11. IP and network management

This chapter describes how IP addresses for computer systems in a UCS domain can be centrally managed via UMC modules and assigned via DHCP.

Network objects bundle available IP address segments of a network. The DNS resolution as well as the assignment of IP addresses via DHCP are integrated in UCS, as detailed in Administration of DNS data with BIND and IP assignment via DHCP.

Incoming and outgoing network traffic can be restricted via the Univention Firewall based on iptables, see Packet filter with Univention Firewall.

The integration of the proxy server Squid allows the caching of web contents and the enforcement of content policies for web access, see Web proxy for caching and policy management / virus scan.

• 11.1. Network objects
• 11.2. Administration of DNS data with BIND
  • 11.2.1. Configuration of the BIND name server
    • 11.2.1.1. Configuration of BIND debug output
    • 11.2.1.2. Configuration of the data backend
    • 11.2.1.3. Configuration of zone transfers
  • 11.2.2. Administration of DNS data via Univention Management Console module
    • 11.2.2.1. Forward lookup zone
      • DNS UMC module forward lookup - General tab
      • DNS UMC module forward lookup - Start of authority tab
      • DNS UMC module forward lookup - IP addresses tab
      • DNS UMC module forward lookup - MX records tab
      • DNS UMC module forward lookup - TXT records tab
    • 11.2.2.2. CNAME record (Alias records)
    • 11.2.2.3. A/AAAA records (host records)
    • 11.2.2.4. Service records
    • 11.2.2.5. Reverse lookup zone
      • DNS UMC module reverse lookup - General tab
      • DNS UMC module reverse lookup - Start of authority tab
    • 11.2.2.6. Pointer record
• 11.3. IP assignment via DHCP
  • 11.3.1. Composition of the DHCP configuration via DHCP LDAP objects
    • 11.3.1.1. Administration of DHCP services
    • 11.3.1.2. Administration of DHCP server entries
    • 11.3.1.3. Administration of DHCP subnets
    • 11.3.1.4. Administration of DHCP pools
      • General tab
      • Advanced settings tab
    • 11.3.1.5. Registration of computers with DHCP computer objects
    • 11.3.1.6. Management of DHCP shared networks / DHCP shared subnets
  • 11.3.2. Configuration of clients via DHCP policies
    • 11.3.2.1. Setting the gateway
    • 11.3.2.2. Setting the DNS servers
    • 11.3.2.3. Setting the WINS server
    • 11.3.2.4. Configuration of the DHCP lease
    • 11.3.2.5. Configuration of boot server/PXE settings
    • 11.3.2.6. Further DHCP policies
• 11.4. Packet filter with Univention Firewall
• 11.5. Web proxy for caching and policy management / virus scan
  • 11.5.1. Installation
  • 11.5.2. Caching of web content
  • 11.5.3. Logging proxy accesses
  • 11.5.4. Restriction of access to permitted networks
  • 11.5.5. Configuration of the ports used
    • 11.5.5.1. Access port
    • 11.5.5.2. Permitted ports
  • 11.5.6. User authentication on the proxy
• 11.6. RADIUS
  • 11.6.1. Installation
  • 11.6.2. Configuration
    • 11.6.2.1. Allowed users
    • 11.6.2.2. Service specific password
    • 11.6.2.3. MAC filtering
    • 11.6.2.4. MAC Authentication Bypass with computer objects
    • 11.6.2.5. Access point administration
    • 11.6.2.6. Access point and client configuration
    • 11.6.2.7. VLAN IDs
  • 11.6.3. Debugging