Configuring Option 43 in DHCP

Here is the basic procedure for configuring option 43:

1. On the DHCP console find the scope on which you need to configure the option

2. Under the scope select the scope option and right click the scope option and select the configure options

3. In the scope options dialogue box, scroll down and select 043 vendor specific info

4. In the data entry field, click any where under the ASCII heading and enter the following information

ASCII : Loopback address of the master (This address may be one of three things:

the loopback address of the master, the virtual IP (VIP) address of a VRRP group for the master, or the IP address of the terminating local Controller)

5. Click the OK to save the configuration

DHCP Option 43

DHCP servers are a popular way of configuring clients with basic networking information such as an IP address, a default gateway, network mask, DNS server, etc. Most DHCP servers have the ability to

also send a variety of optional information as well. One of these is the Vendor-Specific Option Code, often called option 43.

Here is how option 43 works:

1 The DHCP client on an Aruba AP adds an optional piece of information called the Vendor Class Identifier Code (Option 60) to its DHCP request. The value of this code is ArubaAP

2 The DHCP server sees the vendor information and checks if it has option 43 configured, if it does, it will send the Vendor-Specific Option Code (43) to the client. The value of this option is the loopback address of the Aruba master

3 The AP gets a response from the DHCP server and checks if option 43 was returned, if it was, the AP contacts the master using the supplied IP address

option 43 will return the Aruba master IP address to an Aruba DHCP client. This information allows Aruba APs to auto-discover their master and gain their configuration.

Viewing and Updating DNS Records

To view or update DNS records, follow these steps:

1. Double-click the zone you want to work with. Records for the zone should be displayed in the right pane.

2. Double-click the DNS record you want to view or update. This opens the record's Properties dialog box. Make the necessary changes and click OK.

Adding Name Servers or NS Records in DNS

Name Server records specify the name servers for the domain. Each primary and secondary name server should be declared through this record. If you obtain secondary name services from an Internet service provider, be sure to insert the appropriate Name Server records.

You create a Name Server record by doing the following:

1. In the DNS console, expand the Forward Lookup Zones folder for the server you want to work with.

2. Display the DNS records for the domain by selecting the domain folder in the tree view.

3. Right-click an existing Name Server record in the view pane, and then select Properties. This opens the Properties dialog box for the domain with the Name Servers tab selected, as shown in below figure.

4. Click Add.

5. In the Server Name field, type the fully qualified host name of the DNS server you're adding.

Configure name servers for the domain through the domain's Properties dialog box.

6. In the IP Address field, type the primary IP address for the server. Click Add. Repeat this process to specify additional IP addresses for the server. The order of the entries determines which IP address is used first. Change the order as necessary using the Up and Down buttons.

7. Click OK. Repeat steps 5–7 to specify other DNS servers for the domain.

Adding Mail Exchange MX Servers records in DNS

MX records identify mail exchange servers for the domain. These servers are responsible for processing or forwarding mail within the domain. When you create an MX record, you must specify a preference number for the mail server. A preference number is a value from 0 to 65,535 that denotes the mail server's priority within the domain. The mail server with the lowest preference number has the highest priority and is the first to receive mail. If mail delivery fails, the mail server with the next lowest preference number is tried.

You create a MX record by doing the following:

1.     In the DNS console, expand the Forward Lookup Zones folder for the server you want to work with.

2.     Right-click the domain you want to update, and then from the pop-up menu, choose New Mail Exchanger. This opens the dialog box shown in below figure.

3.     You can now create a record for the mail server by filling in these fields:

o    Host Or Domain Enter the optional host name.

o    Mail Server Enter the fully qualified host name.

o    Mail Server Priority Enter a preference number for the host from 0 to 65,535.

Mail servers with the lowest preference number have the highest priority.

Tip Assign preference numbers that leave room for growth. For example, use 10 for your highest priority mail server, 20 for the next, and 30 for the one after that.

4.     Click OK.

My Password Keeps getting Locked

 

In my Active Directory My Password Keeps getting locked, How can i troubleshoot ? What could be wrong ?

After 5 unsuccessful login users account will be locked. Usually these incidents resolved by service desk team. Incase the same account is repeatedly locking out then incident will be transferred to Directory services to check the caller machine (computer name) causing account lockout. There so many ways to find out the lockout status. In my LAB environment I am using change auditor. The console is installed in Test Server.

 

1.1.1 Steps to know the status of account lockout:

Open Change Auditor client in Test Server

1.     As per below screen shot go to shared –Built-in-All Events. In Right had side you will get all the events. Copy the “All Account Lockout Events” paste it to private search folder so that the searches we are doing will be only in our profile.

 

2.     Now go private search folder  and hit on “All account Lockout Events”.

3.     By default change auditor will open 7days account lock out users data. We can use tabs to filter the data. Tabs  are very much self explanative. Eg: Who,What,when

4.     After receiving the search results it will show where and when account is locked out.

What are the Default Domain Policy

Controlled by Default Domain Policy	Settings
Account Policies
Account Lockout Threshold.	5
Account Lockout Duration.	0
Reset Account Lockout Counter After.	30
Maximum Password Age.	60 Days
Minimum Password Age.	1 Day
Minimum Password Length	7 Characters
Passwords Must Meet Complexity Requirements	Enabled
Enforce Password History.	6 passwords remembered
Store Passwords Using Reversible Encryption for All Users in the Domain	Disabled
Change System Time	LOCAL Service, Administrators, Power Users

Above are the default Domain Policy settings .