Module 5: Implementing IPAM

Student Book Content

Scenario
With the distribution of network services in multiple locations, it is becoming increasingly complex to manage the
networking environment at A. Datum Corporation. The IT management at A. Datum Corporation has decided to
deploy IPAM and use it to centrally manage the IP address configuration in the organization.

Objectives
After completing this lab, you will be able to:
 Install the IPAM Server feature.
 Provision IPAM to manage servers.

Module 5-Implementing and managing IPAM Page 1

  Provision IPAM to manage servers.
 Manage IP address spaces by using IPAM.

Lab Setup
For this lab, you will use the available virtual machine environment. Before you begin the lab, you must complete the
following steps:
1. On the host computer, start Hyper-V Manager.
2. In Hyper-V Manager, click 20741B-LON-DC1, and then in the Actions pane, click Start.
3. In the Actions pane, click Connect. Wait until the virtual machine starts.
4. Sign in by using the following credentials:
o User name: Adatum\Administrator
o Password: Pa55w.rd
5. Repeat steps 2 through 4 for 20741B-EU-RTR.
6. Repeat steps 2 through 4 for 20741B-LON-SVR1, 20741B-LON-SVR2, 20741B-TOR-SVR1, and 20741B-SYD-
SVR1.

Note: When you sign in to the virtual machines, if the Networks banner is displayed requesting to allow the PC to be
discoverable, click Yes.

Student Book Content

Lab: Implementing IPAM
Scenario
With the distribution of network services in multiple locations, it is becoming increasingly complex to
manage the networking environment at A. Datum Corporation. The IT management at A. Datum
Corporation has decided to deploy IPAM and use it to centrally manage the IP address configuration in
the organization.

Exercise 1: Installing the IPAM Server feature

Exercise Scenario
You will implement IPAM for Adatum.com by using LON-SVR2 as your IPAM server. Your task is to install
the IPAM Server feature on LON-SVR2.

The main tasks for this exercise are as follows:

1. Prepare the lab environment
2. Install the IPAM Server feature on LON-SVR2

 Task 1: Prepare the lab environment

Note: Running the following scripts will return several warnings. You can ignore these warnings.

1. Switch to LON-SVR1.
2. On LON-SVR1, right-click Start, and then click Windows PowerShell (Admin).
3. At the command prompt in the Windows PowerShell command-line interface, type the following
command, and then press Enter.
C:\Labfiles\Mod05\LON-SVR1_Mod05_Setup.ps1

4. Switch to TOR-SVR1.
5. If prompted, in the Networks banner, click Yes.
6. On TOR-SVR1, right-click Start, and then click Windows PowerShell (Admin).
7. At the Windows PowerShell command prompt, type the following command, and then press Enter.
C:\Labfiles\Mod05\TOR-SVR1_Mod05_Setup.ps1

8. Switch to SYD-SVR1.
9. On SYD-SVR1, right-click Start, and then click Windows PowerShell (Admin).
10. At the Windows PowerShell command prompt, type the following command, and then press Enter.
C:\Labfiles\Mod05\SYD-SVR1_Mod05_Setup.ps1
SYD-SVR1 will restart when the script completes. After it restarts, sign in as Adatum\Administrator with
the password of Pa55w.rd.

Module 5-Implementing and managing IPAM Page 2

 Task 2: Install the IPAM Server feature on LON-SVR2
1. If necessary, sign in to LON-SVR2 as Adatum\Administrator with the password Pa55w.rd.
2. Click Start, and then click Server Manager. In the results pane, click Add roles and features.
3. In the Add Roles and Features Wizard, click Next.
4. On the Select installation type page, click Next.
5. On the Select destination server page, click Next.
6. On the Select server roles page, click Next.
7. On the Select features page, select the IP Address Management (IPAM) Server check box.
8. In the Add features that are required for IP Address Management (IPAM) Server? dialog box,
click Add Features, and then click Next.
9. On the Confirm installation selections page, click Install.
10. When the Add Roles and Features Wizard completes, close the wizard.

Exercise 2: Provisioning the IPAM Server

Exercise Scenario
Now, you must configure IPAM discovery for servers in the Adatum.com domain. You will use IPAM to
manage the following servers:
 LON-DC1: DC, DHCP, DNS
 LON-SVR1: DHCP, DNS
 TOR-SVR1: DHCP
 SYD-SVR1: DC, DNS

The main tasks for this exercise are as follows:

1. Configure the IPAM server for GPO deployment
2. Perform discovery on Adatum.com
3. Provision the IPAM server to manage the DC, DNS, and DHCP servers

 Task 1: Configure the IPAM server for GPO deployment

1. On LON-SVR2, in the Server Manager navigation pane, click IPAM.
2. In the IPAM Overview pane, click Connect to IPAM server. Select LON-SVR2.Adatum.com, and
then click OK.
3. Click Provision the IPAM server.
4. In the Provision IPAM wizard, click Next.
5. On the Configure database page, ensure that Windows Internal Database (WID) is selected, and
then click Next.
6. On the Select provisioning method page, ensure that Group Policy Based is selected.
7. In the GPO name prefix box, type IPAM, and then click Next.
8. On the Confirm the Settings page, click Apply. Provisioning will take a few moments to complete.
Note: If provisioning fails with a Windows Internal Database error, open Services.msc and restart the
Windows Internal Database service. Then repeat steps 3 through 8

9. When provisioning completes, click Close.

 Task 2: Perform discovery on Adatum.com

1. In the IPAM Overview pane, click Configure server discovery.
2. In the Configure Server Discovery dialog box, click Get forests, and then in the Configure Server
Discovery dialog box, click OK.
3. Click OK again, and then click Configure server discovery.
4. In the Configure Server Discovery dialog box, click Add to add the Adatum.com domain, and then
click OK.
5. In the IPAM Overview pane, click Start server discovery. Discovery might take 5-10 minutes to
run. The yellow bar indicates when discovery is complete.
6. In the IPAM Overview pane, click Select or add servers to manage and verify IPAM access.
Notice that the IPAM Access Status is Blocked for the servers. Scroll down to the Details view, and
then note the status report.

Note: You have not yet granted the IPAM server permission to manage servers in the Adatum.com
domain by using Group Policy.

 Task 3: Provision the IPAM server to manage the DC, DNS, and DHCP servers
1. On LON-SVR2, right-click Start, and then click Windows PowerShell (Admin).

Module 5-Implementing and managing IPAM Page 3

1. On LON-SVR2, right-click Start, and then click Windows PowerShell (Admin).
2. At the Windows PowerShell command prompt, type the following command, and then press Enter.
Invoke-IpamGpoProvisioning –Domain Adatum.com -DomainController lon-dc1.adatum.com –
GpoPrefixName IPAM –IpamServerFqdn LON-SVR2.adatum.com –DelegatedGpoUser
Administrator
3. When you are prompted to confirm the action, type Y, and then press Enter.
The command will take a few moments to complete.
4. Close Windows PowerShell.

5. Switch to LON-DC1.
6. In Server Manager, click Tools, and then click Active Directory Administrative Center.
7. In the Active Directory Administrative Center window, in the navigation pane, click Global
Search.
8. In the Search box, type IPAMUG, and then press Enter.
9. Double-click the IPAMUG group.
10. In the IPAMUG dialog box, under Group scope, click Global.
11. Scroll down to the Member Of section, and then click Add.
12. In the Select Groups window, type Domain Admins, click Check Names, and then click OK.
13. Click OK to close the IPAMUG dialog box.
14. Close the Active Directory Administrative Center window.

15. Switch to LON-SVR2.

16. Restart LON-SVR2.
17. On LON-SVR2, sign in as Adatum\Administrator with the password Pa55w.rd.

18. Click Start, and then click Server Manager.

19. Click IPAM, and then click SERVER INVENTORY.
20. In the IPv4 details pane, right-click LON-DC1, and then click Edit Server.
21. In the Add or Edit Server dialog box, set the Manageability status field to Managed, and then
click OK.

Note: If a Group Policy Object (GPO) error appears, switch the server back to Unspecified, and then
restart LON-DC1, LON-SVR1, LON-SVR2, TOR-SVR1, and SYD-SVR1. Sign back in to all servers as
Adatum\Administrator with the password Pa55w.rd.

22. In the IPv4 details pane, right-click lon-svr1, and then click Edit Server.
Note: If you do not see LON-SVR1, click TASKS, click Add Server, and then in the Add or Edit Server
dialog box, in the Server name (FQDN) field, type LON-SVR1. Select the DHCP server and DNS server
check boxes, click Verify, and then proceed to step 23.

23. In the Add or Edit Server dialog box, set the Manageability status field to Managed, and then
click OK.
24. In the IPv4 details pane, right-click tor-svr1, and then click Edit Server.
Note: If you do not see TOR-SVR1, click TASKS, click Add Server, and then in the Add or Edit Server
dialog box, in the Server name (FQDN) field, type TOR-SVR1. Select the DHCP server check box, click
Verify, and then proceed to step 25.

25. In the Add or Edit Server dialog box, set the Manageability status field to Managed, and then
click OK.
26. In the IPv4 details pane, right-click SYD-SVR1, and then click Edit Server.
Note: If you do not see SYD-SVR1, click TASKS, click Add Server, and then in the Add or Edit Server
dialog box, in the Server name (FQDN) field, type SYD-SVR1. Select the DC and DNS server check
boxes, click Verify, and then proceed to step 27.

27. In the Add or Edit Server dialog box, set the Manageability status field to Managed, and then
click OK.

28. Switch to LON-DC1.

29. Right-click Start, and then click Windows PowerShell (Admin).
30. At the Windows PowerShell command prompt, type Gpupdate /force, and then press Enter.
31. Close the Windows PowerShell window.

32. Switch to LON-SVR1.

33. Right-click Start, and then click Windows PowerShell (Admin).
34. At the Windows PowerShell command prompt, type Gpupdate /force, and then press Enter.
35. Close the Windows PowerShell window.

Module 5-Implementing and managing IPAM Page 4

 35. Close the Windows PowerShell window.

36. Switch to TOR-SVR1.

37. Right-click Start, and then click Windows PowerShell (Admin).
38. At the Windows PowerShell command prompt, type Gpupdate /force, and then press Enter.
39. Close the Windows PowerShell window.

40. Switch to SYD-SVR1.

41. Right-click Start, and then click Windows PowerShell (Admin).
42. At the Windows PowerShell command prompt, type Gpupdate /force, and then press Enter.
43. Close the Windows PowerShell window.

44. Switch back to LON-SVR2.

45. In Server Manager, right-click LON-DC1, and then click Refresh Server Access Status. Repeat
this step for LON-SVR1, TOR-SVR1, and SYD-SVR1.
46. When completed, refresh IPv4 by clicking Refresh.
Note: It might take up to five minutes for the status to change. If the status does not change, restart
LON-DC1, LON-SVR1, LON-SVR2, TOR-SVR1, and SYD-SVR1, and then repeat steps 44–46. Ensure
that you restart LON-DC1 before restarting the other virtual machines.

47. In the IPAM Overview pane, click Retrieve data from managed servers. This action will take a few
moments to complete.

Exercise 3: Managing IP address spaces by using IPAM

Exercise Scenario
Your task is to use IPAM to confirm the status of the current DHCP and DNS environment and to make
the following changes:
 Add an IP address block for the Toronto subnet, which is configured through static IP addresses:
o Network ID: 172.16.18.0
o Prefix length: 24
o Start IP address: 172.16.18.0
o End IP address: 172.16.18.255
o Description: Toronto addresses
 Create an IP address reservation in the Houston scope for a network printer that is being installed:
o Server IP: 172.16.20.200
 Deactivate the DHCP scope for the Portland office.

The main tasks for this exercise are as follows:

1. Add an IP address block
2. Create an IP address reservation
3. Deactivate the Portland Wired scope
4. Prepare for the next module

 Task 1: Add an IP address block

1. On LON-SVR2, in Server Manager, in the navigation pane, click IP Address Blocks.
2. In the IPv4 pane, next to the Current view, click IP Address Ranges.
Note: Note the three IP address ranges displayed from TOR-SVR1.

3. On the upper-right side of the window, click TASKS, and then click Add IP Address Block.
4. In the Add or Edit IPv4 Address Block window, type the following in the text boxes, and then click
OK:
o Network ID: 172.16.18.0
o Prefix length: 24
o Start IP address: 172.16.18.0
o End IP address: 172.16.18.255
o Description: Toronto subnet
5. In the IPv4 pane, next to the Current view, click IP Address Blocks.

Note: Note the newly created address block for Toronto.

 Task 2: Create an IP address reservation

Module 5-Implementing and managing IPAM Page 5

 Task 2: Create an IP address reservation
1. In Server Manager, on the IPAM configuration page, in the navigation pane, click IP Address
Blocks.
2. In the IPv4 pane, next to the Current view, click IP Address Ranges.
3. Right-click either of the IP address ranges with a Network value of 172.16.20.0/23, and then click
Edit IP Address Range.
Note: If the expected IP address ranges do not display, perform the following tasks:
1. In Server Manager, right-click LON-DC1, and then click Refresh Server Access Status. Repeat this
step for LON-SVR1, TOR-SVR1, and SYD-SVR1.
2. When completed, refresh IPv4 by clicking Refresh.
3. If the IP address ranges do not display, restart LON-DC1, LON-SVR1, LON-SVR2, TOR-SVR1, and
SYD-SVR1, and then repeat steps 1 and 2. Ensure that you restart LON-DC1 before restarting the other
virtual machines
4. In the IPAM Overview pane, click Retrieve data from managed servers. This action will take a few
moments to complete.

4. In the Edit IP Address Range window, click Reservations.

5. In the Reservations box, type 172.16.20.200, click Add, and then click OK.

 Task 3: Deactivate the Portland Wired scope

1. In the navigation pane, click the DHCP Scopes node, and then in the details pane, right-click the first
scope listed with a Scope ID of 172.16.23.0, and then click Deactivate DHCP Scope.
2. Repeat step 1 for the second scope with a listed Scope ID of 172.16.23.0.

Note: This scope is duplicated as a result of Dynamic Host Configuration Protocol (DHCP) failover
configuration between TOR-SVR1 and LON-SVR1. The preceding steps deactivate the scopes on both
servers.

 Task 4: Prepare for the next module

When you finish the lab, revert the virtual machines to their initial state. To do this, perform the following
steps:
1. On the host computer, start Hyper-V Manager.
2. In the Virtual Machines list, right-click 20741B-LON-DC1, and then click Revert.
3. In the Revert Virtual Machine dialog box, click Revert.
4. Repeat steps 2 and 3 for 20741B-EU-RTR, 20741B-LON-SVR1, 20741B-LON-SVR2, 20741B-SYD-
SVR1, and 20741B-TOR-SVR1.

Module 5-Implementing and managing IPAM Page 6