XTR Consulting: A SOHO Network with Dedicated ServersCSIE/ycliaw/BDC/01_Introduction_1B.pdf ·...
Transcript of XTR Consulting: A SOHO Network with Dedicated ServersCSIE/ycliaw/BDC/01_Introduction_1B.pdf ·...
1
XTR Consulting: A SOHO Networkwith Dedicated Servers
Chapter 1b
Panko’sBusiness Data Networks and Telecommunications, 5th editionCopyright 2005 Prentice-Hall
2Figure 1b-1: XTR Consulting’s NetworkVersus Pat Lee’s Network
Pat Lee’s HomeNetwork
XTR Consulting’sSmall Office Network
Number of Client PCs 2 PCs Plus aNotebook PC
17 User PCs
File Service Peer-to-Peer Dedicated Server Systems Administration
Access Router andEthernet Switch
Combined Separate BoxesAccess Router Has Firewall
Print Service Peer-to-Peer Print Servers
2
3Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers
Peer-to-Peer NetworksClients serving other clients
Inexpensive--no need to purchase a dedicated server
Operational problems for other users if a user PC isturned off or crashes
Poor security: No password or shared password forshared directories
4Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers, Continued
Server Technology
PC Servers and Network Operating Systems(NOSs)
Standard PC architectures butMore RAM
Large and fast hard disk drives
Redundant power supplies andfans
Multiple processors(multiprocessing) PC Server
3
5Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers, Continued
Server TechnologyPC Servers and NetworkOperating Systems (NOSs)
Network operatingsystems (NOSs) areserver operating systemsthat have more functionsand reliability than clientoperating systems
NOS forPC Server
6Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers, Continued
Server TechnologyWorkstation Servers
Fast (and expensive) custommicroprocessors for an expensive computerUnix
Extremely reliableDifficult to learnNot standardized
Unix
Sun Workstations Server
4
7Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers, Continued
Server TechnologyMainframe Servers
Faster, more reliable, and more expensive thanworkstation servers
Require a large systems programming staff
SystemsProgrammers
Mainframe
8Figure 1b-2: Peer-to-Peer Service VersusDedicated Servers, Continued
Server TechnologyServer Farms
Group of PC servers or workstation servers
HTTP-1 HTTP-2 HTTP-3 FTP-1
5
9Figure 1b-3: Server Farm with Load-Balancing Router
Load-BalancingRouter
HTTP-1 HTTP-2 HTTP-3 FTP-1
Load-balancingrouter selectshost on the
basis ofload and
applicationssupportedby the host
10Figure 1b-3: Server Farm with Load-BalancingRouter, Continued
Benefits of Server Farms
ScalabilityAdd server capacity as needed
ReliabilityIf one server fails, system continues to work withslightly less processing power
6
11Figure 1b-4: Popular PC Server NetworkOperating Systems (NOSs)
MicrosoftWindows Server LINUX Novell NetWare
Ease of Learning Very Good Poor Good
Ease of Use Very Good Poor Good
Reliability Very Good in recent versions Excellent Very Good
Standardization
Availability ofDevice Drivers
Purchase Price
Excellent
Excellent
Moderate
Poor (ManyDistributions)
Poor
Low or Free
Excellent
Very Good
Higher thanWindows
ManagementLabor Moderate High Higher than
Windows
12Figure 1b-5: Microsoft Windows 2003Server User Interface
3.Explorer,Recycle
Bin
4. Can Run Client Windows Programs
1.Start
Button 2.All Programs
7
13Figure 1b-5: Microsoft Windows 2003Server User Interface, Continued
1.Most Administrative Tools
Are Accessed Via
Start / Administrative Tools(Individual Tools)
2.Or Via
Start / Manage Your Server(Wizard)
14Figure 1b-6: Microsoft ManagementConsole
3. 4.
Individual toolsare organizedas MicrosoftManagement
Consoles (MMCs),which havea fixed basic
organization, togive ease of
learning
8
15Figure 1b-7: Managing Access Permissions
Accounts
Have usernames and passwords
Accounts are assigned permissions in directories
Whether the account holder can go to a directoryat all
What the account holder can do in the directoryif permitted to go there
16Figure 1b-7: Managing Access Permissions,Continued
Microsoft Windows Permissions
No PermissionsCannot even see the directory
List Folder ContentsAllows the account owner to see the contents of afolder (directory)
ReadRead-only access. Without further permissions,the account owner cannot change the files
9
17Figure 1b-7: Managing Access Permissions,Continued
Microsoft Windows PermissionsWrite
Edit the contents of files
ModifyGives additional permissions to act upon files, forexample the permission to delete a file, which isnot included in Write
Read and ExecuteAccount can run a program
18Figure 1b-7: Managing Access Permissions,Continued
Microsoft Windows PermissionsFull Control
Is an omnibus permission. It is equal to all of theabove permissions
10
19Figure 1b-7: Managing Access Permissions,Continued
Unix PermissionsRead (only)
Write
Execute (run programs)
20Figure 1b-7: Managing Access Permissions,Continued
WindowsList folder contents
Read
Write
Modify
Read and Execute
Full Control
Granular for preciseaccess control
UnixRead
Write
Execute
Crude access control
11
21Figure 1b-7: Managing Access Permissions,Continued
Windows can assigndifferent permissions fora file or directory to
Many different individualaccounts
Many different groupaccounts
Unix can only assigndifferent permissions fora file or directory to
The owner
One group
Everyone else
Flexible access control Inflexible access control
22Figure 1b-7: Managing Access Permissions,Continued: Recap
Windows
6 major permissions
Can assign differentpermissions to manyindividuals andgroups
Highly flexible
Unix
Only 3 majorpermissions
Can only assign differentpermissions to the owner,one group, and the restof the world
Highly inflexible
12
23Figure 1b-7: Managing Access Permissions,Continued
Administrator Account in WindowsNecessary for systems administration
Systems administration is the management ofone or more serversNot necessarily all servers
Dangerous in terms of securityHas all permissions in all directories
Comparable account in Unix is root
24Figure 1b-7: Managing Access Permissions,Continued
Reducing the Work of Assigning Permissions toAll Accounts in All Directories
GroupsAssign permissions to groups; all group membersreceive the permissionFaster than assigning permission to individuals
Group:MarketingWrite
In MarketingDirectory
Ochoa
Chen
Williams
WriteIn Marketing
Directory
13
25Figure 1b-7: Managing Access Permissions,Continued
Reducing the Work of Assigning PermissionsInheritance: permissions are inherited bysubdirectories to reduce permission assignmentwork
Public Directory
TrainingMapsPolicies
Personnel Discipline
Group Everyone Gets Read
ReadRead Read
ReadNo Inheritance
26Figure 1b-8: Assigning DirectoryPermissions in Windows Server 2003
1.SelectedDirectory
3. User or Group(Power Users)
4. PowerUser
Permissions
5.
2. 6.
14
27Figure 1b-9: File Service for Data Files
Save
Retrieve
User A User B User C
No Access
File Server with Programand Data Files
28Figure 1b-10: File Server Program Access
1.ProgramStored onFile Server File
Server
2.Program
Downloadedto Client PCWhen Called
3.ProgramExecuted
onClient PC
Client PC
15
29Figure 1b-11: File Server Program Accessand Program Installation
2. Programdownloaded to
Client PCswhen called
1. Programis installedonly once,on a fileserver
FileServer
Client PC
Client PC3. No need
to installon eachclient PC
3. No needto installon eachclient PC
4.This process greatly reduces
software installation andupgrading costs
30Figure 1b-12: Print Server Operation
Hub orSwitch
Client PC
UTP up to100 m Print
Server Printer
Parallel or USB Cable1-2 meters
Print server feeds print jobs to the printer
Print server connects to printer viaparallel or USB cable,so only 1-2 meters from the printer
Print server connects to port on switch via UTP,so maximum distance to switch is 100 meters
16
31Figure 1b-12: Print Server Operation, Continued
Hub orSwitch
Client PC
Network-CapablePrinter
(with built-inprint server)
UTP up to 100 m
UTP up to100 m Print
Server Printer
Parallel Cable1-2 meters
Some high-end printersare network-capable,with built-in print servers
Connect directly to the switch
32Figure 1b-12: Print Server Operation, Continued
Hub orSwitch
UTP upto 100 m
Client PC
Printer
File Server acting as Print Server
UTP up to100 m Print
Server Printer
1-2m
Parallel Cable1-2 meters
File servers can act as print servers;But file servers are rarely near users
17
33Figure 1b-13: Print Server (Photo)
RJ-45Port
Parallelor USB
Port
PowerSupply
Port
Parallel or USBCable to PrinterRJ-45 Cord
to Switch Port
34Topics Covered
Dedicated Servers
PC servers, workstation servers, andmainframes
Server farms and load-balancing routers
NOSs for PC servers: Windows Server, Linux(a version of Unix), and NetWare
18
35Topics Covered
Accounts, usernames, and permissions
Windows versus Unix permissions
Server farms and load-balancing routers
NOSs for PC servers: Windows Server, Linux,and NetWare
Groups and automatic inheritance
36Topics Covered
File ServersSharing data files
File server program access
Print ServersBetween the switch and the printer