sudo passwd ​ apt update && upgrade ​ vi /etc/ssh/sshd_config Port 2244 PasswordAuthentication yes ​ systemctl restart sshd ​ apt install nginx systemctl enable nginx ​ fallocate -l 2G /swapfile chmod 600 /swapfile mkswap /swapfile ​ vi /etc/fstab /swapfile swap swap defaults 0 0 추가 ​ ​ timedatectl set-timezone Asia/Seoul timedatectl ​ dpkg-reconfigure tzdata Asia - Seoul ​ dpkg-reconfigure loca..

LEFT-R2 ※rrasmgmt.msc 실행 ROAD-DC ※dsa.msc 실행 ROAD-DC2 ※cmd 실행 repadmin /syncall /Aed VISITOR ※네트워크 공유센터 ※vpn 설정 ※powershell 실행 Add-VpnConnectionTriggerApplication -ApplicationID "C:\Program Files\Internet Explorer\iexplore.exe" -ConnectionName VPN -Force

ROAD-DC ※powershell 실행 New-ADGroup -GroupScope global "ROAD_DA" ※dsa.msc 실행해, ROAD_DA 그룹에 WORKER 컴퓨터 추가 ※inetmgr 실행 ROAD-DC2 ※cmd 실행 repadmin /syncall /Aed LEFT-R2, RIGHT-R2 ※powershell 실행 Install-WindowsFeature routing -IncludeManagementTools Get-Certificate -SubjectName cn=*.road.com -CertStoreLocation Cert:\LocalMachine\My\ -Template ROAD_SRV LEFT-R2 ※ramgmtui 실행 ※services.msc 실행 ※ramgmtui 실행..

FW ※powershell 실행 Install-WindowsFeature dns,dhcp,web-server –IncludeManagementTools Add-DhcpServerSecurityGroup Add-Content C:\inetpub\wwwroot\connecttest.txt -Value "Microsoft Connect Test" -NoNewline ※dnsmgmt.msc 실행 ※powershell 실행 dnscmd /config /enablednssec 1 Restart-Service DNS -PassThru LEFT-R1 ※powershell 실행 Install-WindowsFeature dns –IncludeManagementTools ※dnsmgmt.msc 실행 ※원래 있던 서버들은 모..

ROAD-DC ※gpmc.msc 실행 ROAD-DC2 ※cmd 실행 repadmin /syncall /Aed 모든 road.com 호스트 ※cmd 실행 gpupdate /force

ROAD-DC ※powershell 실행 Install-WindowsFeature web-server -IncludeManagementTools mkdir C:\inetpub\www\ echo “This Site is www.road.com” > C:\inetpub\www\index.html Get-Certificate -SubjectName cn=*.road.com -CertStoreLocation Cert:\LocalMachine\My\ -Template ROAD_SRV ※inetmgr 실행 ROAD-DC2 ※powershell 실행 Install-WindowsFeature web-server, web-cert-auth, web-client-auth –IncludeManagementTools mkdi..

ROAD-CA, ROAD-CA2 ※가상 머신에 각각 10GB 하드디스크를 3개씩 추가한다. (추가할 때 하나씩 따로따로 추가해줘야함.) ROAD-CA, ROAD-CA2 ※powershell 실행 Install-WindowsFeature Failover-Clustering -IncludeManagementTools restart-computer ROAD-CA ※powershell 실행 Test-Cluster -Node road-ca,road-ca2 -Include "Storage Spaces Direct" New-Cluster -Name FAILOVER -Node road-ca,road-ca2 -NoStorage -StaticAddress 192.168.2.100 enable-ClusterS2D New-V..

ROAD-CA, ROAD-CA2 ※powershell 실행 Install-WindowsFeature ad-certificate,web-server –IncludeManagementTools ROAD-CA ※powershell 실행 Install-AdcsCertificationAuthority -CACommonName ROAD-CA -CAType EnterpriseRootCA -ValidityPeriod Years -ValidityPeriodUnits 5 ROAD-CA ※certsrv.msc 실행 ROAD-DC ※cmd 실행 repadmin /syncall /Aed 모든 road.com 호스트 ※cmd 관리자 권한 실행 gpupdate /force

ROAD-DC2 ※ncpa.cpl 실행 ※road.com 도메인 가입 후, powershell 실행 Install-WindowsFeature ad-domain-services –IncludeManagementTools Install-ADDSDomainController -DomainName road.com –NoGlobalCatalog RIGHT-R1, RIGHT-R2, ROAD-CA, ROAD-CA2 ※road.com 도메인 가입 ROAD-DC ※dssite.msc 실행 ROAD-DC2 ※powershell 실행 repadmin /syncall /Aed ROAD-DC ※powershell 실행 repadmin /syncall /Aed Restart-Service dns -PassThru ※dnsmgmt..

LEFT-R1, RIGHT-R1, FW ※powershell 실행 Install-WindowsFeature routing -IncludeManagementTools ※rrasmgmt.msc 실행 ※services.msc 실행 LEFT-R1 ※powershell 실행 $proposal1 = New-NetIPsecAuthProposal -Machine -PreSharedKey "Skill39" $set1 = New-NetIPsecPhase1AuthSet -DisplayName set1 -proposal $proposal1 $proposal2 = New-NetIPsecMainModeCryptoProposal -Encryption DES3 –Hash SHA256 -KeyExchange DH14 $set2 = N..