoring and debugging. Students will learn the basic principles of TCP/IP networking, configuring, and using the Domain Name Service, sendmail, the Network Information System, and the Network File System, installing and configuring a Web Host and Internet Server, as well as the basics of network security. This course consists of four hours of lecture and additional lab time as necessary per week. Prerequisites: A grade of C or higher in NETW 110 Corequisites: Prerequisites or Corequisites: Credits: 4 Lecture Hours: 4 Lab/Studio Hours: REQUIRED TEXTBOOK/MATERIALS: See Department for current textbook information. Student Journal in a Spiral Bound Notebook ADDITIONAL TIME REQUIREMENTS: Additional lab time as required COURSE LEARNING OUTCOMES: Upon completion of this course, students will be able to: Demonstrate a working knowledge of the administrative aspects of the UNIX operating system. Administer a UNIX servers. Perform network monitoring and debugging. Apply the basic principles of TCP/IP networking in configuring and using the Domain Name Service, send mail, the Network Information System, and the Network file system in installing and configuring a Web host and Internet Server as well as the basic of network security. GRADING STANDARD: The following scale will be used to determine satisfactory progress on each unit examination and for the final as follows: A A B B B C C D F 64 and below 2012 Page 1 of 7

2 STUDENT PERFORMANCE EVALUATION Students are expected to be present and punctual for all scheduled classes and labs. Students will be evaluated according to performance in the following categories: Quizzes and tests Lab activities and hands-on performance tests In-class assignments, homework, and class participation You must obtain a grade of C or better to use this course as a prerequisite for subsequent NETW designated courses. COURSE CONTENT: Unit 1 Server Preparation and Install Unit 2 Server Preparation and Install Unit 3 Creating User and Group Accounts Unit 4 Secure Shell Server Configuration Unit 5 ftp Server Configuration Unit 6 Apache Web Server Configuration Unit 7 Samba and NFS Server Configuration Unit 8 Automated Network Services Unit 9 DNS Services Unit 10 Mail Services Unit 11 Network Security Server Preparation and Install At the conclusion of this unit, the student will perform a Linux Install using Kickstart, and perform a clone kernel Upgrade 1 week Estimated Time To Achieve 1. Create or modify a kickstart file ks.cfg. 2. Describe how to create a boot diskette with the kickstart file or make the kickstart file available on the network. 3. Describe how to make the installation tree available. 4. Perform a kickstart installation. 5. Perform a kernel Upgrade Read The text Chapter 2 (pg 40-75), Chapter 27 Perform Lab 1 Estimated Time To Achieve UNIT 2 OF 11 Server Preparation and Install At the conclusion of this unit, the student will configure Linux for network communications using Network Scripts 1 week 1. Establishing a Network Connection 2012 Page 2 of 7

3 a. Network Topologies b. Network Components c. Network Protocols d. TCP/IP e. IP Addresses f. Subnets and the Network Mask g. Host Names and Domain Names 2. Configuring Basic Networking Services a. Configuring the Network Card using the following files: i. /etc/hosts ii. /etc/resolv.conf/etc iii. /sysconfig/network iv. /etc/sysconfig/network-scripts/ifcfg-eth0 Read The text Chapter 15 Perform Lab 2 UNIT 3 OF 11 Creating User and Group Accounts At the conclusion of this unit, the student will be able to create user accounts, create groups, enable shadow passwords, and establish user quotas. Class participation, the grading of journal entries, and laboratory performance. 1. Setting Up and Supporting Users a. List the types of security policies that are key to a well-secured system b. Match the properties of a UNIX user account to their correct descriptions c. Describe the purpose and contents of the password file d. Enter the basic account properties into the password database e. Set up a home directory for a new account f. Use automated account creation to create a new user account g. Set password aging parameters in the password database h. Use groups to delegate administrative power and to allow users to share work i. Describe how system accounts are used to enhance security j. Setup Quotas for each user Read The text Chapter 11 Perform Lab 3 UNIT 4 OF 11 Secure Shell Server Configuration At the conclusion of this unit, the student will install and configure SSH. 1. why it is necessary to use SSH instead of telnet to establish remote connections 2. the features of SSH 3. the SSH Protocol Versions 4. the sequence of events when establishing an SSH connection 5. how to install Linux/UNIX applications from tar and RPM 2012 Page 3 of 7

4 6. install or upgrade to the latest version of OpenSSH 7. configure and start OpenSSH Read The text Chapter 15 Perform Lab 4 UNIT 5 OF 11 ftp Server Configuration At the conclusion of this unit, the student will install and configure vsftp 1. the features of ftp 2. the sequence of events when establishing an ftp connection 3. how to install Linux/UNIX applications from tar and RPM 4. install or upgrade to the latest version of vsftpd 5. configure and start vsftpd Read The text Chapter 5 and 14 Perform Lab 5 UNIT 6 OF 11 Apache Web Server Configuration At the conclusion of this unit, the student will install and configure Apache and httpd 1. Configure a Web Server - Apache a. Introduction to the HTTP Protocol b. Obtaining and Installing Apache c. Starting and Stopping the HTTP Daemon d. Basic Access Control with Apache e. Virtual Hosting f. Introduction to Apache Modules g. Server-Side Includes h. Introduction to CGI Read The text Chapter 21 Perform Lab 6 UNIT 7 OF 11 Samba and NFS Server Configuration At the conclusion of this unit, the student will install and configure Samba and NFS Estimated Time To Achieve 2 weeks 2012 Page 4 of 7

5 1. File and Print Sharing with Microsoft Windows a. Introduction to Samba b. SMB/CIFS Explained c. Installing and Configuring Samba d. Other Samba Components e. Future Samba Development f. smbfs Filesystem 2. The Network Filesystem.(NFS) a. Introduction to NFS b. Configuring an NFS Server c. Configuring an NFS Client d. Auto-Mount Daemon (amd) Read The text Chapter 18 Perform Lab 7 UNIT 8 OF 11 Automated Network Services At the conclusion of this unit, the student will install and configure DHCP. 1. DHCP a. How DHCP Works b. Advantages of DHCP Over Static IP Addresses c. Kernel Configuration for DHCP d. Enabling DHCP e. dhclient Program f. DHCP Server Daemon g. dhcpd Configuration File Read The text Chapter 23 Perform Lab 8 UNIT 9 OF 11 DNS Services At the conclusion of this unit, the student will install and configure a Domain Name Server. 1. The Domain Name Server a. Introduction to BIND b. Enabling the Name Server Daemon c. BIND Configuration File (named.conf) d. Creating a Zone File e. Configuring a Caching Name Server Read The text Chapter 25 Perform Lab Page 5 of 7

6 UNIT 10 OF 11 Mail Services At the conclusion of this unit, the student will install and configure a Mail Server. 1. Configure Services a. Introduction to SMTP b. Mail Transfer Agents (MTAs) and Mail User Agents (MUAs) c. Configuring Basic Services with Sendmail d. Notes on Relaying e. Introduction to POP3 f. Configuring a POP3 Server with qpopper g. Configuring an IMAP Server with IMAP-UW h. for Standalone Workstations i. A Look at Some Sendmail Replacements Read The text Chapter 19 Perform Lab 10 UNIT 11 OF 11 Network Security At the conclusion of this unit, the student will design and implement network security. Estimated Time To Achieve 3 weeks 1. Network Security a. Security Models b. Password Policies c. Problems with Cleartext Services d. Securing Terminal Traffic (OpenSSH) e. Securing Services (POP3, IMAP, and SMTP) f. Creation of a chroot Jail g. Securing FTP h. Securing Apache i. System Security Profiles and Kernel Security (securelevel) j. Using a Firewall k. Preventing Intrusions and Compromises l. Denial of Service (DOS) Attacks m. Physical Security n. Other Security Resources Read The text Chapter 14 and 28 Perform Design of a Firewall and Server Security Strategy DEPARTMENT POLICIES: INCOMPLETE 2012 Page 6 of 7

7 It is the student's responsibility to submit all classwork on a timely basis, and it is expected that all course requirements be completed by the last class meeting. In cases of hardship or emergency, your instructor may grant a grade of INC. In order to be considered for the grade INC, the student must have satisfactorily completed 80% of the course, have a passing test average, and must meet with the instructor prior to the last class meeting to discuss this option. Your instructor is under no obligation to grant an INC. WITHDRAWING FROM CLASS Last day to withdraw from a class with a grade W is the 12 th week. While a W does not affect your GPA, it may have impact if you are receiving Financial Aid. Before withdrawing from any class, you should consult with your counselor, or a Financial Aid representative. ACADEMIC INTEGRITY Academic integrity is submitting one's own work, and properly acknowledging the work of others. Any violation of this principle constitutes academic dishonesty. Forms of academic dishonesty include: Plagiarism Submitting another's work, in whole or part, as one's own. This includes an examination, a computer program, a laboratory report, or a written assignment. Facilitating Academic Dishonesty Helping another commit an act of dishonesty, such as substituting for an examination or completing an assignment for someone else. Cheating Using or attempting to use unauthorized materials on an examination or assignment, such as using unauthorized texts or notes or improperly obtaining, or attempting to obtain, copies of an examination or answers to an examination. Illegal System Access Altering, transmitting, or permitting unauthorized individuals access to your account, or an attempt to alter or destroy system files on any server or computer. This also includes altering, transmitting, or attempting to alter or transmit academic information or records by unauthorized individuals. Students that participate in dishonest activities will receive a 0 for that project, examination, or assignment may be given a grade of F for the course may be reported to the Dean for disciplinary action For additional information, refer to the current Brookdale Community College Student Handbook. COLLEGE POLICIES: For information regarding: Brookdale s Academic Integrity Code Student Conduct Code Student Grade Appeal Process Please refer to the BCC STUDENT HANDBOOK AND BCC CATALOG. NOTIFICATION FOR STUDENTS WITH DISABILITIES: Brookdale Community College offers reasonable accommodations and/or services to persons with disabilities. Students with disabilities who wish to self-identify must contact the Disabilities Services Office at (voice) or (TTY) to provide appropriate documentation of the disability, and request specific accommodations or services. If a student qualifies, reasonable accommodations and/or services, which are appropriate for the college level and are recommended in the documentation, can be approved Page 7 of 7