RRAS studying

Mishra wrote:

Still studying for the 293. I know there aren't a ton of questions on RRAS but for those who did really well on the section (a.p.a?) what would be a good study plan to cover for the material on the 293?

I'm reading the RRAS sections but my eyes are glazing over and nothing is really sinking in. It's like a fight to really try to know this stuff.

I know the basic network stuff from the CCNA like RIP/OSPF so I don't need to know that stuff. Is there a recommended lab I could setup at home that would be a real help to me? Or is there a powerful section from some other reading material (not MS or Syngress) that would do me well?

Thanks

Im at the RRAS part in the MS Press book as well. I CANNOT STAND RRAS. Probably my only pet peeve with the MCSE track is RRAS. Its tough material to retain for me. From my understanding, its lighter than the 291 portions. But dont take my word for it.

Don't expect any help from me

http://www.techexams.net/forums/viewtopic.php?t=35564

I'm actually just on chapter 2 of the MS Press book for 70-293 so far. I don't care for RRAS either. Have you gone through the exercise in the MS press booK? With a quick techexams search, i found this...
http://www.techexams.net/forums/viewtopic.php?t=24223

dynamik

I don't remember much new RRAS material from 291. What're you having problems with?

Here is a good post I found

IP (Subnetting, TCP/IP, DHCP• Netcap – captures network traffic in Network Monitor – used to get MAC addresses
• Net start dhcpserver
• DHCP Relay Agent – part of RRAS
• DHCP Backup & Transfer – Move backed up file to prevent address conflicts
• DHCP Superscope - Creating a superscope with multiple subnets will cause clients to retain current scope addresses
• DHCP know difference of Reservation & Exclusion
• Reservation – Range is reserved for client with set MAC Addresses
• Exclusion – Range is excluded from DHCP Scope
• 169.254.X.X = APIPA Address
• DHCP Server States:
• White X in Red Circle – Service not started
• Green Up Arrow in White Circle – Server active and connected
• White Exclamation Mark in Blue Circle – Out of Addresses (Error 14)
• Red Down Arrow in White Circle – DHCP not authorized
• Connectivity issues between 2 router separated networks are probably gateway related, then subnet
• ICS has IP addressing built in & can’t coexist easily with a DHCP configured network
• For network router setting, ALWAYS use IP address of network router/connector, not company’s NAT/RRAS or ISP
• Subnet mask determines whether packet destination is internal or remote bound via gateway
• DHCP Servers must have an IP address on the subnet of each scope, including superscopes

DNS
• Use WINS forward lookup to connect to a NT4 network without a DNS server unless DHCP dynamically allocated
• Understand Root Hints
• Understand Application Directory Partitions
• Active Directory Integrated DNS Servers should also be Domain Controllers
• Stub zones and Delegations are used to make child domains of ALREADY CREATED Primary/Secondary/ADI Zones
• Zone Options Tabs: General, SOZ, NS, WINS, Zone Transfers. Security
• SOA Tab: Refresh: 15 Min, Retry (Should be less than refresh): 10 Min, Expire: 1 Day, Min TTL: 1 Hour, TTL for Zone: 1 Day
• Increment S/N of zone by clicking increment button
• Transfer Zone – force zone transfer from Primary. Option available on Secondary. Occurs automatically at Refresh Interval.
• Reload Zone- reinitialize zone from local DNS file
• DNS Suffix Search List setting in the GPO allows multiple suffixes to be queried
• Dynamically Hosted NS Records without hosting zone => Stub Zone
• Use WINS Forward Lookup that is close to the requesting DNS server.
• Stub Zone & Delegation queries forward child zone DNS info to client, which might be blocked by firewall.
• Ports: 25-SMTP; 53-DNS; 80-HTTP; 110-POP3; 483-HTTPS
• Conditional Forwarding routes certain domain requests
• Simple Forwarding routes all names external to server
• Shorten expiration times for branch offices with unreliable connections to reduce incorrect query responses.
• Create a unique host name (A) and, if needed, CNAME records for multiple servers pointing to one address.
• Nslookup – lists all/specific records in a zone; netdiag; dnscmd
• Host/Server Options Tabe: Debug Logging, Event Logging, Monitoring, Security, Interfaces, Forwarders, Advanced, Root Hints

Network Infrastructure (Network Monitor, System Monitor, Service Dependency, Connectivity)• c:\windows\system32\parser.ini & parsers folder for netmon protocol parshing
• DHCP process DORA/DORN
• Task Manager>Networking Tab
• Performance Console>System Monitor View (Other Views: Counter Logs, Trace Logs, Alerts)
• Netstat – DOS based network usage/settings displayer (i.e. ports in use)
• Nslookup – check ns records being returned by DNS
• Net Logon service registers SRV records in DNS – allows domain logon authentication
• shutdown /i allows remote shutdown

Security• Security Configuration and Analysis MMC Snap-in
• secedit – Security Configuration and Analysis in command line –either can be used to modify templates
• IP Security Monitor MMC Snap – in
• netsh ipsec – IP Security Monitor in command line
• netdiag – command line tool to display IPSec Info & test/view network configuration
• IP Security Monitor 0 monitor & troubleshoot ACTIVE IPSec policy
• netcap.exe – capture network data from command line to view later
o Network Monitor does not have to be installed and it works on Windows XP
• mbsaclie.exe – MS Baseline Security Analyzer in command line
• SUS clients must have client installer installed, or 2000 SP2, XP SP1, or 2003
• SUS Client Installer – WUAU22.msi
• Only 2000, XP & 2003 can be SUS clients
• Performance log user have more rights than power users, less than administrators
• Domain Controllers do not have a power users group

Miscellaneous
• Audit Logon Events in GPO is using local user accounts
• Audit Account Logon Events in GPO is using domain user accounts
• Newly created user accounts must be able to contact a Global Catalog Server

Routing and Remote Access Server (VPN, Router, DHCP Relay, NAT, Firewall, Demand Dial, etc.)• RRAS member servers of a domain must be added to RAS and IAS Servers domain local security group
• DCs are automatically added to RAS and IAS Servers group
• Route print – view routing table
• Remote access routers calling in must have exact credentials to answering router’s demand dial interface configuration, or be considered a remote access user
• ICS automatically assigns addresses from beginning of 192.168.0.0/24 range and can’t access other ranges
• RIP is for smaller networks, less configuration.
• OSPF is complicated to set up and install, but more versatile and less bandwidth for larger networks
• RIP has a 15 hop limit
• RIP can use password only authentication, but it is sent in clear text
• RIP can use a list of authorized routers
• RI can filter routes that it receives from other routers by IP range (i.e. accept only 10.X.X.X ranges)
• RIP can advertise with broadcasts (v1, v2) or multicast (v2) or listed neighbors
• OSPF uses a map of the internetwork called a Link State Database
• DHCP Relay Agents and RFC1542 compliant routers can pass DHCP Broadcasts
• DHCP Relay Agent can’t be run on a server with DHCP, ICS or NAT with auto addressing enabled since they all assign IP addresses already
• RRAS reserves DHCP addresses in blocks of 10
• EAP-TLS is not supported on standalone servers - used for smartcards
• Windows 95 does not support MS-CHAP v2, only 2000/2003/XP support EAP
• Remote Access Policies – understand them
• Control access through Remote Access Policies is disabled in a Windows 2000 mixed domain functional level
• If using EAP-TLS for VPN authentication, all VPN clients require a user certificate
• IAS servers can use RADIUS to authenticate multiple RRAS servers.

http://www.mcmcse.com/forums/viewtopic.php?p=51323

dynamik wrote:

I don't remember much new RRAS material from 291. What're you having problems with?

I get the basic points that they try to teach like "RRAS supports several authentication protocols, including EAP, MS-CHAP (versions 1 and 2), CHAP, SPAP, and PAP". But from my 291 experience I just know they are going to ask something crazy situation which I'm not going to understand their angle at all... Even the labs aren't very comprehensive. "make a VPN connection".

With the DNS questions they basically asked things you could relate back to your studies. And things that people repeatedly ask on this forum.. But with the RRAS questions it's almost like you needed to lab it out before you understood their angle... I just can't see the full picture (ever read my taco example? lol http://www.techexams.net/forums/viewtopic.php?t=34953&postdays=0&postorder=asc&start=0) like I can with DNS (something I have to understand on a day to day basis [meaning the protocol.. I don't manage any DNS servers])

Mishra wrote:

dynamik wrote:

I don't remember much new RRAS material from 291. What're you having problems with?

I get the basic points that they try to teach like "RRAS supports several authentication protocols, including EAP, MS-CHAP (versions 1 and 2), CHAP, SPAP, and PAP". But from my 291 experience I just know they are going to ask something crazy situation which I'm not going to understand their angle at all... Even the labs aren't very comprehensive. "make a VPN connection".

With the DNS questions they basically asked things you could relate back to your studies. And things that people repeatedly ask on this forum.. But with the RRAS questions it's almost like you needed to lab it out before you understood their angle... I just can't see the full picture (ever read my taco example? lol http://www.techexams.net/forums/viewtopic.php?t=34953&postdays=0&postorder=asc&start=0) like I can with DNS (something I have to understand on a day to day basis [meaning the protocol.. I don't manage any DNS servers])

well I finally stomached the chapter on RRAS, and it looks like our assumptions were correct (at least in the MSPress book). Like you, I try to relate everything I study into my workplace. Since RRAS is seldom used anywhere (including my workplace), its hard to relate this crap to anything, making it difficult for me to understand. So I just keep plugging away on the labs until it somewhat clicks in my brain. Unfortunately, the only thing I found working for RRAS is constant repetition.

Set my lab back up last night. Glad to see it in order again.

Will be working on some other projects before breaking into the 293 lab wise.

From the top

Cisco 2950, P3 rack server, Sun Sparc, Cisco 1711, Netwinder MIPS processor (not in the pic), 2 single xeon machines, 3 Cisco 2501s, another P3 rack server

P2 Endian Firewall, P3 apache server, P3, Dual Xeon VMware machine

P3, AMD XP 2100, Another AMD XP 2100

if you don't mind me asking; what kind of lab scenarios are you creating? Since we are both studying for the same exam, I figure I would ask. Maybe I'm missing something on RRAS I should lab up.

Kind of looks like my shelf a couple years ago before I threw away a bunch of really old P1 and AMD K6 stuff.

In your studies, know your PKI stuff too. I got my arse kicked on it today.

NetAdmin2436 wrote:

Kind of looks like my shelf a couple years ago before I threw away a bunch of really old P1 and AMD K6 stuff.

In your studies, know your PKI stuff too. I got my arse kicked on it today.

Actually I have been putting the majority of my focus on PKI and clustering. Its funny because I scored a perfect on the RRAS part in 291, and its probably my weakest subject

netadmin, you took 293 today and not going to post a review of how it went????? Isn't that against forum code or something?

I hope it went well!

EDIT: Sorry bro

snadam wrote:

NetAdmin2436 wrote:

Kind of looks like my shelf a couple years ago before I threw away a bunch of really old P1 and AMD K6 stuff.

In your studies, know your PKI stuff too. I got my arse kicked on it today.

Actually I have been putting the majority of my focus on PKI and clustering. Its funny because I scored a perfect on the RRAS part in 291, and its probably my weakest subject

netadmin, you took 293 today and not going to post a review of how it went????? Isn't that against forum code or something?

I hope it went well!

EDIT: Sorry bro

No worries.

So you were actually talking to me and not jimmy. I was kinda of wondering where that came from.

I actually had my failure 'I got kicked in the face' post up before you posted the first time. Besides I'm not afraid to admit defeat.....or in this case humiliation.

snadam wrote:

if you don't mind me asking; what kind of lab scenarios are you creating? Since we are both studying for the same exam, I figure I would ask. Maybe I'm missing something on RRAS I should lab up.

What are the book(s) you are reading exactly?

Mishra wrote:

snadam wrote:

if you don't mind me asking; what kind of lab scenarios are you creating? Since we are both studying for the same exam, I figure I would ask. Maybe I'm missing something on RRAS I should lab up.

What are the book(s) you are reading exactly?

mspress and syngress at the moment. Havent dabbled with syngress much yet, Ill tackle this book this weekend and next week. Generally, I feel comfortable with RRAS, but any other tips/suggestions are always good.

netadmin: Yea I thought that jimmypizzle wrote that, and I went back and changed it. Which would explain why I didnt see your original thread earlier.

I'm guessing you have

MCSE Self-Paced Training Kit (Exam 70-293): Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, Second Edition

right?

snadam wrote:

Mishra wrote:

snadam wrote:

if you don't mind me asking; what kind of lab scenarios are you creating? Since we are both studying for the same exam, I figure I would ask. Maybe I'm missing something on RRAS I should lab up.

What are the book(s) you are reading exactly?

mspress and syngress at the moment. Havent dabbled with syngress much yet, Ill tackle this book this weekend and next week. Generally, I feel comfortable with RRAS, but any other tips/suggestions are always good.

I know you guys seen this on the other thread, but Yeah I added the Syngress book too. I used the same MS Press book Self Paced Training Kit (Exam 70-293).

Mishra wrote:

I'm guessing you have

MCSE Self-Paced Training Kit (Exam 70-293): Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, Second Edition

right?

yep sure do. Read mspress front to back already. did the labs in there. Havent looked for any other practice labs in the syngress yet; but I probably will start tonight.

Have you been doing labs with NAT?