Administration

Snapshot restore

noreply@blogger.com (msvsdak) — Sun, 23 Sep 2012 08:40:00 +0000

Whenever u take a snapshot of an OS then U have to restore for the same drive only otherwise it wont work with other system. We have to use the snapshot for same type of systems only.

Router PPPoe configuratjion

noreply@blogger.com (msvsdak) — Sun, 23 Sep 2012 08:38:00 +0000

If your PPP0e configuration is not working properly then do the following............................
First reset the router then linksys router just mention the username and password of you ISP account and save it. Other way is to take the back of config file and then restore it when ever its fail to get an IP.
It will work fine for u.

puppet master installation in RHEL 5

noreply@blogger.com (msvsdak) — Tue, 12 Jun 2012 17:54:00 +0000

I have installed puppet enterprise along with dns.

[root@puppet ~]# ./puppet-enterprise-2.5.1-el-5-i386/puppet-enterprise-installer

================================================================================

Puppet Enterprise v2.5.1 installer

Puppet Enterprise documentation can be found at http://links.puppetlabs.com/puppet_enterprise_2.5_documentation

--------------------------------------------------------------------------------

STEP 1: SELECT AND CONFIGURE ROLES

This installer will offer to install the puppet master, console, cloud

provisioner, and puppet agent roles.

-> puppet master

The puppet master serves configurations to a group of puppet agent nodes.

This role also provides MCollective's message queue and client interface.

It should be installed on a robust, dedicated server.

?? Install puppet master? [y/N] y

-> cloud provisioner

The cloud provisioner can create and bootstrap new machine instances and

add them to your Puppet infrastructure. It should be installed on a

trusted node where site administrators have shell access.

?? Install the cloud provisioner? [y/N] y

-> console

The console is a web interface for viewing reports, classifying nodes,

directly managing resources, controlling Puppet runs, and invoking

MCollective agents. It should usually be installed on the puppet master

server, but can also installed separately.

?? Install the console? [Y/n] y

-> puppet agent

The puppet agent role is automatically installed with the console, puppet

master, and cloud provisioner roles.

?? The puppet master's certificate will contain a unique name ("certname");

this should be the main DNS name at which it can be reliably reached.

Puppet master's certname? [Default: puppet.anjan.local]

?? The puppet master's certificate can contain DNS aliases; agent nodes will

only trust the master if they reach it at its certname or one of these

official aliases. Puppet master's DNS aliases (comma-separated list)?

[Default: puppet,puppet.anjan.local]

?? Admin email address (will be used as account name) for accessing the

console interface? root@puppet.anjan.local

?? Password for user root@puppet.anjan.local (minimum 8 characters)?

Confirm Password:

?? The console requires a MySQL database server. Install a new database

server from your operating system's repository? [Y/n] y

?? The new MySQL server software has a 'root' user account; what should its

password be (minimum 4 characters)?

Confirm Password:

The console requires an SMTP server to email account information to

users.

?? What is the name of your SMTP server? puppet.anjan.local

?? Console database name? [Default: console]

?? Console database user? [Default: console]

?? Database user password (minimum 4 characters)?

Confirm Password:

!! ERROR: Password mismatch: Please try again

?? Database user password (minimum 4 characters)?

Confirm Password:

?? What is the name of the authentication database? [Default: console_auth]

?? What is the name of the user authentication database user? [Default:

console_auth]

?? What is the password for console_auth (the user authentication database

user)?

Confirm Password:

-> Vendor Packages

The installer has detected that Puppet Enterprise requires additional

packages from your operating system vendor's repositories, and can

automatically install them. If you choose not to install these packages

automatically, the installer will exit so you can install them manually.

Additional vendor packages required for installation:

* jre >= 1.6.0

* mysql

* mysql-server

?? Install these packages automatically? [Y/n] y

-> Convenience Links

The selected Puppet software will be installed into "/opt/puppet", which

may not be included in your default shell PATH. For ease of use, this

installer can create symbolic links to these executables in

"/usr/local/bin".

?? Create symbolic links to Puppet executables in "/usr/local/bin"? [Y/n] y

--------------------------------------------------------------------------------

STEP 2: CONFIRM PLAN

You have selected to install the following components (and their dependencies)

* Puppet Master

* Console

* Cloud Provisioner

* Puppet Agent

?? Perform installation? [Y/n] y

## Saved answers to file: ./puppet-enterprise-2.5.1-el-5-i386/answers.lastrun.puppet.anjan.local

================================================================================

## Saved answers to file: /etc/puppetlabs/installer/answers.install

Created: /etc/puppetlabs/facter/facts.d

--------------------------------------------------------------------------------

STEP 3: INSTALL PACKAGES

## Installing packages from repositories...

Loaded plugins: rhnplugin, security

This system is not registered with RHN.

RHN support will be disabled.

Setting up Install Process

Resolving Dependencies

--> Running transaction check

---> Package java-1.6.0-openjdk.i386 1:1.6.0.0-1.2.b09.el5 set to be updated

--> Processing Dependency: jpackage-utils >= 1.7.3-1jpp.2 for package: java-1.6.0-openjdk

--> Processing Dependency: libgif.so.4 for package: java-1.6.0-openjdk

---> Package mysql.i386 0:5.0.77-3.el5 set to be updated

--> Processing Dependency: perl(DBI) for package: mysql

---> Package mysql-server.i386 0:5.0.77-3.el5 set to be updated

--> Processing Dependency: perl-DBD-MySQL for package: mysql-server

--> Running transaction check

---> Package giflib.i386 0:4.1.3-7.1.el5_3.1 set to be updated

---> Package jpackage-utils.noarch 0:1.7.3-1jpp.2.el5 set to be updated

---> Package perl-DBD-MySQL.i386 0:3.0007-2.el5 set to be updated

---> Package perl-DBI.i386 0:1.52-2.el5 set to be updated

--> Finished Dependency Resolution

Dependencies Resolved

================================================================================

Package Arch Version Repository Size

================================================================================

Installing:

java-1.6.0-openjdk i386 1:1.6.0.0-1.2.b09.el5 Server 28 M

mysql i386 5.0.77-3.el5 Server 4.8 M

mysql-server i386 5.0.77-3.el5 Server 9.8 M

Installing for dependencies:

giflib i386 4.1.3-7.1.el5_3.1 Server 39 k

jpackage-utils noarch 1.7.3-1jpp.2.el5 Server 61 k

perl-DBD-MySQL i386 3.0007-2.el5 Server 147 k

perl-DBI i386 1.52-2.el5 Server 605 k

Transaction Summary

================================================================================

Install 7 Package(s)

Update 0 Package(s)

Remove 0 Package(s)

Total download size: 44 M

Downloading Packages:

--------------------------------------------------------------------------------

Total 3.6 GB/s | 44 MB 00:00

Running rpm_check_debug

Running Transaction Test

Finished Transaction Test

Transaction Test Succeeded

Running Transaction

Installing : perl-DBI 1/7

Installing : jpackage-utils 2/7

Installing : mysql 3/7

Installing : perl-DBD-MySQL 4/7

Installing : giflib 5/7

Installing : mysql-server 6/7

Installing : java-1.6.0-openjdk 7/7

Installed:

java-1.6.0-openjdk.i386 1:1.6.0.0-1.2.b09.el5 mysql.i386 0:5.0.77-3.el5

mysql-server.i386 0:5.0.77-3.el5

Dependency Installed:

giflib.i386 0:4.1.3-7.1.el5_3.1 jpackage-utils.noarch 0:1.7.3-1jpp.2.el5

perl-DBD-MySQL.i386 0:3.0007-2.el5 perl-DBI.i386 0:1.52-2.el5

Complete!

## Installing packages from files...

Preparing... ########################################### [100%]

1:pe-puppet-enterprise-re########################################### [ 2%]

2:pe-ruby-libs ########################################### [ 4%]

3:pe-ruby ########################################### [ 5%]

4:pe-httpd ########################################### [ 7%]

5:pe-ruby-mysql ########################################### [ 9%]

6:pe-facter ########################################### [ 11%]

7:pe-ruby-irb ########################################### [ 13%]

8:pe-ruby-rdoc ########################################### [ 14%]

9:pe-rubygems ########################################### [ 16%]

10:pe-rubygem-stomp ########################################### [ 18%]

11:pe-rubygem-rake ########################################### [ 20%]

12:pe-mcollective-common ########################################### [ 21%]

13:pe-rubygem-rack ########################################### [ 23%]

14:pe-httpd-passenger ########################################### [ 25%]

15:pe-rubygem-activesuppor########################################### [ 27%]

16:pe-rubygem-activerecord########################################### [ 29%]

17:pe-rubygem-builder ########################################### [ 30%]

18:pe-rubygem-excon ########################################### [ 32%]

19:pe-rubygem-formatador ########################################### [ 34%]

20:pe-rubygem-guid ########################################### [ 36%]

21:pe-rubygem-mime-types ########################################### [ 38%]

22:pe-rubygem-multi-json ########################################### [ 39%]

23:pe-rubygem-net-ssh ########################################### [ 41%]

24:pe-rubygem-net-scp ########################################### [ 43%]

25:pe-rubygem-nokogiri ########################################### [ 45%]

26:pe-rubygem-rbvmomi ########################################### [ 46%]

27:pe-rubygem-ruby-hmac ########################################### [ 48%]

28:pe-rubygem-fog ########################################### [ 50%]

29:pe-rubygem-trollop ########################################### [ 52%]

30:pe-ruby-shadow ########################################### [ 54%]

31:pe-puppet ########################################### [ 55%]

32:pe-rubygem-hiera ########################################### [ 57%]

33:pe-augeas-libs ########################################### [ 59%]

34:pe-tanukiwrapper ########################################### [ 61%]

35:pe-activemq ########################################### [ 63%]

36:pe-augeas ########################################### [ 64%]

37:pe-rubygem-hiera-puppet########################################### [ 66%]

38:pe-cloud-provisioner ########################################### [ 68%]

39:pe-puppet-server ########################################### [ 70%]

40:pe-mcollective ########################################### [ 71%]

41:pe-mcollective-client ########################################### [ 73%]

42:pe-rubygem-stomp-doc ########################################### [ 75%]

43:pe-ruby-augeas ########################################### [ 77%]

44:pe-ruby-ldap ########################################### [ 79%]

45:pe-ruby-ri ########################################### [ 80%]

46:pe-mod_ssl ########################################### [ 82%]

47:pe-libevent ########################################### [ 84%]

48:pe-memcached ########################################### [ 86%]

49:pe-puppet-dashboard ########################################### [ 88%]

50:pe-rubygem-sinatra ########################################### [ 89%]

51:pe-console-auth ########################################### [ 91%]

52:pe-rubygem-ar-extension########################################### [ 93%]

53:pe-rubygem-dalli ########################################### [ 95%]

54:pe-live-management ########################################### [ 96%]

55:pe-puppet-dashboard-bas########################################### [ 98%]

56:pe-rubygem-tilt ########################################### [100%]

## Setting up puppet master...

## Checking the agent certificate name detection...

## Setting up puppet agent...

## Setting up the console...

## Starting http server for puppet master and console.

## Creating symbolic links in "/usr/local/bin"...

Generating collective password...

Running puppet apply to configure MCollective ...

MCollective configuration is complete ...

--------------------------------------------------------------------------------

STEP 4: DONE

Thanks for installing Puppet Enterprise!

Puppet Enterprise has been installed to "/opt/puppet," and its

configuration files are located in "/etc/puppetlabs".

## Answers from this session saved to './puppet-enterprise-2.5.1-el-5-i386/answers.lastrun.puppet.anjan.local'

================================================================================

The console can be reached at the following URI:

* https://puppet.anjan.local:443

If you have a firewall running, please ensure the following TCP ports are

open: 8140, 61613, 443

WARNING: This system has 1010.88 MB of memory, which is below the minimum

requirement of 1 GB for the puppet master role. You can attempt to use

this system as a puppet master, but will probably experience serious

problems unless you increase its memory.

=========================================================================

SSH login in ubuntu

noreply@blogger.com (msvsdak) — Mon, 23 Apr 2012 17:07:00 +0000

usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec]
[-D [bind_address:]port] [-e escape_char] [-F configfile]
[-i identity_file] [-L [bind_address:]port:host:hostport]
[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
[-R [bind_address:]port:host:hostport] [-S ctl_path]
[-w local_tun[:remote_tun]] [user@]hostname [command]

Package Management

noreply@blogger.com (msvsdak) — Mon, 23 Apr 2012 16:57:00 +0000

Usage: apt-get [options] command
apt-get [options] install|remove pkg1 [pkg2 ...]
apt-get [options] source pkg1 [pkg2 ...]

apt-get is a simple command line interface for downloading and
installing packages. The most frequently used commands are update
and install.

Commands:
update - Retrieve new lists of packages
upgrade - Perform an upgrade

install - Install new packages (pkg is libc6 not libc6.deb)
remove - Remove packages
autoremove - Remove automatically all unused packages
purge - Remove packages and config files
source - Download source archives
build-dep - Configure build-dependencies for source packages
dist-upgrade - Distribution upgrade, see apt-get(8)
dselect-upgrade - Follow dselect selections
clean - Erase downloaded archive files
autoclean - Erase old downloaded archive files
check - Verify that there are no broken dependencies

Options:
-h This help text.
-q Loggable output - no progress indicator
-qq No output except for errors
-d Download only - do NOT install or unpack archives
-s No-act. Perform ordering simulation
-y Assume Yes to all queries and do not prompt
-f Attempt to correct a system with broken dependencies in place
-m Attempt to continue if archives are unlocatable
-u Show a list of upgraded packages as well
-b Build the source package after fetching it
-V Show verbose version numbers
-c=? Read this configuration file
-o=? Set an arbitrary configuration option, eg -o dir::cache=/tmp

Usage: dpkg [<option> ...] <command>

Commands:
-i|--install <.deb file name> ... | -R|--recursive <directory> ...
--unpack <.deb file name> ... | -R|--recursive <directory> ...
-A|--record-avail <.deb file name> ... | -R|--recursive <directory> ...
--configure <package> ... | -a|--pending
--triggers-only <package> ... | -a|--pending
-r|--remove <package> ... | -a|--pending
-P|--purge <package> ... | -a|--pending
--get-selections [<pattern> ...] Get list of selections to stdout.
--set-selections Set package selections from stdin.
--clear-selections Deselect every non-essential package.
--update-avail <Packages-file> Replace available packages info.
--merge-avail <Packages-file> Merge with info from file.
--clear-avail Erase existing available info.
--forget-old-unavail Forget uninstalled unavailable pkgs.
-s|--status <package> ... Display package status details.
-p|--print-avail <package> ... Display available version details.
-L|--listfiles <package> ... List files `owned' by package(s).
-l|--list [<pattern> ...] List packages concisely.
-S|--search <pattern> ... Find package(s) owning file(s).
-C|--audit Check for broken package(s).
--print-architecture Print dpkg architecture.
--compare-versions <a> <op> <b> Compare version numbers - see below.
--force-help Show help on forcing.
-Dh|--debug=help Show help on debugging.

-h|--help Show this help message.
--version Show the version.
--license|--licence Show the copyright licensing terms.

Use `dselect' or `aptitude' for user-friendly package management.

Domain naming system

noreply@blogger.com (msvsdak) — Sat, 21 Apr 2012 09:48:00 +0000

Dns is used to resolve host name to IP address & vice versa. The Dns is present in NT, 2000, 2003 and 2008 operating systems In NT Dns is integrated with web services. In 2000 and 2003 Dns is integrated with active directory services. Dns uses FQDNS [fully qualified domain naming system or structure].
FQDNS= SYSTEM NAME+DOMAIN NAME.
Dns is for identifying host on internet or public network & in private network. Its a method of identifying host instead of IP Address. Its a mechanism for storing & maintaining a list of names an IP address of hosts.
Requirements for Dns: 2003 os cd, require static ip primary dns suffix and port no 53.
Zone: Its a sub tree of dns database. It contains mapping information with help of forward and reverse lookup zone.

Forward lookup zone: Which contains hostname to IP address mapping. It contains host records(A).
Reverse lookup zone: Which contains IP to hostname mapping. It contains pointer(ptr).
Stub zone: Its a substitute zone which contains server glue records only dns server records.
Recursive Query: The query passed into local dns server for resolving the query if not resolved then the dns server on behalf of the client forwarded to another dns server until it gets resolved.
Interactive Query: If the query raised by the client to local Dns server is failed, it sends a negative reply to client instead of forwarding to another dns.
Primary zone: Its a read write copy created on dns server.
secondary zone: Its a read only copy created on dns server.
zone transfer: Its used to transfer zone records from primary dns server to secondary dns server.
AD integrated zone: Its useful when we want to maintain the zone information in active directory zone. If we save the records in AD when we take the system backup we can get the dns server backup too.
Trouble shooting: If you are not able to get records from dns server to secondary dns server.
1. Check the prefered dns IP on secondary dns server.
2. Check the zone transfer tab is having secondary dns server ip on primary dns server.
3. Restart dns services.
Backup of primary dns server: We need to take two registry files in hkey local system/system/controlset001/services/dns and \hkey local machine\softwares\microsoftwindowsNT\current version\dns server and the dns server folder in system32 for backup.

How to config vnc server and client in rhel or centos

noreply@blogger.com (msvsdak) — Thu, 19 Apr 2012 18:20:00 +0000

Configuration of vnc server is so easy…………..
If you have not installed x window system in you rhel or centos then install with groupinstall.#yum group install “x window system”
Install vnc server #yum install vnc* -y
#vncpasswd
type the passwordNow start the service
#service vncserver start

To make vncserver type this command#vncserver

Vnc server configuration file#vi .vnc/xstartup

If you are using iptables do not forget to enable the port 5901.Uncomment the following lines in the file
unset SESSION_MANAGER
exec /etc/X11/xinit/xinitrc

vi /etc/sysconfig/iptables
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 5901 -j ACCEPT
save the above line

#service network restart

#service vncserver restart

Vnc client sideRun the following command#vncviewer
Server: 192.168.1.101:2
Password: ****** Its done

In windows Install vnc viewer and the login by using192.168.1.101:5901
passwd: *******

NIS CONIFGURATION IN RHEL5

noreply@blogger.com (msvsdak) — Thu, 19 Apr 2012 18:19:00 +0000

NFS Server
------------------
yum install nfs-utils
chkcofig nfs-utils --level 35 on
vim /etc/exports
/home 192.168.0.0/255.255.255.0(rw,sync)

service nfs start
-------------------------------
NIS Server
-------------------------------
yum install ypserv
chkconfig ypserv --level 35 on
nisdomainname REDHAT

vim /etc/sysconfig/network (append the below line)
NISDOMAIN=REDHAT

useradd jane
passwd jane
useradd tom
passwd tom

service ypserv start

/usr/lib/yp/ypinit -m
ctrl+D

cd /var/yp/
make

service ypserv restart

-------------------------------------------
Client
-------------------------------------------
yum install ypbind
chkconfig ypbind --level 35 on

nisdomainname REDHAT

vim /etc/sysconfig/network (append the below line)
NISDOMAIN=REDHAT

setup
User Information
[*] NIS

DOMAIN: REDHAT
Server: serverX.example.com (NIS Server)

vim /etc/auto.master
/home /etc/auto.misc

vim /etc/auto.misc

james -rw,soft,intr 192.168.0.3:/home/james
or
* -rw,soft,intr 192.168.0.3:/home/&

service ypbind restart
service autofs restart

ypcat passwd
ypcat group

LVM CONFIGURATION IN RHEL5

noreply@blogger.com (msvsdak) — Thu, 19 Apr 2012 18:18:00 +0000

Create 3 partitions any size
eg: /dev/sda{8,9,20}
pvdislpay
pvcdeate /dev/sda{8,9,20}
pvdisplay (can see physical volumes)

vgdisplay
vgcreate vol0 /dev/sda{8,9,20}
vgdisplay (can see volume groups)

lvdiplay
lvcreate -L +300M -n lv0 vol0
lvcreate -L +200M -n lv1 vol0
lvdisplay

mkfs.ext3 /dev/vol0/lv0
mkfs.ext3 /dev/vol0/lv1

mkdir /LV0
mount /dev/vol0/lv0 /LV0
df -Th

lvextend -L +100M /dev/vol0/lv0
lvdislpay
mkfs.ext3 /dev/vol0/lv0
resize2fs /dev/vol0/lv0

lvreduce -L -200M /dev/vol0/lv1 (take backup of data before reducing and formating)
lvdislpay
mkfs.ext3 /dev/vol0/lv1
resize2fs /dev/vol0/lv1

lvrename /dev/vol0/lv0 kalyan
lvdisplay

Create new partition
eg: /dev/sda11
pvcreate /dev/sda11
vgextend vol0 /dev/sda11
vgdisplay

How to recovery data from formatted Hard disk.

noreply@blogger.com (msvsdak) — Mon, 16 Apr 2012 16:52:00 +0000

All of a sudden If all the partitions of you system has gone. Even though we can recovery the data back 100% by using simple software call Hiren boot cd. You can download the iso image and burn to a cd then boot the cd at startup and run windows xp live cd. Now in Hiren boot cd options in that recovery options in that Get Ntfs or fat data back application. Which is very useful and powerful to get the data back.

How to host a website using IIS windows.

noreply@blogger.com (msvsdak) — Sat, 31 Mar 2012 08:50:00 +0000

FTP Site Virtual Directory Properties - Virtual Directory Tab

Use this tab to change the properties of a virtual directory in your FTP site. A virtual directory is a directory that is not physically contained within the home directory. To visitors of your site, it appears as though the virtual directory is contained within the home directory.

To add a new virtual directory to an FTP site, right-click the FTP site in IIS Manager, select Create New, and then click Virtual Directory.

The content for this resource should come from

A directory located on this computer

Click to permit users to access a specified directory on this computer to view or update FTP content. You can control access to the content by implementing any Windows security method.

In the Local Path box, type the path to the directory or the destination URL. The syntax must match the currently selected path type. For a local directory, use the full path, for example, C:\Inetpub\Ftproot). For a network share, use a Universal Naming Convention (UNC) server and share name, for example \\Webserver\htmlfiles.

A directory located on another computer

Click to permit users to view or update FTP content on another computer that has an active connection to this computer. If you have administrative credentials on the remote computer, you can control access to the content by implementing any Windows security method.

In the Network share box you can type the server name and directory name. Click the Connect As button to type or change the network user name and password information.

FTP site directory

If you click A directory located on this computer, the following options are available:

Local path

When content comes from a directory located on this computer, this box displays the path to the directory that stores your FTP site files. By default, these files are stored in the %localdrive%\inetpub\Ftproot directory.

Browse

Click to locate the directory path.

If you click A directory located on another computer, the following options are available:

Network share

Type the server name and directory name.

Connect as

Click to provide a user name and password for access to the network share.

If you click either A directory located on this computer or A directory located on another computer, the following options are available:

Read

Select to enable users to read or download files stored in a home directory or a virtual directory.

Write

Select to allow users to upload files to the enabled directory on your server. You should enable write permissions only for directories that are intended to accept files from users.

Log visits

Select to record visits to this directory in a log file. Visits are recorded only if logging is enabled for this FTP site. Logging is enabled by default.

Related Topics:

To learn more about FTP site administration, see FTP Site Administration in IIS Help.

To learn more about setting up an FTP site, see FTP Site Setup in IIS Help.

To learn more about logging site activity, see Logging Site Activity in IIS Help.

FTP Site Properties - Directory Security Tab

Use this tab to allow or block access to your FTP site to individual computers or groups of computers.

TCP/IP address access restrictions

By specifying the TCP or IP address of the computer or computers to be assigned or denied access, you can control access to FTP resources, such as sites, virtual directories, or files.

Granted access

Click this option to grant access to all computers.

To add computers, groups of computers, or domains that you want to deny access to, click Add, and type the required information in the Deny Access dialog box. The computers that are denied access appear in the Except the following list box.

Denied access

Click this option to deny access to all computers.

To add computers, groups of computers, or domains that you want to grant access to, click Add, and type the required information in the Grant Access dialog box. The computers that are granted access appear in the Except the following list box.

Add

Click to define a computer or group of computers to which you want to grant or deny access.

Note Computers accessing your server across proxy servers appear to have the same IP address as the proxy server.

Remove

Click to remove the currently selected item from the exception list.

Edit

Click to modify the specific properties of the currently selected item in the exception list.

Related Topics:

To learn more about FTP site administration, see FTP Site Administration in IIS Help.

To learn more about FTP authentication and security, see FTP Site Authentication in IIS Help.

Grant Access or Deny Access

Use these two dialog boxes to list the computers, groups of computers, or domains that you want to grant or deny access to this resource.

Single computer

Click to define access rights for a single computer.

If you select a single computer you will need to know the IP address of the computer.

IP address

Type the Internet Protocol (IP) address of the computer.

DNS Lookup

Click to look up a specific computer's IP address using the domain name (for example, www.MyServer.com). In the DNS Lookup dialog box, type the DNS name for the computer in the Type the DNS name box, and click OK.

You can configure IIS to perform a DNS lookup every time access is requested for the site, virtual directory, or file. However, using the DNS lookup each time a request is made can affect server performance.

Note If you get a "Host not found" error, either the domain name you typed in is incorrect, or the computer you referred to is not available on the network.

Groups of computers

Click to define access rights for a group of computers based on network ID and subnet mask.

When you grant or deny access to groups of computers, you are required to identify them by network ID and subnet mask. A subnet mask, or address mask, is a numerical address of a subnet that includes the network. The mask simply overlays all but the significant part of the network address. Ask your network administrator for information about TCP/IP networking, IP addressing, and the use of subnet masks.

Network ID

This identifies the numerical address of the network that the group of computers are members of.

Subnet mask

This identifies the address mask that, to make the subnet address unique, replaces all but the non-significant numbers of the network ID in order to make the subnet address unique.

Related Topics

To learn more about security, see Security in IIS Help.

To learn about FTP authentication, see FTP Site Authentication in IIS Help.

Application Pools - Recycling Tab

Use this tab to administrate the recycling of worker processes. In worker process isolation mode, you can configure IIS to periodically restart worker processes in an application pool, allowing you to manage precisely those worker processes that are faulty. This ensures that specified applications in those pools remain healthy, and that system resources can be recovered.

To recycle a worker process, the ability of the faulty worker process to receive requests is throttled until it completes processing of all remaining requests that it has stored in the request queue. To drain its current requests, the process is given a configured limit. A replacement worker process for the same namespace group starts before the old worker process stops. This prevents service interruptions. The old process completes its outstanding requests, and then shuts down normally or is explicitly terminated if it does not shut down after a configurable time limit, number of requests, on a set schedule, or when a specified limit of memory usage is reached.

Recycle worker processes (in minutes)

Select to recycle worker processes after a specific period of inactivity.

Recycle worker process (number of requests)

Select to recycle worker processes after a specific number of requests.

Recycle worker processes at the following times

Select to use a scheduling scheme to shut down a process and start a replacement.

Add

Click to add a time of day to the scheduled-based worker process recycling criteria.

Remove

Click to remove the currently selected scheduled-based criteria for worker process recycling.

Edit

Click to modify the currently selected scheduled-based criteria for worker process recycling.

Recycle worker process after consuming too much memory

This option allows use of a memory consumption limit scheme to shut down a process and start a replacement. These settings control the memory recycling thresholds when the amount of virtual memory or private memory used by a worker process becomes too high in relation to total system memory. Memory-based recycling is suited for reducing heap fragmentation and recovering memory from applications with memory leaks.

Maximum virtual memory

Select to set the maximum number of megabytes of your system’s common virtual memory to be used by a worker process before that process is recycled.

Entering too high a value can severely decrease system performance. As a starting point, use the default value and work down to the lowest value possible while maintaining good performance.

Maximum used memory

Select to set the maximum number of megabytes of privately allocated system physical memory to be used by a worker process before the process is recycled.

Entering too high a value can severely decrease system performance. As a starting point, use the default value and work down to the lowest value possible while maintaining good performance.

Related Topics:

To learn more about worker processes and recycling, see Recycling Worker Processes in IIS Help.

Application Pools Properties - Performance Tab

Use this tab to configure the way that Internet Information Services (IIS) shuts down idle worker processes, the number of requests waiting to be processed, CPU monitoring, and the number of processes in a Web garden.

Idle timeout

Idle timeout limits helps conserve system resources by terminating unused worker processes by gracefully closing idle processes after a specified idle duration. This allows you to better manage the resources on particular computers when the processing load is heavy, when identified applications consistently fall into an idle state, or when new processing space is not available.

Shutdown worker processes after being idle for (time in minutes)

Select to terminate any idle worker processes after a specific period of inactivity.

Type a number in the box, or click the up and down arrows, to set the amount of minutes before an idle worker process terminates.

Request queue limit

Select to configure IIS to monitor the number of requests for a designated application pool queue before queuing a new request.

Application pool queue length limits prevent large numbers of requests from queuing up and overloading your server. If adding the new request to the queue exceeds the capacity of the queue, the server rejects the request and sends a non-customizable 503-error response to the client.

Limit the kernel request queue (number of requests)

Select to configure IIS to use a numeric-based scheme for limiting incoming HTTP requests and allow you to limit the size of the request queue. When the limit is reached, IIS does not process those additional requests, but sends a non-customizable 503-error response to the client.

Type a number in the box, or click the up and down arrows, to set the limit for the number of requests allowed in the queue.

Enable CPU monitoring

Select to configure IIS to use CPU accounting to track and terminate worker processes that consume large amounts of CPU time that exceed the specified limits. CPU monitoring is available only for applications pools and does not apply to CGI applications.

Maximum CPU use (percentage)

Type a number in the box, or click the up and down arrows, to set the percentage of CPU usage a worker process is permitted to use.

Refresh CPU usage numbers (in minutes)

Type a number in the box, or click the up and down arrows, to set how often CPU process numbers are to be refreshed in order to be used by CPU monitoring.

Action performed when CPU usage exceeds maximum CPU use

From the list box, click the best action to perform when the CPU exceeds its specified maximum usage.

· If No action is selected, when the CPU usage for a specific application pool or group of pools reaches the set limit, IIS writes an error in the Event Log.

· If Shutdown is selected, when the CPU usage for a specific application pool reaches the set limit, IIS initiates a shutdown of all worker processes in the application pool by allowing each worker process the application pool's specified ShutdownTimeLimit seconds to shut down. If the processes do not shut down in that time frame, IIS terminates the worker processes. The application pool shuts down and resets according to the time limit set in CPUResetInterval.

Web garden

A Web garden is an application pool using more than one worker process.

Maximum number of worker processes

Type a number in the box, or click the up and down arrows, to set the maximum number of worker processes allowed within an application pool.

Related Topics:

To learn more about the timeout and CPU features, see Quality of Service in IIS Help.

To learn more about Web gardens, see Configuring Web Gardens in IIS Help.

Application Pools Properties - Health Tab

Use this tab to configure worker processes health monitoring. You can set limits for communicating with the worker processes, determine a course of action if a number of processes rapidly fail, and set startup and shutdown times.

Enable pinging

Select to configure Internet Information Services (IIS) to ping each worker process in an application pool every specified number of seconds to detect the activity of the processes.

IIS monitors the health of worker processes by periodically pinging them to determine their responsiveness. If worker processes fail to respond to a ping, the worker process is terminated and a replacement worker process is created.

Ping worker process every (frequency in seconds)

Type a number in the box, or click the up and down arrows, to set the time interval, in seconds, when worker processes are pinged for activity.

Enable rapid-fail protection

Select to configure IIS to remove this application pool from service and place it in a mode where the kernel-mode driver immediately returns a 503 Service Unavailable - out-of-service message to any requests to that application pool.

Rapid-fail protection protects your Internet service from widespread interruptions by detecting and isolating application pools where worker processes are rapidly failing.

Failures

Type a number in the box, or click the up and down arrows, to set a numerical limit on unexpected program terminations. This must be set in conjunction with the Time period setting.

Time period (time in seconds)

Type a number in the box, or click the up and down arrows, to set a time limit in which to detect the corresponding number of unexpected program terminations. This must be set in conjunction with the Failures setting.

Startup time limit

Worker process must startup within (time in seconds)

Type a number in the box, or click the up and down arrows, to set the worker process startup time in seconds.

Shutdown time limit

Worker process must shutdown within (time in seconds)

Type a number in the box, or click the up and down arrows, to set the worker process termination time, in seconds, after IIS detects inactivity.

Related Topics:

To learn more about rapid fail protection, see Application Pool Health in IIS Help.

Application Pools Properties - Identity Tab

The identity of an application pool is the name of the account under which an application pool's worker process runs. By default, application pools operate under the NetworkService account, which has the least user rights that are required to run Web applications. This account provides the most security against attackers who might attempt to take over the computer on which the World Wide Web Publishing Service (WWW service) is running. You can configure application pools to run as LocalSystem, which is an account with more assigned user rights than the NetworkService account; however, running an application pool under an account with more user rights assigned presents a more serious security risk.

For example, suppose that an Internet service provider (ISP) wants to allow customers to upload Common Gateway Interface (CGI) applications and then add them to an application pool. Running the CGI-enabled applications in a separate application pool under the NetworkService account

—with its minimal user rights—prevents these applications from being used to take over the server.

Predefined

Click any of the predefined security accounts in the list box.

Configurable

Click to configure your own application pool security by specifying the identity with a user name and the associated password. If you use a custom user account, that account must be part of the IIS_WPG group, or the application pool will fail.

User name

Type the alias of the user permitted to access this data source and table.

Password

Type the password that is associated with the user name specified above.

Browse

Click to view a list of available Windows user accounts on this server.

Note In previous versions of IIS, worker processes ran under the LocalSystem account. Because the LocalSystem account has access to almost all resources, this can have serious security implications. For better security, the IIS 6.O default is to run worker processes under the newly built-in NetworkService account. IIS 6.0 also allows you to configure the account on which worker processes run.

Related Topics

To learn more about the NetworkService account and the LocalSystem account in IIS, see Configuring Worker Process Identity in IIS Help.

Web Site Properties - Web Site Tab

Use this tab to set a friendly name for your Web site, configure access to your Web site, set connection limits to your site, and enable logging and configure the logging format for your site.

Web site identification

In order for browsers to access your Web content, both an IP address and TCP port number must be defined.

Description

Type a friendly name for your Web site. The friendly name appears in the console tree of IIS Manager.

IP address

Assign an IP address from the list box or type a new IP address to be used for accessing this site. If you do not assign a specific IP address, this site responds to all IP addresses assigned to this computer and not assigned to other sites, which makes this the default Web site. For an IP address to appear in the list, the IP address must have already been defined for use on this computer in Control Panel. See Windows Server 2003 family Help for more information. The description of the site is not required.

TCP port

Assign the TCP port on which the Web service is running; the default for the Web service is port 80. You can change the port to any unique TCP port number, but if you change the port number, clients must know in advance to request that port number, or their requests fail to connect to your server. A port number is required; this text box cannot be left blank.

SSL port

Assign the SSL port that is to be associated with this Web site identity. The default SSL port number is 443. You can change the SSL port to any unique TCP port number, but to connect to your server, clients must know in advance to request that port number, in order to connect to your server. An SSL port number is required only if SSL encryption is used. Otherwise, if SSL encryption is not enabled for your site, the SSL Port box is unavailable.

Advanced

Click to further configure the IP address, TCP port number, and Host Header value that are used to access to your site.

Connections

You can set the length of time in seconds before the server disconnects an inactive user. This ensures that all connections are closed if the HTTP protocol fails to close a connection. Most Web browsers ask the server to keep the connection open across multiple requests. This is referred to as an HTTP Keep-Alive, an HTTP specification that allows for greatly enhanced server performance. Without it, a browser has to make numerous connection requests for a page containing multiple elements, such as graphics. A separate connection may need to be made for each element. These additional requests and connections require additional server activity and resources, decreasing server efficiency. Additional requests also make a browser much slower and less responsive, especially across a high-latency (slow) connection. HTTP Keep-Alives are enabled by default during the installation process.

Connection timeout

Type a number in the box to set the length of time in seconds before the server disconnects an inactive user. This ensures that all connections are closed if the HTTP protocol fails to close a connection.

Enable HTTP Keep-Alives

Select to enable a client to maintain an open connection with your server, rather than re-opening the client connection with each new request. Disabling Keep-Alives may degrade server performance. HTTP Keep-Alives are enabled by default.

Enable Logging

Select this option to enable your Web site's logging features, which records details about user activity and creates logs in your choice of format.

The information is stored in ASCII files or an ODBC-compliant database. Logging information in IIS goes beyond the scope of the event-logging or performance-monitoring features of Microsoft ® Windows®. The logs can include information such as who has visited your site, what the visitor viewed, and when the information was viewed last. You can use the logs to assess content popularity or identify information bottlenecks.

Active log format

Select one of the following formats for the log files.

· Microsoft IIS Log Format: A fixed ASCII format.

· NCSA Common Log File Format: A fixed ASCII format.

· ODBC Logging: A fixed format logged to a database that is compatible with that database.

· W3C Extended Log File Format: A customizable ASCII format, selected by default. To use Process Accounting, the W3SVC Extended Log File format must be selected.

Properties

Click to configure options for log file creation (for example, weekly, or by file size), or to configure properties for W3C Extended logging or ODBC logging.

Related Topics

To learn more about naming Web sites, see Naming Web Sites in IIS Help.

To learn more about encrypting data with SSL, see Encryption in IIS Help.

To learn more about HTTP Keep-Alives, see Enabling HTTP Keep-Alives in IIS Help.

To learn more about logging site activity, see Logging Site Activity in IIS Help.

Advanced Web Site Identification

Use this dialog box to add additional Web site identities, or SSL identities to your computer.

A Web site identity consists of an IP address, TCP port, and an optional host header name, which associates a name with a single static IP address to host multiple sites. You add the host name to your name resolution system (typically DNS) so that when a request reaches the server, IIS uses the host name to determine which site the clients are requesting. This host name is passed in the HTTP header.

An SSL identity consists of an IP address and an SSL port number.

Multiple identities for this Web site

You can add, remove, or edit Web site identities for this Web site. A Web site identity consists of an IP address, TCP port, and an optional host header name. Each Web site must have a unique combination of identification characteristics. Therefore, while multiple Web sites can share two of their three identification characteristics, (IP address, TCP port, and host header name), they must have at least one characteristic that is different. Because SSL certificates contain the domain name in them, Web sites using certificates cannot share an IP address with other Web sites.

Add

Click to add a Web site identity.

Remove

Click to remove the currently selected Web site identity from the list.

Edit

Click to edit the currently selected Web site identity.

Multiple SSL identities for this Web site

You can add, remove, or edit SSL identities for this Web site. An SSL identity consists of an IP address and an SSL port number. An SSL identity is required only if SSL encryption is used. If SSL encryption is not enabled on your site, the Add, Remove, and Edit buttons are unavailable.

Add

Click to add an SSL identity for this Web site, which consists of an IP address and an SSL port number. The Advanced Web Site SSL Identification dialog box appears. The default port number for SSL is 443. If a port number, other than the default is used, your clients must know in advance to request that port number as part of the URL; otherwise their requests fail to connect properly to your server.

Remove

Click to remove the currently selected SSL identity from this Web site.

Edit

Click to edit the currently selected SSL identity for this Web site.

Related Topics

To learn more about naming Web sites, see Naming Web Sites in IIS Help.

To learn more about encrypting data with SSL, see Encryption in IIS Help.

Logging Properties - General Tab

Use this tab to specify how log files are created and saved. A file name is displayed under the Log file directory box; this name is determined by the log file format and the criterion used for starting new log files.

New log schedule (common for all log formats)

Any changes to the log schedule defined takes effect immediately after applying the new settings.

Hourly

Click to create log files hourly.

Daily

Click to create log files daily, starting with the first entry that occurs after midnight.

Weekly

Click to create log files weekly, starting with the first entry that occurs after midnight Saturday.

Monthly

Click to create log files created monthly, starting with the first entry that occurs after midnight of the last day of the month.

Note "Midnight" is midnight local time. Midnight is used for all log file formats except W3C Extended format, which by default uses midnight Greenwich Mean Time, but can be specified as midnight local time (by selecting the Use local time for file naming and rollover option below).

Unlimited file size

Click to always append data to the same log file. You can access this log file only after stopping the server.

When file size reaches

Click to create a new log file when the current log file reaches a given size. Type or click the up and down arrows to specify the size you want.

Use local time for file naming and rollover (W3C-specific)

Select to set creation time and naming format for W3C Extended log files to midnight local time rather than Greenwich Mean Time.

Log file directory

Type or browse to the directory in which log files will be saved.

Browse

Click to locate the directory to which log files will be saved.

Related Topics

To learn more about logging site activity, see Logging Site Activity in IIS Help.

Logging Properties - Advanced Tab

Use this tab to customize W3C Extended logging by choosing the fields (items) to be recorded in the log. Where appropriate, the abbreviated field name appears after the proper name. To limit log size, omit unneeded fields.

Date

Select to record the date the activity occurred.

Time

Select to record the time the activity occurred.

Extended Properties

Client IP Address

Select to record the IP address of the client that accessed your server.

User Name

Select to record the name of the authenticated user who accessed your server. This does not include anonymous users, who are represented by a hyphen (-).

Service Name

Select to record the Internet service and instance number that was accessed by a client.

Server Name

Select to record the name of the server on which the log entry was generated.

Server IP

Select to record the IP address of the server on which the log entry was generated.

Server Port

Select to record the port number the client is connected to.

Method

Select to record the action the client was trying to perform (for example, a GET command).

URI Stem

Select to record the resource accessed (for example, an HTML page, a CGI program, or a script).

URI Query

Select to record the query, if any, the client was trying to perform; that is, one or more search strings for which the client was seeking a match.

Protocol Status

Select to record the status of the action, in HTTP or FTP terms.

Protocol Substatus

Select to record additional status of the action, in HTTP terms. For more information about the Protocol Substatus property, see Substatus Error Codes in IIS Log Files in IIS Help.

Win32 Status

Select to record the status of the action, in terms used by the Microsoft® Windows® operating system.

Bytes Sent

Select to record the number of bytes sent by the server.

Bytes Received

Select to record the number of bytes received by the server.

Time Taken

Select to record the length of time the action took to complete. For all log formats except ODBC logging, Time Taken is logged in milliseconds, according to the following technical breakdown: The client-request timestamp is initialized when HTTP.sys (the kernel-mode driver) receives the first byte (before HTTP.sys begins parsing the request). The client-request timestamp is stopped when the send completion occurs (for the last send) in IIS. Time Taken does not reflect time across the network. Also note, the first request to the site shows a slightly longer time taken than other similar/same requests because HTTP.sys opens the log file with the first request.

Protocol Version

Select to record the protocol (HTTP, FTP) version used by the client. For HTTP, this is either HTTP 1.0 or HTTP 1.1.

Host

Select to record the content of the host header.

User Agent

Select to record the browser used on the client.

Select to record the content of the cookie sent or received, if any.

Referrer

Select to record the previous site visited by the user. This site provided a link to the current site.

Related Topics

To learn more about W3C Extended logging, see Customizing W3C Extended Logging in IIS Help.

To learn more about logging site activity, see Logging Site Activity in IIS Help.
Web Site Properties - Performance Tab

Use this tab to set properties that affect bandwidth use, and the number of client Web connections. By configuring network bandwidth on a given site, you can better control the amount of traffic allowed to that site. For example, by restricting bandwidth and/or the number of connections on a low-priority Web site, you allow other, higher-priority sites to handle larger traffic loads. Settings are site-specific and can be adjusted as network traffic and usage changes.

Bandwidth throttling

Bandwidth throttling limits the bandwidth available to this Web site. Bandwidth throttling uses Packet Scheduler to manage when data packets are sent. When you configure a site to use bandwidth throttling using IIS Manager, Packet Scheduler is automatically installed, and IIS automatically sets bandwidth throttling to a minimum of 1024 bytes/second. However, if you use another method (for example, Active Directory® Service Interfaces [ADSI] or Windows Management Instrumentation [WMI]), you must install Packet Scheduler for bandwidth throttling to work correctly.

Limit the network bandwidth available to this Web site

Select to enable bandwidth throttling on this Web site.

Maximum bandwidth

Type a number in the box or click the up and down arrows to set the maximum bandwidth, in kilobytes per second, that you want to be available to this Web site.

Web site connections

You can configure Internet Information Services (IIS) to allow an unlimited number of concurrent connections, or to limit the number of connections it accepts for this Web site. Setting the number to an unlimited amount circumvents constant administration if your connections tend to fluctuate. However, system performance can be impacted if the number of connections exceeds your system resources. Restricting this site to a specified number of connections can keep performance stable. Settings are site-specific and can be adjusted as network traffic and usage changes.

Unlimited

Click to configure this Web site to handle an unlimited number of concurrent connections.

Connections limited to

Click to set a specific number of concurrent connections to this Web site. Type a number in the box or click the up and down arrows to set the number of connections.

Related Topics

To learn more about the bandwidth throttling feature, see Throttling Bandwidth in IIS Help.

To learn more about limiting simultaneous connections to a Web site, see Limiting Connections in IIS Help.

To learn more about the role of the performance management, see Performance Tuning in IIS Help.

Web Site Properties - ISAPI Filters Tab

Use this tab to set options for ISAPI filters. An ISAPI filter is a program that responds to events during the processing of an HTTP request. The table lists each filter's status (which can be enabled or disabled), file name, and priority for loading into memory. You can change the execution order of filters only with the same priority.

Important If you have added or changed a filter at the global level, you must restart Internet Information Services (IIS) to load the new filter. If you have added or changed a filter at the Web site level, the filter is not loaded until a request is made to the Web site.

Add

Click to add an existing ISAPI filter by browsing for the executable file and providing a friendly name.

Remove

Click to remove the currently selected ISAPI filter from this load list.

Edit

Click to modify the properties of the currently selected ISAPI filter.

Disable

Click to prevent the currently selected ISAPI filter from loading, but keep it in the filter list.

Move up

Click to move the currently selected filter higher in the execution order.

Move down

Click to move the currently selected filter lower in the execution order.

Related Topics:

To learn more about ISAPI filers, see Installing ISAPI Filters in IIS Help.

Add/Edit Filter Properties

Use this dialog box to establish ISAPI filter properties. An ISAPI filter is a program that responds to events during the processing of an HTTP request.

Filter Name

Type a friendly name for the ISAPI filter. Friendly names often include version numbers to ensure proper updates with future versions of the filter.

Executable

Type the full path to the executable program associated with this ISAPI filter.

Browse

Click to locate the ISAPI filter.

Related Topics

To learn more about ISAPI filers, see Installing ISAPI Filters in IIS Help.

Web Site Properties - Home Directory Tab

Use this property sheet to create and manage Web sites on your IIS server. The settings on this tab are similar to those available on the Home Directory tab of virtual directories.

Setting up local or network paths allows the request to be directed to the correct physical location. You can further configure the physical location by setting user access rights, choosing whether to log requests for these resources, and choosing whether to index this site using the Indexing Service. To specify when the request is received, applications must be identified, located, and given the appropriate execute permissions and protection.

The content for this resource should come from

This setting allows you to define the location of the home directory for this Web site.

A directory located on this computer

Click to permit users to access a specified directory on this computer to view or update Web content. You can type the directory name in the Local path text box. You can control access to the contents by implementing any Windows security method.

A share located on another computer

Click to permit users to view or update Web content on another computer that has an active connection to this computer. If you have administrative credentials on the remote computer, you can control access to the contents by implementing any Windows security method. When selected, you can enter the server name and directory name in the Network Directory box. Click Connect As to enter network user name and password information.

A redirection to a URL

Click to redirect the client application, such as a browser, to another Web site or virtual directory by entering a URL in the Redirect to box. When selected, redirect options are substituted for path options.

If you click either A directory located on this computer or A share located on another computer, the following options are available:

Local path

When content comes from a directory located on this computer, this box displays the path to the directory that stores your Web site files. By default, these files are stored in the %localdrive%

\inetpub\wwwroot directory.

Browse

Click to locate the directory path.

Network directory

When content comes from another computer on the network, this box displays the computer name and share name of the content location.

Connect as

When content comes from another computer on the network, click to provide a user name and password for access to the network share.

Script source access

Select to allow users to access source code if either Read or Write permissions are set. Source code includes scripts in ASP applications.

Read

Select to allow users to read or download files or directories and their associated properties.

Write

Select to allow users to upload files and their associated properties to the enabled directory on your server or to change content in a Write-enabled file. Write access is allowed only when a browser that supports the PUT feature of the HTTP 1.1 protocol standard.

Directory browsing

Select to allow users to see a hypertext listing of the files and subdirectories in this virtual directory. Because virtual directories do not appear in directory listings, users must know a virtual directory's alias. If Directory browsing is disabled and the user does not specify a file name, the Web server displays an "Access Forbidden" error message in the user's Web browser.

Log visits

Select to configure IIS to record visits to this directory in a log file. Visits are recorded only if logging is enabled for this Web site.

Index this resource

Select to allow the Microsoft Indexing Service to include this directory in a full-text index of your Web site.

Note Before setting this option, you must enable the Indexing Service through the Add or Remove Programs item in Control Panel.

Application name

Type the name of the root directory that contains the files and subdirectories of an application.

Starting point

This displays the metabase node where the application is configured.

Execute permissions

This option determines the program execution level allowed for this site's resources.

· Set permissions to None to restrict access only to static files such as HTML or image files.

· Set permissions to Scripts to allow only scripts to run, not executables.

· Set permissions to Scripts and Executables to remove all restrictions so that all file types can be accessed or executed.

Application pool

Click the application pool in the list box that is associated with this home directory.

Remove/Create

Click to remove an application, or to create an application from the Web site while leaving the virtual directory intact.

Configuration

Click to configure application mappings, options, and debugging features.

Unload

Click to unload an isolated application from memory, or to unload a pooled application not referenced by any other application.

If you click A redirection to a URL, the following options are available:

Redirect to

Type a fully qualified URL from which the content will be served.

The exact URL entered above

Select to redirect a virtual directory to the destination URL without adding any other portions of the original URL. You can use this option to redirect an entire virtual directory to one file. For example, to redirect all requests for the /scripts virtual directory to the Default.htm file in the home directory, type /Default.htm in the Redirect to box and select this option.

A directory below URL entered

Select to redirect a parent directory to a child directory. For example, to redirect your home directory (designated by /) to a subdirectory named /newhome, type /newhome in the Redirect To box and select this option. Without this option, the Web server will continually map the parent to itself.

A permanent redirection for this resource

Click to send the following message to the client: "301 Permanent Redirect." Redirects are considered temporary, and the client browser receives the following message: "302 Temporary Redirect." Some browsers can use the "301 Permanent Redirect" message as the signal to permanently change a URL, such as a bookmark.

Related Topics

To learn more about the home directory, see Setting the Home Directory in IIS Help.

For a listing of redirect variables and redirect wildcards, see Redirect Reference in IIS Help.

To learn more about configuring applications, see Configuring Applications and Configuring Servers for Applications in IIS Help.

Web Site Properties - Documents Tab

Use this tab to define your site's default Web page and to append a footer to the site's documents.

Enable default content page

When enabled, the default document is served to the browser whenever the browser request does not specify a document name. Default documents can be a directory's home page or an index page containing a site document directory listing. Multiple documents can be listed in a top-down search order. The files shown are located in the site’s Home directory. The order can be modified by using the Move Up and Move Down buttons.

Select the Enable default content page check box to enable the Web server to identify a default document whenever a browser request does not specify a document name.

Add

Click to add additional default documents. Default documents are served in the order in which the names appear in the list. The server returns the first document it finds.

Remove

Click to remove a default document from the list without deleting the file.

Enable document footer

Select the Enable document footer check box to configure your Web server to automatically append a footer to every document your Web server returns. The footer file should not be a complete HTML document. It should only include only HTML tags that are necessary to format the appearance and function of your footer content.

Browse

Click to locate and specify the full path and file name for your footer file.

Related Topics

To learn more about a default document, see Setting Up a Default Document in IIS Help.

To learn more about adding a footer to your Web pages, see Adding a Footer to Web Pages in IIS Help.

Web Site Properties - Directory Security Tab

Use this tab to set IIS security features to confirm the user identity of users before granting access to restricted content.

Authentication and access control

This setting allows you to configure your Web server to confirm the user identity of users before assigning access to restricted content. Before your Web server can authenticate users, however, you must first create valid Windows user accounts and then configure the NTFS directory and file permissions for those accounts.

Edit

Click to configure your Web server's authentication and anonymous access features.

IP address and domain name restrictions

This setting allows you to assign or deny specific users, computers, groups of computers, or domains from accessing this Web site, directory, or file based on IP address or domain name.

Edit

Click to add settings that set restrictions on or deny access to this Web site, directory, or file by specific users, computers, groups of computers, or domains.

Secure communications

Windows provides means to secure communication between the client and the Web server using server certificates and certificate mapping. You can implement secure communications by enabling Windows directory service mapping, which allows you to use the Directory Service client-certificate mapping rather than one-to-one or many-to-one mapping. To enable this service, the server must be a member of the Windows® Server 2003 domain.

Enable the Windows directory service mapper

Select to use Directory Service client-certificate mapping rather than one-to-one or many-to-one mapping. To enable this service, the server must be a member of the Windows Server 2003 domain. This option is available only when editing properties for all Web sites.

When editing properties for a specific Web site, the following options are available:

Server Certificate

Click to start the Web Server Certificate Wizard and obtain a server certificate.

View Certificate

Click to view the server certificate (if there is one installed) for this Web site.

Edit

Click to enable communication settings such as certificate acceptance, certificate mapping, and the certificate trust list.

Related Topics

To learn more about user authentication in IIS, see Web Site Authentication in IIS Help.

To learn more about access control, see Access Control in IIS Help.

To learn more about certificates in IIS, see Certificates in IIS Help.

To learn more about mapping client certificates to user accounts, see Client Certificate Mapping in IIS Help.

Authentication Methods

Use this dialog box to configure your Web server to verify user identities. You can authenticate individuals or select groups of users to prevent unauthorized persons from establishing a Web (HTTP) connection to restricted content. Anonymous access allows users to establish an anonymous connection. The user logs on to IIS with an anonymous or guest account. There are currently four Authenticated access methods:

· Windows Integrated authentication uses a cryptographic exchange with the user's Web browser to confirm the identity of the user.

· Digest authentication works only with Active Directory® accounts, sending a hash value over the network, rather than a plaintext password. Digest authentication works across proxy servers and other firewalls and is available on Web Distributed Authoring and Versioning (WebDAV) directories.

· Basic authentication transmits passwords across the network in cleartext, an unencrypted form.

· .NET Passport authentication is a Web authentication service.

Enable anonymous access

Select this check box to establish an anonymous connection for users. IIS logs on the user with an anonymous or guest account. By default, the server creates and uses the account IUSR_

computername.

User name

This is the user name for the account used for anonymous access only within Windows.

Password

The anonymous user account password is used only within Windows. Anonymous users do not log on by using a user name and password.

Browse

Click to search and select the object type, such as user, and the location, such as your computer or any accessible computer connected on the network.

Authenticated access

Options selected in this section require that users provide a valid Microsoft Windows user name and password before they access any information on your server.

Integrated Windows authentication

Select to ensure that the user name and password are sent across the network in the form of a hash. This provides a secure form of authentication.

Note If this authentication method is enabled, IIS uses Windows Integrated authentication only when Anonymous access is disabled and Anonymous access is denied because Windows file system permissions have been set, requiring users to provide a Windows user name and password before establishing a connection with restricted content.

Digest authentication for Windows domain servers

Select to work with Active Directory® and send a hash value over the network, rather than a cleartext password. This method works across proxy servers and other firewalls. Using Digest authentication requires that a Realm be defined.

Basic authentication (password is sent in cleartext)

Select to send the password across the network in cleartext. Basic authentication is part of the HTTP specification and is supported by most browsers; however, user name and password are not encrypted and could present security risks.

.NET Passport Authentication

Select to enable .NET Passport authentication services on your Web site. NET Passport allows users of your site to create a single sign-in name and password for easy, secure access to all .NET Passport-enabled Web sites and services. .NET Passport-enabled sites rely on the .NET Passport central server to authenticate users rather than hosting and maintaining their own proprietary authentication systems. However, the .NET Passport central server does not authorize or deny a specific users' access to individual .NET Passport-enabled sites. It is the responsibility of the Web site to control user permissions. Using .NET Passport authentication requires that a Default domain be defined.

Default domain

This identifies the Windows domain used for user authentication control.

Select

To authenticate the user or group, click to view a list of all domains to which you are connected.

Realm

This identifies the domain or other operating system authentication controller used to authenticate the user or group.

Select

Click to view a list of all domains and realms to which you are connected.

Related Topics:

To learn more about user authentication, see Web Site Authentication in IIS Help.

To learn more about .NET Passport authentication, see .NET Passport Authentication in IIS Help.

IP Address and Domain Name Restrictions

Use this dialog box to provide users access to (or to prevent access to) a Web site, directory, or file.

Note Computers accessing your server across proxy servers display the same IP address as the proxy server.

IP address access restrictions

Granted access

Click to grant access to all computers.

Denied access

Click to deny access to all computers.

Add

Click to define a computer or group of computers to which you want to grant or deny access.

Remove

Click to remove the currently selected item from the exception list.

Edit

Click to modify the specific properties of the currently selected item in the exception list.

Related Topics:

To learn more about security, see Security in IIS Help.

Secure Communications

Use this dialog box to configure Secure Sockets Layer (SSL) settings for encrypted communication. When a Web browser supporting secure communications connects to a Web site configured to use SSL (URLs starting with https:// ), a secure connection protects the data being transferred. A client certificate is a digital identification issued by a trusted, third-party organization, referred to as a certification authority. You can configure your Web server to accept, require, or reject client certificates as a means of establishing a connection with a particular file or directory. Users attempting to access a site with client certificates can be mapped; users without client certificates can use other authentication methods. Client certificate mappings match information contained in a client's certificate against Windows user account information. A certificate trust list (CTL) is a list of approved certification authorities for a particular Web site.

Require secure channel (SSL)

Select to configure IIS to require an encrypted communication link for a Web browser to connect with this Web site, directory, or file. When this option is selected, all data sent to and from this Web site is encrypted using a certificate.

Require 128 bit encryption

Select to configure IIS to require a 128-bit encrypted communication link for a Web browser to connect with this Web site, directory, or file.

Ignore client certificates

Select to allow users access to this site without being prompted to present a client certificate.

Accept client certificates

Select to allow access for users with client certificates, without requiring the certificate. Users with client certificates can be mapped; users without client certificates can use other authentication methods.

Require client certificates

Select to allow only users with a valid client certificate to connect. Users without a valid client certificate are denied access to this site. Before you can select this option to require client certificates, you must select the Require secure channel (SSL) option.

Enable client certificate mapping

Select to configure your server to authenticate users who log on with a valid client certificate.

Edit

Click to edit or, if no certificate mapping exists, create a client certificate mapping. When a user logs on to your Web site with a certificate, their permissions match those of the user account to which the certificate is mapped.

Enable the Windows directory service mapper

Select to use Directory Service client-certificate mapping rather than one-to-one or many-to-one mapping. To enable this service, the server must be a member of the Windows Server 2003 domain.

Enable certificate trust lists

Select to edit existing CTLs or create a new one. A CTL is a list of approved certification authorities for a particular Web site and are applicable only at the Web-site level.

Current CTL:: Click a CTL for this site from the list box.

New:: Click to create a new CTL for this site.

Edit:: Click to change the settings of the currently selected CTL in the list box.

Related Topics

To learn more about certificate mapping, see Client Certificate Mapping in IIS Help.

To learn more about certificates, see Certificates in IIS Help.

Web Site Properties - HTTP Headers Tab

Use the HTTP Headers tab to set values returned to the browser in the header of the HTML page. You can also set content ratings for content, and define MIME types.

These values can be set globally for all sites or separately within each site. Internet Information Services (IIS) uses an inheritance model for these settings. If you set or change a setting that conflicts with a setting at another node in the hierarchy, you are prompted to specify the nodes to which this new setting applies.

Enable content expiration

Select the Enable content expiration check box to include expiration information for time-sensitive material, such as special offers or event announcements. The browser compares the current date to the expiration date to determine whether to display a cached page, or to request an updated page from the server.

Expire immediately

Click this option and content expires immediately after it is served. This setting forces the browser to always retrieve the content fresh from the server on subsequent requests.

Expire after

Set a specific period of time after which the browser is forced to retrieve the content again from the server on the subsequent requests.

Expire on

Select to set a specific date and time after which the browser is forced to retrieve the content again from the server on the subsequent requests.

Custom HTTP headers

You can use this property to send a custom HTTP header from the Web server to the client browser. Custom headers can be used to send instructions from the Web server to the client browser that are not yet supported in the current HTTP specification, such as newer HTTP headers that IIS may not inherently support at the time of the product's release. For example, you can use a custom HTTP header to allow the client browser to cache the page but prevent proxy servers from caching the page.

Add

Click to add a new custom HTTP header.

Edit

Click to edit the properties of the currently selected custom HTTP header.

Remove

Click to remove the currently selected custom HTTP header.

Content rating

Use content ratings to embed descriptive labels in the HTTP headers of your Web pages. Browsers, such as Microsoft® Internet Explorer, version 3.0 or later, can detect content ratings to help users identify potentially objectionable Web content.

Edit Ratings

Click to set content rating values.

MIME types (site, directory, and virtual directory levels)

Multipurpose Internet Mail Extensions (MIME) mappings set the various file types that IIS serves to clients. IIS serves only files with extensions registered in the MIME types list.

MIME types can be defined globally for IIS, and additional MIME types can be defined at the Web site, Web site directory, and Web site virtual directory level.

IIS uses an inheritance model for MIME type settings. MIME types defined at the global level are inherited by all Web sites, Web site directories, and Web site virtual directories. MIME types defined at the Web site, Web site directory, or Web site virtual directory are used only at that particular node. If you set or change a MIME type that conflicts with a setting at another node in the hierarchy, you are prompted with an Inheritance Override dialog box where you can specify the nodes to which the new setting applies.

The registered file types that are installed on this computer are listed in the Registered MIME types (file extensions) list box.

Caution IIS 6.0 returns an error (404.3) if a request refers to a file with a file extension that is not in the MIME map or script mapped. If you want to allow IIS to serve all files regardless of their extension, you have to either add the particular extension or a wildcard (.*) to the MIME map.

MIME Types

Click to configure MIME mappings. These mappings set the various file types that the Web service returns to browsers

Note When you click a MIME type, the MIME mappings are listed in the MIME Types box.

Related Topics

To learn more about content ratings, see Using Content Ratings in IIS Help.

To learn more about MIME types, see Working with MIME Types in IIS Help.

To learn more about editing MIME types directly in the IIS metabase, see the MimeMap property.

Add/Edit Custom HTTP Header

Custom headers appear in the HTTP Headers tab of a property sheet in the form Name: Value. Type the name and value of your custom HTTP header in the Custom header name and Custom header value boxes.

Related Topics

To learn how to create multiple Web sites using host header names, see Hosting Multiple Sites Using Host Header Names in IIS Help.

Content Ratings - Ratings Tab

Use this tab to configure your Web server's content rating features for a particular Web site, directory, or file.

Your Web server's Platform for Internet Content Selection (PICS) system uses a rating system developed by the Internet Content Rating Association (ICRA), which rates content according to levels of violence, nudity, sex, and offensive language. For more information about ICRA, see http://www.icra.org.

Enable ratings for this content

Select to set the rating levels on this Web site for each of the listed categories.

Related Topics

To learn more about content ratings, see Using Content Ratings in IIS Help.

Web Site Properties - Custom Errors Tab

Use this tab to customize HTTP error messages that are sent to clients when Web server errors occur. Administrators can use generic default HTTP 1.1 errors, detailed custom error files that IIS provides, or create their own custom error files.

These values can be set globally for all sites or separately within each site. IIS uses an inheritance model for these settings. If you set or change a setting that conflicts with a setting at another node in the hierarchy, you are prompted to specify the nodes to which this new setting applies.

Edit

Click to change the properties of the currently selected custom error message.

Set to Default

Click to configure the currently selected custom error message to use the default HTTP 1.1 error.

Note To change the settings for multiple errors, press the CTRL or SHIFT key and click the HTTP errors.

Related Topics

To learn more about custom error messages, see Custom Error Messages in IIS Help.

Edit Custom Error Properties

Use this dialog box to edit custom error messages. Click a custom error message, and then click Edit.

For security and other system concerns, some errors cannot be customized to point to a URL. For example, the error 401;2 “Unauthorized - Logon failed due to server configuration” does not allow a custom error message on a URL because if a server configuration exists, it might not be possible to reach the URL containing the custom error file.

Message type

Click the type of message that you want to be returned to the client browser — Default, File, or URL — from the Message type list box.

Default

Click to return the default HTTP 1.1 error to the client browser. File allows you to map the custom error to a file by using a fully qualified file name. URL allows you to map the custom error to a URL. If the output type is a URL, this URL must exist on the local server. Click OK to save your selections.

File/URL

Browse to or type the location of the file mapped to the custom error.

Browse

Click to locate the directory and file.

Related Topics

To learn more about custom error messages, see Custom Error Messages in IIS Help.

Background Intelligent Transfer Service

Background Intelligent Transfer Service (BITS) helps you transfer large amounts of data without degrading network performance. It does this by transferring data in small chunks, utilizing unused bandwidth as it becomes available, and reassembling the data at the destination. BITS is supported on Microsoft® Windows Server 2003 family operating systems and on Microsoft® Windows 2000 Servers.

BITS downloads and uploads both file names, as Universal Resource Locators (URLs), and data. Any transfers that are interrupted by network disconnections or by computer shutdowns and restarts resume when network connectivity is re-established.

BITS Server Extensions is part of Internet Information Services (IIS) and has the following components:

BITS management console snap-in, for configuring and managing BITS by using Microsoft Management Console (MMC).
BITS server extension ISAPI, which is used for BITS data transfer.

If you want client computers to be able to use BITS to upload files to a server, you must configure an IIS server with BITS Server Extensions installed and activated.

For more information, see the following topics and Web sites:

To install BITS Server Extensions, see To install BITS Server Extensions.
To configure BITS Server Extensions, see To configure BITS Server Extensions.
To review BITS-specific security information, see Concepts.
To review the BITS PSDK, see Background Intelligent Transfer Service (http://www.microsoft.com/).

Important question to prepare IIS in windows

noreply@blogger.com (msvsdak) — Sat, 31 Mar 2012 08:46:00 +0000

You can find more questions for interview in Dotnetfanda.com

IIS logfile formats ?

IIS logfile format is w3svc (s3c extended log file format )
path : %system root%/system32/logfiles
iis log files are in 4 formates
1. microsoft iis log
2. NCSA Common log
3. ODBC logging
4. W3C Extended log
by default we use w3C format and we can change its path just for security reasons

How do you remotely administer MS IIS?

1.Using Terminal serivce
2.IIS MANAGER
3.Remote administration (HTML) Tool

IIS metabase ?

IIS metabase contains all the IIS configutations.
In 5.0 it is binary format.
In 6.0 metabase is xml
IIS metabase is a special databse which maintains the settings & configuration data for IIS.

The metabase is roughly equivalent to the registry for IIS: it holds all the configuration information for IIS.

IIS Workpocess's ?

When IIS starts, the Web Administration Service initializes the http.sys namespace routing table with one entry for each application. This routing table determines to which application pool an application should be routed. When http.sys receives a request, it asks WAS to start up one or more worker processes to handle that application pool. This isolation of processes makes the web server as a whole more stable.

How do you create Virtual Root in IIS?

1. Open IIS Manager and browse to the Default Web Site as shown in the previous procedures.
2. Expand the Default Web Site node and look for the subdirectory that you want to designate as an application root. For this example this is exampleWebApp.
If IIS Manager was already open when you created the physical directory you might have to click the Refresh button in IIS Manager to view your new exampleWebApp subdirectory.
3. Right-click the directory that you want to mark as an application root and then click Properties.
4. On the Directory tab in the Application Settings section click Create.
5. In the Application name text box type the name of the application and then click OK.
The virtual directory is now an application root.

IIS Migration ?

IIS Migration to something like version upgrading, ex: IIS 5.0 to IIS 6.0

What are different authentication types

Different types of Authentications are:
1. Anonymous
2. Basic
3. Digest and Advanced Digest
4. Integrated Windows
5. .NET Passport

IIS SSL ?

SSL is Secure Socket Layer used which is a protocol used to encrypt the content duting authentication between the browser and the web server.
Correct me if i am wrong and add if any.....

IIS Application pool?

Application pools:
An application pool is a group of one or more URLs that are served by a worker process or set of worker processes. Any Web directory or virtual directory can be assigned to an application pool. so that one website cannot be effected by other , if u used separated application pool ,

Application pools are basically the identities through which IIS6 provide process isolation. That is none of the websites performance can impact others.
It is implemented in a bit differential mode as of the Sam in IIS5 where you have only three modes.
In IIS 6 you can assign an individual pool to a website or process to ensure availability of appropriate set of resources.
And it also works as a restrictor so that your application can not use any resource beyond the one has been assigned to it.
What is Connection Pooling ?

A connection pool is a set of database connections that are avilable for an application to use

IIS Socket pooling ?

A socket is defined as an identifier for a particular service on a particular node on a network. What this really means is that a socket uis a combination of a port.

IIS http.sys ?

HTTP.sys is a kernel mode device driver, It handles the http requests. It handle all the incoming http request and stored in request queue and provide high performance connectivity for http server applications in FIFO (first in first out ) method.

IIS Web Gardens?

2 or more worker process are configured as part of an application pool called web garden
IIS user accounts?

By default in iis 6 user accounts are
1. IUSER (guest user) account -- for anonymous access
2. IWAM (global user) account -- for iis applications
3. ASP.NET account -- for asp applications
4. IIS_WPG account -- for worker process applications
IIS ERROR codes?

Error codes are
100 - informational
200 - successful
300 - redirection
400 - client side
500 - server side
In which process does IIS runs?

IIS runs in 2 modes (application isolation modes):
1. worker process isolation mode is a new feature of IIS6.0.
2. IIS5.0 isolation mode - for compatibility with apps depending on IIS5.0
What are the different IIS authentication modes in IIS 5.0 and Explain?

IIS 6.0 supports the following authentication methods:
1. Anonymous authentication:
This authentication method allows everyone access to
the public areas of your Web sites, without asking for a user name or password.
2. Basic authentication:
This authentication method prompts the user for a user name
and a password, also called credentials, which are sent unencrypted over the
network.
3. Digest authentication:
This authentication method operates much like Basic
authentication, except that passwords are sent across the network as a hash value
for additional security. Digest authentication is available only on domains with
domain controllers running Windows server operating systems.
4. Integrated Windows authentication:
This authentication method uses hashing
technology to scramble user names and passwords before sending them over the
network.
5. NET Passport Authentication:
This authentication method is a user-authentication
service that lets Web site users create a single sign-in name and password for
access to all .NET Passport? Enabled Web sites and services. .NET
Passport? Enabled sites rely on the .NET Passport central server to authenticate
users; .NET Passport? Enabled sites do not host and maintain their own proprietary
authentication systems.

Where are the IIS log files stored?

C:\WINDOWS\system32\Logfiles\W3SVC1

path of iis logfiles : %System root %/system32/logfiles
iis log file format : w3svc ( w3c extended lof\g file format )
ftp log files path : %System root %/system32/logfiles
ftp logfile format : MSFTPSVC
IIS Port numbers?

http : 80 (default port for iis )
ssl : 443
ftp : 21
smtp : 25
pop2 : 109
pop3 : 110
imap : 143
nntp : 119
LDAP : 389
dns : 53
dhcp : 67
IIS services ?

The following are the defautl iis services
1. www services
2. FTP services
3. SMTP services

These are the default iis services
1. www services
2. FTP services
3. SMTP services
4. NNTP services
How many web.config files are there in 1 project?

1). There might be multiple web.config files for a single project depending on the hierarchy of folders inside the root folder of the project, so for each folder we can use one web.config file.
2). Authentications in IIS 6.0

a) Anonymous Authentication
b) Windows Integrated Authentication
c) Basic Authentication
d) Digest Authentication
e) Advance Digest Authentication
f) .net passport Authentication

How to configure the sites in Web server (IIS)?

Just right click ur asp folder where all the code is stored and ( check the following : execute script , and give a alias ) and web share it , apply the settings and click ok

Advantages in IIS 6.0?

The advantages of upgrading the server that hosts your existing IIS Web sites and applications to IIS 6.0 include the following:

• Reduces the time required to deploy IIS 6.0. Upgrading requires minimal user interaction.

• Reduces possible configuration errors. Because the majority of the current operating system, IIS, and Web site configuration settings are retained during upgrade, fewer configuration errors result.  The disadvantages of upgrading the server that hosts your existing IIS Web sites and applications to IIS 6.0 include the following:

• Retains previous versions of software. The upgrade process upgrades only software components identified by Microsoft® Windows® Server 2003, Standard Edition; Windows® Server 2003, Enterprise Edition; and Windows® Server 2003, Web Edition. Any other installed software components, such as applications or application dynamic-link libraries (DLLs), remain unchanged.

• Retains the previous registry configuration. The upgrade process makes the appropriate modifications to the registry entries identified by Windows Server 2003. Registry entries

are created by an application as it is installed, but are not removed when the application is removed. Cumulatively, these registry entries consume disk storage and can make troubleshooting registry-related problems more difficult because the unused registry entries can have similar naming conventions to active registry entries.

IIS Server limitations?

For the project I'm working on I noticed that file transfer* speed is really bad if I'm using IIS FTP and HTTP services. I know that the last thing I should think is "it's a Windows bug", but the fact that simply by using IIS on Windows Server or by changing IIS on that Windows XP machine to FileZilla and LightHTTPd, my file transfer speeds go up twice from the original configuration, makes me go "hmmm".Are there any limitation on IIS running on Windows XP? Any file transfer throttling or something like that?

File transfer is being done using one connection to one file. My file transfer client is the only one client connecting to the PC.

IIS Frontpage extenstions?

IIS Core functionality?

IIS Performance tuning ?

IIS Host headers ?

IIS DNS, DHCP concepts ?

DHCP :Dynamic Host Configuration Protocol (DHCP) is a network protocol that enables a server to automatically assign an IP address to a computer from a defined range of numbers (i.e., a scope) configured for a given network.

DHCP assigns an IP address when a system is started, for example:

A user turns on a computer with a DHCP client.

The client computer sends a broadcast request (called a DISCOVER or DHCPDISCOVER), looking for a DHCP server to answer.

The router directs the DISCOVER packet to the correct DHCP server.

The server receives the DISCOVER packet. Based on availability and usage policies set on the server, the server determines an appropriate address (if any) to give to the client. The server then temporarily reserves that address for the client and sends back to the client an OFFER (or DHCPOFFER) packet, with that address information.

The server also configures the client's DNS servers, WINS servers, NTP servers, and sometimes other services as well.

The client sends a REQUEST (or DHCPREQUEST) packet, letting the server know that it intends to use the address.

The server sends an ACK (or DHCPACK) packet, confirming that the client has a been given a lease on the address for a server-specified period of time.

DNS :Domain Name System (DNS) is a database system that translates a computer's fully qualified domain name into an IP address

IIS ASP Cache

IIS Isolation modes ?

IIS Asp & .net settings ?

IIS Default objects in IIS Manager ?

How do you administer Connection Pooling in IIS 3.0?

How do you administer Connection Pooling in IIS 4.0?

Did you work on IIS administration?

What is the Role of IIS?

Visual studio having It own ASP.NET Engine which is capable enough to run Asp.net web application from visual studio. So we just click on Run button to start the application.
Now this is the scenarios of local environment. But If we want to host it on server from where all user can access the sites then IIS comes into the picture.
IIS provides a redesigned WWW architecture that can help you achieve better performance, reliability, scalability, and security for our Web sites. IIS can support following Protocol HTTP/HTTPS, FTP, FTPS, SMTP Etc. We need to host the site on IIS, when request comes from client it first hits the IIS Server, then the server passed it to ASP.NET worker process to execute. Then the response also passes to client via IIS itself.
Note only Hosting of Site we can create our FTP Server, SMTP Server using IIS itself.
There are different version of IIS available like 5.1, 6.0, 7.0 etc

What are the different versions on IIS that you have worked on?

Before answering this question you need to know what are the different IIS version is available in different OS. Below is the list of IIS version with different Operating system.
Windows Server 2008 - Windows Vista - Home Premium/ Ultimate - IIS 7.0
Windows Server 2003 - IIS 6.0
Windows XP Professional - IIS 5.1
Now based on your working experience you can say that you have worked on IIS 5.1 and 6.0 or only IIS 7. Etc.
Now, the next question that can asked after answering this question is “what is the difference between them ? ” – Well I will come with this later.

What is Application Pool in IIS?

Before Giving the Definition: you can say like this, Concept of Application pool has from IIS 6.0 .
Application pools are used to separate sets of IIS worker processes that share the same configuration and application boundaries. Application pools used to isolate our web application for better security, reliability, and availability and performance and keep running without impacting each other . The worker process serves as the process boundary that separates each application pool so that when one worker process or application is having an issue or recycles, other applications or worker processes are not affected.
One Application Pool can have multiple worker process Also.
Main Point to Remember:
1. Isolation of Different Web Application
2. Individual worker process for different web application
3. More reliably web application
4. Better Performance

What is the Name of Default Application Pool in IIS ?

Though we can create new application pool IIS with different settings, but IIS having its own default application pool named: Default AppPool

What are the different types of Identity available in IIS 6.0 ?

IIS having three different Identities.
1. Local System
2. Local Services
3. Network Services

Name of default Identity of IIS6.0

Default Identity of IIS 6.0 is Network Services .
Which is having very minimum rights on your system? The user can only have the read access of the site.

What is Recycling of Application Pool?

Recycling Application pool means recycle the Worker process (w3wp.exe ) and the memory used for the web application.

There are two types of recycling related with Application pool

1.Recycling Worker Process - Predefined Settings
2. Recycling Worker Process - Based on Memory

What are the main layers of IIS Architecture?

IIS having mainly two layers Kernel Mode and User Mode

Below are the subsection of both of them.
1. Kernel Mode
o HTTP.SYS
2. User Mode
o Web Admin Service
o Virtual Directory
o Application Pool

What is the Role of Http.Sys in IIS?

HTTP.SYS is the kernel level components of IIS. All client request comes from client hit the HTTP.Sys of Kernel level. HTTP.SYS then makes a queue for each and every request for each and individual application pool based on the request.
Whenever we create any application pool IIS automatically registers the pool with HTTP.SYS to identify the particular during request processing.

What are the different security settings available in IIS ?

Below are the commonly used IIS Security settings

1 Anonymous
2 Integrated Windows Authentication
3. Basic Authentication
4. Digest Authentication
5. Passport Authentication
For Set security permission you need to go to Virtual Directory > Right Click > Properties >

Directory Security
Click on Edit Button.

What is the default authentication settings for IIS?

Anonymous authentication is the default authentication mode for any site that is hosted on IIS, and it runs under the "IUSR_[Server Name]" account.

What is web garden?

By default Each Application Pool runs with a Single Worker Process (W3Wp.exe). We can assign multiple Worker Process With a Single Application Pool. An Application Poll with multiple Worker process called Web Gardens. Each Worker Process Should have their own Thread and Own Memory space.

Generally it’s not recommended to use In Proc Session mode while we are using Web Garden

Where session data stores in case of "In-Proc" Session mode?

Session data store inside process memory of worker process [w3wp.exe ] .

How we can create an web garden?

For creating web garden we need to go to Application Pool, then Right Click on Application Pool > Properties > Go to Performance Tab
In Web Garden Section, increase the number of worker process. By default it is 1.

How we can debug a web application which is hosted on IIS?

We can easily debug any web applications that are hosted on IIS by using Attaching of Worker Process.
From Visual Studio IDE > Tools > Attach To Process
Select the particular Process, then start debugging.
For more information Read this article:
http://www.codeproject.com/KB/aspnet/ProcessAttache.aspx

How we can open IIS Configuration manager?

Just simply Run > inetmgr or we can open it from control panel > Administrative tools.

How we can create a Virtual Directory on IIS?

Open IIS Configuration Manager
First of all Right Click on Default web sites > New > Virtual Directory.
Browse the Physical Path. Set the properties. Click on OK

What are the permission settings are available for Virtual Directory?

Below are the list of permission that can be set during virtual directory creation
1. Read
2. Run Scripts
3. Execute:
4. Write:
5. Browse

What is the folder location for Virtual Directory?

<Drive>:\inetpub\wwwroot

What is the use of Enable Pinging Properties for Application Pool ?

IIS should periodically monitor the health of a worker process [ Idle or not , Time for recycle or not, All Worker process are running properly or not ] .
Pining means, Activation Process monitor Worker process performance, health, idle time etc.
By default it sets to 30s .

Does One Web Application can have multiple Application Pool ?

No. Every Web Application should have one Application Pool. By default it is "DefaultAppPool ".

Which version of IIS is available in Windows Server 2008?

IIS 7.0 Even Vista Home Premium and Ultimate edition is also having IIS 7.0

How we can save an Application Pool Settings?

Application Pool Settings can be saving as "XML" Format.
Right Click on Application Pool > All Task > Save Configuration to a File.
This will save all the settings of Application Pool as an XML file. We can make it password protected also.

Which Tool is used for Remote IIS Debugging?

Tools is : msvsmon.exe This is located at : Install path\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86

What are the different authentication mode available for IIS Remote Debugging?

For IIS Remote Debugging msvsmon supported two authentication modes
1. Windows Authentication
2. No-Authentication

How can we get the list of worker process running in IIS along with the Application pool name?

By running iisapp.vbs script from command Prompt.
Below are the steps :
1. Start > Run > Cmd
2. Go To Windows > System32
3. Run cscript iisapp.vbs

If there are multiple worker process running on IIS, then how can you attach a particular worker process for application?

Well, if there are multiple worker process running in IIS, it means I have to know the name of my application pool. Then I can run cscript iisapi.vbs script to find out the process ID and Application Pool name. Based on the process Id for particular application I have to attach the process from Visual studio IDE.

Why do we need to IIS Remote Debugging?

There are following reasons where we can use remote debugging
1. Your development server does not have IIS installed.
2. Development server and Build/Released/Hosting Server is different
3. Multiple user want to debug simultaneously.

Does IIS allows multiple user to Remote debug simultaneously?

Yes. This is one of the great features of msvsmon.exe . Each instance of the remote debugger has a unique server name. we can give an instance of the remote debugger any server name. Now multiple user can able to access the server instance.

What is the use of aspnet_regiis -i command?

This is used automatically register the .NET Framework with your IIS.

For more information:
http://msdn.microsoft.com/en-us/library/k6h9cz8h%28VS.80%29.aspx

Can we have multiple web sites on IIS?

Yes. IIS can have multiple web sites and Each and every web sites can have multiple virtual Directory.
Note : Here web sites means the Root Node.

Where is the default location for IIS Log files?

Its C:\WINDOWS\system32\LogFiles\W3SVC1

What is ISAPI Filter?

This is one of the more important question for experienced guys.
Please read this in details.
http://msdn.microsoft.com/en-us/library/ms524610.aspx

What are the major innovations in IIS 7.0?

Below are the Major Innovation in IIS 7.0
Components are designed as module and there are major change in administration settings.
FYI : You can find out many of them, just go through Microsoft IIS web site.

What is the Role of Windows Activation Process in IIS?

WAP is the Controller of Worker process under a Application Pool. Windows Activation Process which is managed by the worker process by starting, stopping and recycling the application pool. When to start, stop and Recycle should be defined on Application Pool Settings. Activation Process is also responsible for Health Monitor of Application Pool during runtime.
FYI : Health monitoring setting can be easily found in Properties of Application Pool.

What are the different type of application pool available in IIS 7.0?

IIS 7.0 having two types of application pool.
1. DefaultAppPool (Integrated)

2. ClassicAppPool

Which is not an Identity of Application Pool?

Select from following answers:

LocalSystem
LocalServices
NetworkSystem
NetworkServices

Which application pool having maximum privilege on the server?

Select from following answers:

1. LocalSystem

LocalServices
NetworkServices

What is name of default application pool in IIS?

NOTE: This is objective type question, Please click question title for correct answer.

What are the worker processes for IIS 5.1 and IIS 6.0?

For IIS 5.1 > aspnet_wp.exe
For IIS 6.0 > w3wp.exe

Name of the tool which is used for remote debugging of IIS

NOTE: This is objective type question, Please click question title for correct answer.

Select from following answers:

msvsmon.exe
iisremotedebugger.exe
remotehelper.exe
svcutil.exe

What is Web Farm?

This is one of the most questions in IIS. And along with that interviewer can as what is the different between Web farm and Web Garden?
When we hosted our web Application on multiple web server under a load balancer call the Web Farm. This is generally used for heavy load web application where there are many user requests at a time. So When Web Application is hosted on Different IIS Server over a load balancer, Load balancer is responsible for distribute the load on different server.
Please have a look into this:
http://www.dotnetfunda.com/articles/article713-difference-between-web-farm-and-web-garden.aspx

What is the default Identity of an Application Pool?

NetworkServices

How can we set the default page for any web application?

We can set the default page for a web site from the Virtual Directory Setting.
How To :
IIS Manager > Virtual Directory > Right Click > Properties > Go To Document Tab.

How we can set the Idle Time out of an worker process?

We can set the idle time out for a worker process from Application Pool Properties.
In Performance Tab of Application pool, we can set the Idle Time out of the worker process. This means worker process will shut down after that given time period if it stays idle. And will again wake up again if a new request comes.

What is .msc extension?

The MSC file type is primarily associated with 'Microsoft Management Console' by Microsoft Corporation. Addition to the management console in Windows. If the MMC fails to complete a normal shut down, the SMS.MSC file may be removed from the system. As a result, the shortcut is not found when the Systems Management Server Administrator console is started. See the added into link below for a solution. Note: This file type can become infected and should be carefully scanned if someone sends you a file with this extension.

The file extension .MSC refers to a Microsoft Management Console Snap-In Control file. These files add to or extend the functionality of the Microsoft Management Console, a system-management tool found in versions of Microsoft Windows.

log file

A file that lists actions that have occurred. For example, Web servers maintain log files listing every request made to the server. With log file analysis tools, it's possible to get a good idea of where visitors are coming from, how often they return, and how they navigate through a site. Using cookies enables Webmasters to log even more detailed information about how individual users are accessing a site.

Home > system log

system log

The system log file contains events that are logged by the operating system components. These events are often predetermined by the operating system itself. System log files may contain information about device changes, device drivers, system changes, events, operations and more.

Web site

A site (location) on the World Wide Web. Each Web site contains a home page, which is the first document users see when they enter the site. The site might also contain additional documents and files. Each site is owned and managed by an individual, company or organization.

FTP

Short for File Transfer Protocol, the protocol for exchanging files over the Internet. FTP works in the same way as HTTP for transferring Web pages from a server to a user's browser and SMTP for transferring electronic mail across the Internet in that, like these technologies, FTP uses the Internet's TCP/IP protocols to enable data transfer.

FTP is most commonly used to download a file from a server using the Internet or to upload a file to a server (e.g., uploading a Web page file to a server).

domain

(1) A group of computers and devices on a network that are administered as a unit with common rules and procedures. Within the Internet, domains are defined by the IP address. All devices sharing a common part of the IP address are said to be in the same domain.

(2) In database technology, domain refers to the description of an attribute's allowed values. The physical description is a set of values the attribute can have, and the semantic, or logical, description is the meaning of the attribute.

DNS

1) Short for Domain Name System (or Service or Server), an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.4.

The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.

(2) Short for digital nervous system, a term coined by Bill Gates to describe a network of personal computers that make it easier to obtain and understand information

domain name

Domain names are used to identify one or more IP addresses. For example, the domain name microsoft.com represents about a dozen IP addresses. Domain names are used in URLs to identify particular Web pages. For example, in the URL http://www.pcwebopedia.com/index.html, the domain name is pcwebopedia.com.

Every domain name has a suffix that indicates which top level domain (TLD) it belongs to. There are only a limited number of such domains. For example:

 gov - Government agencies

 edu - Educational institutions

 org - Organizations (nonprofit)

 mil - Military

 com - commercial business

 net - Network organizations

 ca - Canada

 th - Thailand

Because the Internet is based on IP addresses, not domain names, every Web server requires a Domain Name System (DNS) server to translate domain names into IP addresses.

HTTP

Short for HyperText Transfer Protocol, the underlying protocol used by the World Wide Web. HTTP defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. For example, when you enter a URL in your browser, this actually sends an HTTP command to the Web server directing it to fetch and transmit the requested Web page.

The other main standard that controls how the World Wide Web works is HTML, which covers how Web pages are formatted and displayed.

HTTP is called a stateless protocol because each command is executed independently, without any knowledge of the commands that came before it. This is the main reason that it is difficult to implement Web sites that react intelligently to user input. This shortcoming of HTTP is being addressed in a number of new technologies, including ActiveX, Java, JavaScript and cookies.

SMTP

(pronounced as separate letters) Short for Simple Mail Transfer Protocol, a protocol for sending e-mail messages between servers. Most e-mail systems that send mail over the Internet use SMTP to send messages from one server to another; the messages can then be retrieved with an e-mail client using either POP or IMAP. In addition, SMTP is generally used to send messages from a mail client to a mail server. This is why you need to specify both the POP or IMAP server and the SMTP server when you configure your e-mail application.

authentication

The process of identifying an individual, usually based on a username and password. In security systems, authentication is distinct from authorization , which is the process of giving individuals access to system objects based on their identity. Authentication merely ensures that the individual is who he or she claims to be, but says nothing about the access rights of the individual.

server

(ser´ver) (n.) A computer or device on a network that manages network resources. There are many different types of servers. For example:

File server: a computer and storage device dedicated to storing files. Any user on the network can store files on the server.
Print server: a computer that manages one or more printers, and a network server is a computer that manages network traffic.
Database server: a computer system that processes database queries.

Servers are often dedicated, meaning that they perform no other tasks besides their server tasks. On multiprocessing operating systems, however, a single computer can execute several programs at once. A server in this case could refer to the program that is managing resources rather than the entire computer.

Also see the Server Types page in the Quick Reference section of Webopedia for a comparison of server types.

Windows Server

A series of server operating systems developed by Microsoft Corporation. Windows servers are more powerful versions of their desktop operating system counterparts and are designed to more efficiently handle corporate networking, Internet/intranet hosting, databases, enterprise-scale messaging and similar functions.

The Windows Server name made its debut with the release of Windows Server 2003 and continues with the current release, Windows Server 2008 R2, which shares its codebase with Windows 7. Windows Server 2008 R2 debuted in October 2009 and currently has its first service pack (SP1) in development

virtual server

A server, usually a Web server, that shares computer resources with other virtual servers. In this context, the virtual part simply means that it is not a dedicated server -- that is, the entire computer is not dedicated to running the server software.

Virtual Web servers are a very popular way of providing low-cost web hosting services. Instead of requiring a separate computer for each server, dozens of virtual servers can co-reside on the same computer. In most cases, performance is not affected and each web site behaves as if it is being served by a dedicated server. However, if too many virtual servers reside on the same computer, or if one virtual server starts hogging resources, Web pages will be delivered more slowly.

dedicated server

A dedicated server is a single computer in a network reserved for serving the needs of the network. For example, some networks require that one computer be set aside to manage communications between all the other computers. A dedicated server could also be a computer that manages printer resources. Note, however, that not all servers are dedicated. In some networks, it is possible for a computer to act as a server and perform other functions as well.

In the Web hosting business, a dedicated server is typically a rented service. The user rents the server, software and an Internet connection from the Web host.

port

(n.) (1) An interface on a computer to which you can connect a device. Personal computers have various types of ports. Internally, there are several ports for connecting disk drives, display screens, and keyboards. Externally, personal computers have ports for connecting modems, printers, mice, and other peripheral devices.

Almost all personal computers come with a serial RS-232C port or RS-422 port for connecting a modem or mouse and a parallel port for connecting a printer. On PCs, the parallel port is a Centronics interface that uses a 25-pin connector. SCSI (Small Computer System Interface) ports support higher transmission speeds than do conventional ports and enable you to attach up to seven devices to the same port.

(2) In TCP/IP and UDP networks, an endpoint to a logical connection. The port number identifies what type of port it is. For example, port 80 is used for HTTP traffic. Also see Well-Known TCP Port Numbers in the Quick Reference section of Webopedia.

(v.) To move a program from one type of computer to another. To port an application, you need to rewrite sections that are machine dependent, and then recompile the program on the new computer. Programs that can be ported easily are said to be portable.

SSL

(pronounced as separate letters) Short for Secure Sockets Layer, a protocol developed by Netscape for transmitting private documents via the Internet. SSL uses a cryptographic system that uses two keys to encrypt data − a public key known to everyone and a private or secret key known only to the recipient of the message. Both Netscape Navigator and Internet Explorer support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http

Another protocol for transmitting data securely over the World Wide Web is Secure HTTP (S-HTTP). Whereas SSL creates a secure connection between a client and a server, over which any amount of data can be sent securely, S-HTTP is designed to transmit individual messages securely. SSL and S-HTTP, therefore, can be seen as complementary rather than competing technologies. Both protocols have been approved by the Internet Engineering Task Force (IETF) as a standard.

SSH

Developed by SSH Communications Security Ltd., Secure Shell is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over insecure channels. It is a replacement for rlogin, rsh, rcp, and rdist.

SSH protects a network from attacks such as IP spoofing, IP source routing, and DNS spoofing. An attacker who has managed to take over a network can only force ssh to disconnect. He or she cannot play back the traffic or hijack the connection when encryption is enabled.

When using ssh's slogin (instead of rlogin) the entire login session, including transmission of password, is encrypted; therefore it is almost impossible for an outsider to collect passwords.

SSH is available for Windows, Unix, Macintosh, and OS/2, and it also works with RSA authentication

IIS

Short for Internet Information Server, Microsoft's Web server that runs on Windows NT platforms. In fact, IIS comes bundled with Windows NT 4.0. Because IIS is tightly integrated with the operating system, it is relatively easy to administer. However, currently IIS is available only for the Windows NT platform, whereas Netscape's Web servers run on all major platforms, including Windows NT, OS/2 and UNIX.

metadata

Data about data. Metadata describes how and when and by whom a particular set of data was collected, and how the data is formatted. Metadata is essential for understanding information stored in data warehouses and has become increasingly important in XML-based Web applications.

recycle time

The phrase used to mean the amount of time a digital camera requires to reset the flash between one photo and the next. A longer recycle time makes it more difficult to capture action or time lapse shots. May also be called lag time or refresh rate.

How to config Nat and Pat with ccna

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:22:00 +0000

R1
====
en
config t
interface s2/0
clock rate 56000
ip address 193.1.1.1 255.255.255.0
ip nat outside
no shut
exit
interface fa0/0
ip address 192.168.0.1 255.255.255.0
ip nat inside
no shut
exit
ip nat inside source list 1 interface s2/0 overload
access-list 1 permit 192.168.0.0 0.0.0.255
R2
===

en
config t
interface s2/0
clock rate 56000
ip address 193.1.1.2 255.255.255.0
no shut
exit
line vty 0 4
password cisco
login
exit
enable password ccna

Explanation on Nat

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:21:00 +0000

Static NAT
==============
-> In this type of nat each and every private IP should have exactly one public IP.
-> This type of nat is used for Internal servers of the private network which need to exposed to the public network

Dynamic NAT
===========
-> In this type of nat each and every private IP will have a pool of ip and each private ip will choose that ip from that pool
-> This type of NAT is used for when many number of clients will be used in the network.

Explanation on modes of switches in CCNA

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:18:00 +0000

There are four different modes are there in CLI
1. User Mode
It is a mode where we can have limited number of commands can execute.
This mode will look like Switch> or Router>

2. Privilege Mode
This mode is like administrative mode where more number of commands can runs.
In this mode all the show and debug commands can run.
From this mode only we can move to configuration mode and interface level mode.
This mode will look like Switch# or Router#

3. Configuration Mode
This mode is like administrative mode where all the configuration related command will run.
In this mode we can configure overall device configuration.

This mode will look like Switch(config)# or Router(config)#

4. Interface Mode
This mode is used for configuration interface level/Port level.
This mode will look like switch(config-if)# or Router(config-if)#

What is Mac address

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:16:00 +0000

Mac-Address
============

- It is a 48 bit address which is assigned to a device uniquely.

- Each vendor network device will have unique mac-address.

- This is also called physical address and it can't change.

- This address has two parts

- Mac address represent in a hexadecimal values.

0-0000 6-0110 C-1100
1-0001 7-0111 D-1101
2-0010 8-1000 E-1110
3-0011 9-1001 F-1111
4-0100 A-1010
5-0101 B-1011

Example of a Mac-address:00-1A-6B-55-41-70

c:\>ipconfig /all

/# ifconfig

To see the vendor of a particular mac-addres

www.coffer.com/mac-find

ARP
=========

Address resolution Protocol

This protocol is a layer 2 protocol basically resolutes ip address to mac-address.

-Each and every system if it has to send the data packet to another system it should need the mac-address of the destination system.

-To get the mac-address of the destination system ARP will be used.

-ARP takes the ip address of the destination system and creates a request frame and send it to every body and destination system sends the arp reply frame by sending its mac-address.

To see that what are the resolutions done by the system by ARP will be known using the command

c:\>arp -a

ping
========

Packet Internet Gopher

It is a layer 3 protocol basically used for checking the connectivity between two systems.

syntax
========

c:\>ping <<ipaddress>>

c:\>ping <<ipaddress>> -t

Traceroute
===============

This command shows how many hops are there between the source system to the destination.

This command also help to trace how the packet went to the destination that is which routes it took.

Syntax for Traceroute
=======================

c:\>traceroute <<ipaddress>>

Traceroute will show until 30 hop count.

What is IP Address and subnetting

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:15:00 +0000

IP ADDRESS
===========

- This a logical address which is consisting of 32 bit.

- This address is been divided into four parts each of 8 bits

- The four parts of the IP address is 8.8.8.8 separated by .

If all bits are 0

00000000.00000000.00000000.00000000

0.0.0.0

If all bits are 1

11111111.11111111.11111111.11111111

255.255.255.255

Depending on their range the ip address is divided into five different classes.

1.Class A 2.Class B 3.Class C 4.Class D 5.Class E

Class A
==========

This class A IP address have

Network Bits :8 bits

Host bits :24 bits

[A Network can be termed as Street number and Host bits can be termed as house number]

Range
=======

0xxxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx

if x=0

00000000.00000000.00000000.00000000

0.0.0.0

if x=1

01111111.11111111.11111111.11111111

127.255.255.255

Private IP Address
==================

Private ip address are used in the lan network. These ip we no need to pay for that.

The range for these private IP is

10.0.0.0-10.255.255.255

Public IP Address
=================

Public ip address are used in the wan network.For these ip we need to pay for that.

The range for these public ip is

1.0.0.0-9.255.255.255

11.0.0.0-126.255.255.255

Exceptional IP
================

127.0.0.0-127.255.255.255

These ip address is loop back address.This IP is used for local system checking. That is protocol stack checking.

0.0.0.0- Global Network ID

Subnet Mask
===========

Subnet mask basically show how many network portions are available in your ip address.

Subnet mask for class A is :255.0.0.0

So here 255 -11111111

That means in class A ip first portion is the network portion and other three are host portions.

Network
==========

2 ^ (n-k) -2 => 2 ^ (8-1) -2 => 2 ^ 7 -2 =126

Host
=======

2 ^ 24 -2 => 16777216 -2 =>1,67,77214

Class B
==========

This class A IP address have

Network Bits :16 bits

Host bits :16 bits

[A Network can be termed as Street number and Host bits can be termed as house number]

Range
=======

10xxxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx

if x=0

10000000.00000000.00000000.00000000

128.0.0.0

if x=1

10111111.11111111.11111111.11111111

191.255.255.255

Private IP Address
==================

Private ip address are used in the lan network. These ip we no need to pay for that.

The range for these private IP is

172.16.0.0-172.31.255.255

Public IP Address
=================

Public ip address are used in the wan network.For these ip we need to pay for that.

The range for these public ip is

128.0.0.0-172.15.255.255

172.32.0.0-191.255.255.255

Network
==========

2 ^ (n-k) => 2 ^ (16-2) => 2 ^ 14 =16384

Host
=======

2 ^ 16 -2 => 65536-2 => 65534

Class C
==========

This class C IP address have

Network Bits :24 bits

Host bits :8 bits

[A Network can be termed as Street number and Host bits can be termed as house number]

Range
=======

110xxxxxx.xxxxxxxx.xxxxxxxx.xxxxxxxx

if x=0

11000000.00000000.00000000.00000000

192.0.0.0

if x=1

11011111.11111111.11111111.11111111

223.255.255.255

Private IP Address
==================

Private ip address are used in the lan network. These ip we no need to pay for that.

The range for these private IP is

192.168.0.0-192.168.255.255

Public IP Address
=================

Public ip address are used in the wan network.For these ip we need to pay for that.

The range for these public ip is

192.0.0.0-192.167.255.255

192.169.0.0-223.255.255.255
Network
==========

2 ^ (n-k) => 2 ^ (24-3) => 2 ^ 21 =20,97,152

Host
=======

2 ^ 8 -2 => 256-2 => 254

Subnet Mask
===========

Subnet mask basically show how many network portions are available in your ip address.

Subnet mask for class C is :255.255.255.0

So here 255.255.255 -11111111.11111111.11111111

Class D
===========

The Class D ip address is used for multicasting.

The range of these ip address are

224.0.0.0-239.255.255.255

we can't assign these ip address in normal host.

These ip address are used for OSPF and video conferencing.

Class E
=======

The class E Ip address is used for strictly research purpose

The range of these ip address are

240.0.0.0-255.255.255.255

==============================================================
IP address can be assigned to the system in three different ways

1. Manual Assignment

2. DHCP

3. APIPA- Automatic Private IP Address

1.Manual Assignment
====================

In a manual assignment

Click on Start->Control Panel ->Click on Network Connection->Right Click on Lan Connection ->Properties -> Select TCP/IP ->Click on properties -> Enter the IP Address.

2.DHCP
============

In dhcp we can assign the ip address to the system dynamically.Here a win-2003 or a router can act as dhcp server and there the administrator can configure the pool for dhcp.Then the other client system can get the dhcp ip address.

In dhcp there are four phases which are

D-Discover -Client discovers the dhcp message

O-Offer - The server will offer the dhcp service

R-Request - Client request for ip

A-Acknowledge -Server will acknowledge with the ip

APIPA
===========

when a system ask for dhcp server to have an ip but if dhcp server is down. Then the system itself will assign the ip address.That ip address is called APIPA.

The range of the IP address is 169.254.0.0-169.254.255.255

DNS
========

Domain Naming Service.

This service basically resolutes name to IP.

What is Ethernet

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:12:00 +0000

========
->Ethernet is a family of frame-based computer networking technologies for local area networks (LANs).

->It defines a number of wiring and signaling standards for the Physical Layer of the OSI networking model as well as a common addressing format.

->Ethernet is standardized as IEEE 802.3. The combination of the twisted pair versions of Ethernet for connecting end systems to the network.along with the fiber optic versions for site backbones, is the most widespread wired LAN technology.

->Ethernet was developed at Xerox PARC between 1973 and 1975.

->Ethernet stations communicate by sending each other data packets, blocks of data that are individually sent and delivered.

->As with other IEEE 802 LANs, each Ethernet station is given a single 48-bit MAC address, which is used to specify both the destination and the source of each data packet

Router As DHCP Server

noreply@blogger.com (msvsdak) — Mon, 26 Mar 2012 18:10:00 +0000

======================
Router(config)#ip dhcp pool <<poolname>>
Router(config-dhcp)#network 192.168.0.0 255.255.255.0
Router(config-dhcp)#default-router 192.168.0.1
Router(config-dhcp)#dns-server 192.168.0.254
Router(config)#ip dhcp excluded-address 192.168.0.2 192.168.0.10
SSH
====
It is an application layer protocol.

It runs on port number 22.

This is a terminal emulation protocol.

It works as telnet but it is secure than Telnet.

It encrypts the data.

A router can be configure for SSH.

To configure router to SSH following are the commands.

How to configure SSH in router
=============================
Router(config)#hostname NIITAPT
NIITAPT(config)#username <<username>> password <<password>>
NIITAPT(config)#ip domain-name <<domain-name>>
NIITAPT(config)#crypto key generate rsa
NIITAPT(config)#ssh version 2
NIITAPT(config)#line vty 0 4
NIITAPT(config-line)#login local
NIITAPT(config-line)#transport input ssh
NIITAPT(config-line)#exit

PC>ssh -l cisco 192.168.1.1

How to use cisco packet tracer

noreply@blogger.com (msvsdak) — Wed, 21 Mar 2012 18:43:00 +0000

Hi,

watch here to know how to use cisco packet tracer...

Script: For step by step:-

Continue with configuration dialog? [yes/no]: no

Press RETURN to get started!

Router>enable

Router#config t

Router(config)#hostname router0

router0(config)#enable secret class

router0(config)#line con 0

router0(config-line)#password cisco

router0(config-line)#login

router0(config-line)#exit

router0(config)#line vty 0 4

router0(config-line)#password cisco

router0(config-line)#login

router0(config-line)#exit

router0(config)#interface fa0/0

router0(config-if)#ip address 192.168.1.1 255.255.255.0

router0(config-if)#description router0 fa0/0

router0(config-if)#no shutdown

%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

router0(config-if)#exit

router0(config)#interface fa1/0

router0(config-if)#ip address 192.168.2.1 255.255.255.0

router0(config-if)#description fa1/0

router0(config-if)#description router0 fa1/0

router0(config-if)#no shutdown

%LINK-5-CHANGED: Interface FastEthernet1/0, changed state to up

router0(config-if)#

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0, changed state to up

router0(config)#exit

router0#show running-config

router0#copy running-config startup-config

router0#

How to Install Nagios

noreply@blogger.com (msvsdak) — Mon, 05 Mar 2012 05:32:00 +0000

#!/bin/bash

#By speed

#This is to install Nagios

#Script Must Run as root

if [[ $EUID -ne 0 ]]

then

echo "This Script must be run as root User" 1>&2

exit 1

cd /usr/local/src

yum install -y wget

wget http://sourceforge.net/projects/nagios/files/nagios-3.x/nagios-3.3.1/nagios-3.3.1.tar.gz

wget http://sourceforge.net/projects/nagios/files/nagiosplug/1.4.15/nagios-plughins-1.4.15.tar.gz

#we need compiler because we don't have repositorys.

yum install -y httpd pho gcc glibc glibc-common gd gd-devel make mysql mysql-devel net-snmp

# here mysql mysql, netsnmp if you need to monitor mysql and switches etc....

useradd nagios

groupadd nagcmd

usermod -a -G nagcmd nagios

tar zxvf nagios-3.3.1.tar.gz

tar zxvf nagios-plugins-1.4.15.tar.gz

cd nagios

#compile commands

./configure --with-command-group=nagcmd

make all

make install; make install-init; make install-config; make install-commandmode; maike install-webconf

cp -R contrib/eventhandlers/ /usr/local/nagios/libexec/

chown -R nagios:nagios /usr/local/nagios/libexec/eventhandlers

cd ..

cd nagios-plugin*

./configure --with-nagios-user=nagios --with-nagios-group=nagios

make

make install

chkconfig --add nagios

chkconfig nagios on

chkconfig httpd on

exit 0

How to create a Windows7 usb bootable

noreply@blogger.com (msvsdak) — Sat, 03 Mar 2012 20:19:00 +0000

We need a windows 7 iso image file and hiren boot cd 15. In that go to partion/boot/mbr then Rpmpreusb to make usb bootable. Simply follow the steps as mention in the software.
You can any os with this software.

Clean installation of Windows 7 in HP Envy 15

noreply@blogger.com (msvsdak) — Sat, 03 Mar 2012 19:33:00 +0000

I have worked more than 1 week to resolve the issue. The problem is clean installation of windows 7 in HP Envy 15. The error while I am installing windows 7 is Dvd/cd drivers are not available. Even though I downloaded the drivers from HP. I copied in the memory card given by HP and browsed the files from memory card. Even though Its not resolve my issue.

Finally I created a usb bootable windows 7 by using Windows 7 dvd and Hiren boot cd 15. After that I downloaded the network driver and extracted then integrated the Nec driver of Envy 15 with a command.

Ex. c:\usbdriver.exe -s:f:\

In the above ex F:\ is my boot usb drive and usbdriver.exe is my usb driver. Which will integrate it into the usb.

Use the first usb port beside the audio jack. Not with the normal usb ports.

Now Ready to install Windows7 with no issues.

How to create custom messge on ssh login

noreply@blogger.com (msvsdak) — Mon, 13 Feb 2012 05:26:00 +0000

Configure vi /etc/motdEnter u message Hi this is anjan kumar.U are working in my computer...........

Then Save the file and do ssh. Remote users will see the custom message that you have placed in the ./etc/motd file.
In GUI use gdmsetup command Enter you custom message and close the window.

APACHE TOMCAT INSTALLATION STEPS

noreply@blogger.com (msvsdak) — Thu, 12 Jan 2012 17:29:00 +0000

Tomcat configuration
Install with RHEL5 packagesInstall apache, tomcat and deps,yum install \
httpd \
tomcat5 \
tomcat5-webapps \
tomcat5-admin-webapps
Configure the environment,grep _HOME /etc/sysconfig/tomcat5
grep _HOME /etc/ant.conf
cd ~/
vi .bashrc
add those lines,JAVA_HOME="/usr/lib/jvm/java"
CATALINA_HOME="/usr/share/tomcat5"
TOMCAT_HOME="$CATALINA_HOME"
JASPER_HOME="/usr/share/tomcat5"
ANT_HOME=/usr/share/ant
export JAVA_HOME CATALINA_HOME TOMCAT_HOME JASPER_HOME ANT_HOME
apply,source .bashrc
Start and enable the daemon,service tomcat5 start
chkconfig tomcat5 on

Create/edit roles and users,cd /usr/local/tomcat/conf
vi tomcat-users.xml
add those lines,<role rolename="manager"/>
<role rolename="admin"/>
<user username="admin" password="PASSWORD" roles="manager,admin"/>
note. change PASSWORD accordinglyapply,/usr/local/tomcat/bin/shutdown.sh
/usr/local/tomcat/bin/startup.sh
#service tomcat5 restart
Point your browser to server's URL and check it's responding,http://10.1.1.2/
then point it to the administration interface and login,http://10.1.1.2/admin/
admin/PASSWORD
then point it to the manager interface and login,http://10.1.1.2/manager/html
admin/PASSWORD

Administration

Snapshot restore

Router PPPoe configuratjion

puppet master installation in RHEL 5

SSH login in ubuntu

Package Management

Domain naming system

How to config vnc server and client in rhel or centos

NIS CONIFGURATION IN RHEL5

LVM CONFIGURATION IN RHEL5

How to recovery data from formatted Hard disk.

How to host a website using IIS windows.

Background Intelligent Transfer Service

Important question to prepare IIS in windows

HTTP.sys is a kernel mode device driver, It handles the http requests. It handle all the incoming http request and stored in request queue and provide high performance connectivity for http server applications in FIFO (first in first out ) method. IIS Web Gardens?

By default in iis 6 user accounts are 1. IUSER (guest user) account -- for anonymous access 2. IWAM (global user) account -- for iis applications 3. ASP.NET account -- for asp applications 4. IIS_WPG account -- for worker process applications IIS ERROR codes?

Error codes are 100 - informational 200 - successful 300 - redirection 400 - client side 500 - server side In which process does IIS runs?

IIS runs in 2 modes (application isolation modes): 1. worker process isolation mode is a new feature of IIS6.0. 2. IIS5.0 isolation mode - for compatibility with apps depending on IIS5.0 What are the different IIS authentication modes in IIS 5.0 and Explain?

Where are the IIS log files stored?

path of iis logfiles : %System root %/system32/logfiles iis log file format : w3svc ( w3c extended lof\g file format ) ftp log files path : %System root %/system32/logfiles ftp logfile format : MSFTPSVC IIS Port numbers?

http : 80 (default port for iis ) ssl : 443 ftp : 21 smtp : 25 pop2 : 109 pop3 : 110 imap : 143 nntp : 119 LDAP : 389 dns : 53 dhcp : 67 IIS services ?

Advantages in IIS 6.0?

IIS Server limitations?

IIS Frontpage extenstions?

IIS Performance tuning ?

IIS Host headers ?

IIS DNS, DHCP concepts ?

IIS Isolation modes ?

IIS Asp & .net settings ?

IIS Default objects in IIS Manager ?

How do you administer Connection Pooling in IIS 3.0?

How do you administer Connection Pooling in IIS 4.0?

Did you work on IIS administration?

What is the Role of IIS?

What are the different versions on IIS that you have worked on?

What is Application Pool in IIS?

What is the Name of Default Application Pool in IIS ?

What is Recycling of Application Pool?

Recycling Application pool means recycle the Worker process (w3wp.exe ) and the memory used for the web application.

Which is not an Identity of Application Pool?

DNS

How to config Nat and Pat with ccna

Explanation on Nat

Explanation on modes of switches in CCNA

What is Mac address

What is IP Address and subnetting

What is Ethernet

Router As DHCP Server

How to use cisco packet tracer

How to Install Nagios

How to create a Windows7 usb bootable

Clean installation of Windows 7 in HP Envy 15

How to create custom messge on ssh login

APACHE TOMCAT INSTALLATION STEPS

HTTP.sys is a kernel mode device driver, It handles the http requests. It handle all the incoming http request and stored in request queue and provide high performance connectivity for http server applications in FIFO (first in first out ) method.

IIS Web Gardens?

By default in iis 6 user accounts are
1. IUSER (guest user) account -- for anonymous access
2. IWAM (global user) account -- for iis applications
3. ASP.NET account -- for asp applications
4. IIS_WPG account -- for worker process applications
IIS ERROR codes?

Error codes are
100 - informational
200 - successful
300 - redirection
400 - client side
500 - server side
In which process does IIS runs?

IIS runs in 2 modes (application isolation modes):
1. worker process isolation mode is a new feature of IIS6.0.
2. IIS5.0 isolation mode - for compatibility with apps depending on IIS5.0
What are the different IIS authentication modes in IIS 5.0 and Explain?

path of iis logfiles : %System root %/system32/logfiles
iis log file format : w3svc ( w3c extended lof\g file format )
ftp log files path : %System root %/system32/logfiles
ftp logfile format : MSFTPSVC
IIS Port numbers?

http : 80 (default port for iis )
ssl : 443
ftp : 21
smtp : 25
pop2 : 109
pop3 : 110
imap : 143
nntp : 119
LDAP : 389
dns : 53
dhcp : 67
IIS services ?