Hello everyone.
This might have that here we are now on the first level of discourse and in this lab I'm going to show
you how we can't comprehend the DNS functionality on the Mike Crowder.
So as you can see here we have 17 points to do.
So it's a long lab as I already said.
But before I start doing the points let me just explain to you what is the lab scenario what that we're
going to do and what we are going to do in this lab.
So this is our lab scenario.
We have my critics out there sitting here that is connected to the Internet.
That means that this shelter can go to the Internet and from the other side I'm connecting my computer
which is here to the Internet to the face of the mike the crowd.
OK.
So the idea is just following my mike dick out there is connected to the Internet.
So I want to do some work on the DNS of the mike to go out there so on the mike takes after you have
a place where you can do some work on the DNS such as should you allow the request for DNS to come to
that order.
That means that users like this B.S. He can send the DNS request to the mike dicks out there and the
Mike freaks out there were forwarded to the DNS server which is somewhere and the Internet maybe your
ISP.
And also I'm going to show you how you can do the caching on the DNS.
So that means that any request which come to the mike the IT THEN IT WILL cache a record for it that
therefore the domain name map to the IP address.
And I'm going to show you also how you can make a static DNS.
That means that you map and a domain name to an IP either statically on the Mike Crowder without data
needs to go to the DNS server.
So those are the main things that I'm going to do it this lot.
Let's now go to the points I start doing them one by one but no one from the you're out there being
2 8 8 8 8 do you have a reply.
So as I already have said that the Microsoft that is already connected to the Internet.
So we have to ping through that IP others which is the DNS server or Google.
First let me just put the picture here.
OK.
So we'll go now to inbox and then I will connect to the MAC address because on my computer at this moment
there is no IP address.
OK.
So I would connect with the MAC address of out there and I would say connect.
Now they asking us to bring a that they that data.
So let's do that.
I have to go here to the terminal and I said being able to enter and as you can see I have a reply.
And that's because the Microsoft out that is already connected to the Internet if you don't know how
to connect the Mike take it out to the internet I have a free course that you can join for it.
And then I will show you all steps how you can connect the mike Crocker to the Internet.
But no one has done phone number two from the router pink to Google dot com.
Do you have a reply.
And if yes or not then you have to say why not.
So now we need to link to the Google server.
But we need to bring to the domain name itself.
Let's do that.
I will go to the market counter again to the new terminal and I would say here Bing Google dot com.
And as you can she is saying invalid value of Mac others Mac others require divided value for the argument
IP version 6 and why resolving IP others could not get the answer from the DNS server.
All right.
So we can see here that there is a problem that the market dropped that is trying to ping Google dot
com but he doesn't know what is die the others of the Google dot com because it doesn't have the DNS
server set on it.
OK.
So that means that the packet is being lost and he doesn't know anything about Google that com because
as I already said that also doesn't understand the domain name.
He needs to understand the IP others of that domain name.
So point number two is done.
We don't have a reply on the Google dot com because it looks like there is no DNS set on the Michael
Crowther now but number three said the DNS on the router to tendency to the tune of that one and tried
to pin the Google dot com doesn't work.
So we don't have a DNS server under my Kickstarter.
That's why you cannot begin to do the server of Google dot com.
Now we need to set the DNS server on the micro counter and we would check if it works.
And they're saying that we have to put the tendency to the zero the one that's DNS.
So let's do that.
We go here to the Mike Vick again to inbox and from here I have to go to IP DNS and here you have servers.
OK.
So here they said to tend to due to the genius upon why we are putting standards here this year that
one because actually if I go back to the picture here what I have here before the software is connected
to the Internet is connected to a Mike the crowd that also that's the Microsoft there from where I'm
getting the Internet and from here Mike takes out the IP others of this interface is 10 0 0 1 and then
this Microsoft has also DNS set on it to be able to allow all request to come and go to the Internet.
OK so what I need to do I need to put here then the zero the zero that one on the DNS of this might
go.
So I go back to the one box here and we were on IP DNS and here I have to put this Daniel Julia Gillard
of one and then I'll have to say okay.
But before I click on Okay look here you can add here the DNS.
If you have more than the NSA you can add more than 1 DNS server.
OK but in my case I only need now only one.
So I pretended 0 0 that 1 and then I will say OK now I have added the DNS on my folks out there.
Let's now try to ping Google dot com again to see if it's working.
So I'll say Bing and Google dot com and as you can see now the reply is coming.
Because what's happening that the packet is being sent to the router the router send it to the Matrix
out which has the IP of tend to do the deal that one might start or send it to the DNS server which
is somewhere.
OK point number three is done we have set the DNS on the router 210 the 0 0 1 and we tried to ping Google
and it's working all right now configure your routing to provide internet to your PC.
So if we go back here to the picture what I have now is I do have now Internet on the mike the cockpit
on the.
So this mike Decatur can go to the internet but I also warn that these species here also can go to the
Internet via the mike rather so I need to configure the microphone rather in a way to provide internet
to the species that means I already have now the Internet on the router I need to make the source not
so that means I want that the IP address which I'm going to put it on the P.C. here which is 1 9 2 1
6 8 that one not one so I was this IP others will be translated to be able to go to the Internet.
All right.
So that's what I need to do from this Microsoft.
And then of course on the P.C. we need to put the iPod that is the subnet mask we need to put also the
gateway and we need to put the DNS so it go through the Internet.
So let's do the configuration to the species that I have inside my network can go also to the Internet
I'm not one one box and from here I have to say IP and I will go to firewall and then from here I have
to go to now and I will say source that.
That means any IP others coming from the range of 1 9 2 1 6 8 that 1 the zero slash 24 please look at
be picture.
So this is the rest of my IP which are inside.
That means that IP where my computer is getting an IP from them.
So my computer is going to be one I don't say that one dot wants or that is from this ranch.
So any IP coming from 1 8 2 1 6 8 1 0 then the action is to masquerade Masquerade means to not it to
translate it then it goes to the Internet.
OK.
So that's the only thing I need to do here.
Of course if you need also on the router to have around but that's already I haven't because they're
out is already on the Internet connected and you have to put an IP others on the interface all those
things are basic things.
And as being this course an advanced course I assume that you already know how you can put your router
to the Internet.
But now what this is what I only need is to make the source net.
So the computer can go now to the Internet via disruptor but not before is done.
Point number five set on your P.C. the DNS 2 1 9 2 1 6 8 1 2 5 4.
So what is 1 8 2 1 6 8 1 2 to 5 4.
If I go here look at this IP address here this IP address is 1 9 2 1 6 8 1 8 2 5 4.
So this deal I've got this off with the net to where my computer is connected to it.
So actually what I need to do I have to go through the settings of the IP address on this computer.
I have to put it one and two and say that one of the one I'll have to put the subnet mask have to put
the Gateway which is 1 and 2 and say that 1 2 5 4 also because the computer has to get away from this
side.
That means this is the way he needs to go in order to go to the Internet and I will put the DNS one
that don't sectors 1 2 5 4 on my b c so let's do that I will open now my computer here the settings
and from here I have to go through a network sharing and the on the adapter.
So this is the adapter that is connected to the Matrix although I will have to go to properties and
from here I will put first the others 1 9 2 1 6 8.
That one the one the subnet mask is going to be 2 5 5 to 4 5 4 5 0 0 0.
The Gateway has 1 9 2 1 6 8 1 2 5 4 because that's the way you can go to the outside and the DNS.
They said to put it 1 9 2 1 6 8 1 2 5 4 which is the IP of Internet 2 of the mike the.
Right.
And I have to be sure that the mike dicks out there has this IP on its Internet to interface.
Let's check that I will go to one box and I will go IP address and we actually don't have this IP.
I will put it not one I to one state that 1 2 5 4 slash 24.
That is on the interface Internet to
now this interface has an IP address and my computer has an IP others from the same range.
So now if I try to bring it from my computer being 1 9 2 1 6 8 1 2 5 4 I am getting a reply.
OK.
So the computer and the router are we able to see each other.
Well number five is done.
Port number six open I see to be as my network training that come from your P.C. does it work.
If not fix the problem.
All right before I open that I just want to try.
If I make being for example a day to day to day to see if my computer is connected to the Internet you
can see that I'm able to bring to the Internet.
All right.
So that means that my computer can go to the router and rather send its packet to the Internet and bring
it back to him.
All right very good.
Now we need to open Ashley T.P. as my network training.
That come from the and see if it opens.
So that is my brother.
Now I will go here to CPS
my network training Tom and would check if it's gonna open
and we can see it's not opening if we try to open for example any other Web site like Facebook dot com
let's try Facebook.
And also we see it's not opening.
While we have seen that if we think like we just made out with food being a day to day date which is
the Internet here and I faddish on the Internet we have a reply.
So what is the problem why.
I can go from might be seen to this another way of being but I cannot open the browser.
Actually it's again a problem in DNS and I'm going to show you that in a moment.
So we have to open the monitoring that come and it's not working and saying if not fix the problem.
So we have to fix the problem.
The problem is if I go back here and we go to IP DNS that's on the router the DNS actually if I show
you here on the picture.
So what's happening at this moment the she is saying to the mike fix author I want to go to my network
training dot com.
And the man who is otherwise say okay fine.
My network training dot com.
What is the IP others of office was trying to check with the DNS.
But then he said oh you're requesting for DNS query but I cannot help you because all my settings I
don't have any possibility for you to allow you to request DNS query that in this case the request that
is coming from the U.S. will be stopped would be dropped completely because it's not allowing the request
to go further.
The DNS requests.
So what we need to do we have to make on the mike the cloud to a way to allow the DNS requests to come.
So when you say I want to go to my network training dot com the Microsoft will say oh OK let me check
the IP address of this my network threatening dot com Web site.
And then he will transfer that to the router which is standard user of 1 the router will send it to
the DNS server and then it comes back.
So that's the main problem that we are having now.
All right.
So how to solve this problem.
Actually if we go through the Microsoft Word here and I will show you again from IP DNS.
We have here something called allow a remote request and that needs to be checked.
So do you check that then it will allow the DNS request to come to the micro counter and he can use
it you can forward it to the DNS server.
Of course you have to be careful that when you select that because in case your microphone output is
not secure then this can be like a DNS request for also users who are outside your network that can
use it as being a DNS for them.
So that means that all the traffic will come to your router and the router will send the DNS queries
to the DNS server.
So what you need to do you have to secure your network in a way that you don't allow DNS requests coming
from outside to make the crop.
All right.
So that's what you need to do you have to check.
Allow remote requests and then we say OK now if I try again now to open my network training that can
destroy my network training dot com.
You can see now it is working.
That's the only thing that you need to do in order to fix the problem.
Point Number Six is done.
Point Number Seven check the DNS cache on the rather so we have already opened my network training that
come let's go through the router and if we go to IP DNS we go to cash.
You can see all those information are based on when I open my network of training that you can see here.
So that cash which are left inside that out or if you want you can hear say flash cash then it will
delete everything and then I will open my network training.
Let's do it this way so when I open the browser you can see that some information but also I'll flash
it again now and I will right here my network training dot com and directly you can see that it will
cache the information inside the DNS.
OK.
That's very important to see because the caching can go faster your request in case someone else the
for my network training is already in the cache and the mapping happened directly.
OK.