1.

Lab: Deploying Network Controller

Lab Setup: Estimated Time

Sign in using the following credentials:

• User name: Adatum\Administrator
• Password: Pa55w.rd
For this lab, you will use the available virtual machine environment. Before you begin the
lab, you must complete the following steps:

1. On the host computer, start Hyper-V Manager.

2. In Hyper-V Manager, click 20741B-LON-DC1, and then in the Actions pane, click Start.

3. In the Actions pane, click Connect. Wait until the virtual machine starts.

4. Sign in by using the following credentials:

• User name: Adatum\Administrator

• Password: Pa55w.rd

5. Repeat steps 2 through 4 for 20741B-LON-SVR2.

2. Exercise 1: Preparing to deploy Network Controller

Task 1: Create the required Active Directory Domain Services security groups

1. Switch to LON-DC.

2. In Server Manager, click Tools, and then click Active Directory Users and Computers.
3. In Active Directory Users and Computers, expand Adatum.com, and then click IT.

4. Right-click IT, click New, and then click Group.

5. In the New Object – Group dialog box, in the Group name text box, type Network Controller
Admins, and then click OK.

6. In the details pane, double-click Network Controller Admins, and then in the Network
Controller Admins Properties dialog box, on the Members tab, click Add.

7. In the Select Users, Contacts, Computers, Service Accounts, or Groups dialog box, in the Enter
the object names to select (examples) text box, type administrator; Beth, and then
click OK twice.

8. Right-click IT, click New, and then click Group.

9. In the New Object – Group dialog box, in the Group name text box, type Network Controller
Ops, and then click OK.

10. In the details pane, double-click Network Controller Ops, and then in the Network Controller
Ops Properties dialog box, on the Members tab, click Add.

11. In the Select Users, Contacts, Computers, Service Accounts, or Groups dialog box, in the Enter
the object names to select (examples) text box, type administrator; Beth, and then
click OK twice.
 12. Close Active Directory Users and Computers.

3. Exercise 1: Preparing to deploy Network Controller

Task 2: Request a certificate for authenticating Network Controller

1. Switch to LON-SVR2, right-click Start, and then click Run.

2. In the Run dialog box, type mmc.exe, and then press Enter.

3. In the Console1 – [Console Root] window, click File, and then click Add/Remove Snap-in.

4. In the Add or Remove Snap-ins dialog box, in the Snap-in list, double-click Certificates.

5. Click the Computer account, click Next, click Finish, and then click OK.

6. In the navigation pane, expand Certificates (Local Computer), and then click Personal.

7. Right-click Personal, click All Tasks, and then click Request New Certificate.

8. In the Certificate Enrollment dialog box, on the Before you Begin page, click Next.

9. On the Select Certificate Enrollment Policy page, click Next.

 10. Select the Computer check box, click Enroll, and then click Finish.

11. Close the management console and do not save changes.

Results : After completing this exercise, you should have successfully prepared your
environment for Network Controller.

4. Exercise 2: Deploying Network Controller

Task 1: Add the Network Controller role

1. On LON-SVR2, click Start, and then click Server Manager.

2. In Server Manager, in the details pane, click Add roles and features.

3. In the Add Roles and Features Wizard, on the Before you begin page, click Next.

4. On the Select installation type page, click Next.

5. On the Select destination server page, click Next.

6. On the Select server roles page, in the Roles list, select the Network Controller check box,
click Add Features, and then click Next.

7. On the Select features page, click Next.

 8. On the Network Controller page, click Next.

9. On the Confirm installation selections page, click Install.

10. When the role installs, click Close.

11. Right-click Start, point to Shut down or sign out, and then click Restart.

12. In the Choose a reason that best describes why you want to shut down this computer dialog
box, click Continue.

13. After LON-SVR2 restarts, sign in as Adatum\Administrator with the password Pa55w.rd.

4. Exercise 2: Deploying Network Controller

Task 1: Add the Network Controller role

1. On LON-SVR2, click Start, and then click Server Manager.

2. In Server Manager, in the details pane, click Add roles and features.

3. In the Add Roles and Features Wizard, on the Before you begin page, click Next.

4. On the Select installation type page, click Next.

 5. On the Select destination server page, click Next.

6. On the Select server roles page, in the Roles list, select the Network Controller check box,
click Add Features, and then click Next.

7. On the Select features page, click Next.

8. On the Network Controller page, click Next.

9. On the Confirm installation selections page, click Install.

10. When the role installs, click Close.

11. Right-click Start, point to Shut down or sign out, and then click Restart.

12. In the Choose a reason that best describes why you want to shut down this computer dialog
box, click Continue.

13. After LON-SVR2 restarts, sign in as Adatum\Administrator with the password Pa55w.rd.

5. Exercise 2: Deploying Network Controller

Task 2: Configure the Network Controller cluster

1. On LON-SVR2, right-click Start, and then click Windows PowerShell (Admin).

 2. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$node=New-NetworkControllerNodeObject -Name "Node1" -Server "LON-SVR2.Adatum.com" -Fa

ultDomain "fd:/rack1/host1" -RestInterface “London_Network”

3. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -im

atch "LON-SVR2" }

4. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

Install-NetworkControllerCluster -Node $node - ClusterAuthentication Kerberos -Manage

mentSecurityGroup "Adatum\Network Controller Admins" -CredentialEncryptionCertificate
$Certificate

5. Exercise 2: Deploying Network Controller

Task 2: Configure the Network Controller cluster

1. On LON-SVR2, right-click Start, and then click Windows PowerShell (Admin).

2. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$node=New-NetworkControllerNodeObject -Name "Node1" -Server "LON-SVR2.Adatum.com" -Fa

ultDomain "fd:/rack1/host1" -RestInterface “London_Network”

3. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:
$Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -im
atch "LON-SVR2" }

4. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

Install-NetworkControllerCluster -Node $node - ClusterAuthentication Kerberos -Manage

mentSecurityGroup "Adatum\Network Controller Admins" -CredentialEncryptionCertificate
$Certificate

7. Exercise 2: Deploying Network Controller

Task 4: Verify the deployment

1. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$cred=New-ObjectMicrosoft.Windows.Networkcontroller.credentialproperties

2. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$cred.type="usernamepassword"

3. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$cred.username="admin"

4. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

$cred.value="abcd"
 5. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

New-NetworkControllerCredential -ConnectionUri https://LON-SVR2.Adatum.com -Propertie

s $cred –ResourceId cred1

6. Press Y, and then press Enter when prompted.

7. At the Windows PowerShell (Admin) command prompt, type the following command, and then
press Enter:

Get-NetworkControllerCredential -ConnectionUri https://LON-SVR2.Adatum.com -ResourceI

d cred1

You should receive output that looks similar to the output below:
Tags :
ResourceRef : /credentials/cred1
CreatedTime : 1/1/0001 12:00: 00 AM
InstanceId : e16ffe62-a701-4d31-915e-7234d4bc5a
Etag : W/"1ec59631-607f-4d3e-ac78-94b0822f3a9d"
ResourceMetadata :
ResourceId : cred1
Properties :
Microsoft.Windows.NetworkController.CredentialProperties

Results : After completing this exercise, you should have successfully deployed Network
Controller.