Attachment 3 v10 1 Install Manual.pdf

FOR OFFICIAL USE ONLY

Tactical Local Area Network (TACLAN) Version 10.1

Installation Manual

Prepared for:

United States Special Operations Command (USSOCOM) TACLAN Program Management Office (PMO)

D04293-R01

April 2011

TACLAN Version 10.1 Installation Manual ii

Change Log

Revision Date Paragraphs

Changed Description of Change

00 April 2011 -- Initial Release

01 May 2011 Section 4.8, step 3

Deleted the words “step 4” in the last sentence and inserted the words “next section.”

Section 4.9 FILO Server – Configure SMVI (NetApp Storage Only), page 93

Renumbered the section and subsections as follows:

• Section 4.9 changed to 4.10

• Section 4.9.1 changed to 4.10.1

• Section 4.9.2 changed to 4.10.2

• Section 4.9.3 changed to 4.10.3

• Section 4.9.4 changed to 4.10.4

Section D2.0 and D.2.2.1

Moved the Informational Note under section D2.2.1 after the Note box in section D2.0.

Section D2.2.2, page 239, step 14

Deleted step 14 and replaced it with the following step:

14. In the Domain Admin Name field, type the [TACLAN Domain Administrator User Name]. In the Password field, type the [TACLAN Domain Administrator Password] and press <Enter>. The system will reboot again.

page 239, step 17

Deleted step 17 and replaced it with the following step:

17. In the Domain Admin Name field, type the [TACLAN Domain Administrator User Name]. In the Password field, type the [TACLAN Domain Administrator Password] and page 240, step 20

Deleted step 20 and replaced it with the following step:

20. In the Domain Admin Name field, type the [TACLAN Domain Administrator User Name]. In the Password field, type the [TACLAN Domain Administrator Password] and

Section D2.3.4, page 245, step 23

Changed the words “steps 17 through 19” to read “steps 20 through 22.”

Section E2.1.3, page 260, step 11

Added letter e. wss_search_service iii

Table of Contents

1.0 Introduction

1.1 Applicability

1.1.1 Server

1.1.2 Client

1.1.3 Peripherals

1.2 Installation Manual Purpose

1.3 Document Conventions

1.4 Media

1.5 Hardware Requirements

2.0 Tables and Figures

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

3.1 Build a TACLAN FILO Laptop Server

3.1.1 Connect FILO to the Network Switch

3.1.2 Set up a Panasonic CF-52 Laptop to Boot from the External USB Hard Drive

3.1.3 Load the TACLAN FILO Image onto the Panasonic CF-52 Laptop

3.1.4 Install Software and Set Domain Controller Time

3.1.5 Disable FILO Laptop Standby Power Function

3.1.6 Remove Root Hints

3.1.7 Change the Boot Order in BIOS

3.1.8 Load Hyper-V and WDS Services

3.1.9 Create Build Files and Templates

3.2 Configure the Cisco 2811 Router and Cisco 3560G Switch for TACLAN Use

3.2.1 Configure the Cisco 2811 Router

3.2.2 Configure the Cisco 3560G Switch

3.2.3 Connect Network Cables

3.3 Build a Laptop-Only Solution

3.3.1 Deploy an Exchange VM on Hyper-V

3.3.2 PXE Boot and Load the Server 2008 R2 on the Exchange Server Virtual Machine

3.3.3 Install Exchange 2010 on the Exchange Server Virtual Machine

3.3.4 Snapshot the Hyper-V Exchange Server Virtual Machine

3.3.5 Roll Back to a Snapshot of the Hyper-V Exchange Server Virtual Machine

3.4 Deploy Hyper-V Virtual Machine

3.4.1 Deploy vSphere VM on Hyper-V

3.4.2 PXE Boot and Load the Server 2008 R2 on the vSphere Virtual Machine

3.4.3 Configure vSphere

3.4.4 Install vSphere Software

3.5 Configure NetApp FAS2040 Storage Systems

3.5.1 Power On, Data Ontap and Disk Check for NetApp FAS2040

3.5.2 Reload Data Ontap (if required)

3.5.3 Load Factory Defaults NETAPP FAS2040

3.5.4 Send Initial Configuration Files to NetApp FAS2040

3.5.5 Complete NetApp FAS2040 Configuration

3.6 Configure and Cable MDS9124 Fiber Switch

3.6.1 Configure the MDS9124 Fiber Switch

3.7 Configure Dell Servers as ESX1 and ESX2

iv

3.7.1 Configure BIOS Settings on the Dell Server

3.7.2 Create a RAID 5 Container on the Dell Server

3.7.3 Install VMware Infrastructure (ESX1 and ESX2 Servers)

3.7.4 FILO – Install Outlook 2007 and NetApp SMBR

3.7.5 Uninitializing SANs

3.7.6 Uninitialize the AX150 Storage System

3.7.7 Uninitialize the AX4-5 Storage System (Reset Security Domain)

3.7.8 Initialize the AX150/AX4-5 SANs

3.7.9 Zeroize the AX150/4-5 Storage

3.7.10 Configure AX150/4-5 Storage System

4.0 Configure vSphere and Deploy Virtual Machines

4.1 Deploy Virtual Machines

4.2 Log in to VMware vSphere Client

4.3 Build Virtual Machines

4.4 Configure Domain Controller 2 (DC2)

4.4.1 Load Dameware NT Utilities (Optional)

4.4.2 Load KIWI Syslog Viewer (Optional)

4.4.3 Load KIWI Syslog Daemon (Optional)

4.4.4 Load Password Policy Enforcer (PPE)

4.4.5 Load Pointsec (Optional)

4.5 Exchange Server – Configure Exchange Server 2010

4.5.1 Exchange Server – Modify McAfee VirusScan Option to Allow Mail to Flow

4.5.2 Exchange Server – Load KIWI Syslog Viewer (Optional)

4.6 Configure Member Server

4.6.1 Install Joclog (Optional)

4.6.2 Install SOF Pro Router (Optional)

4.6.3 Install DB Proxy (Optional)

4.6.4 Load KIWI Syslog Viewer (Optional)

4.6.5 Install SolarWinds (Optional)

4.6.6 Install PEX (Optional)

4.7 Configure Web Server

4.7.1 Load IIS

4.7.2 Load KIWI Syslog Viewer (Optional)

4.7.3 Load WAVE Management Server (Optional)

4.8 Configure WSUS Server

4.8.1 Load KIWI Syslog Viewer (Optional)

4.8.2 Load Windows Server Update Services

4.8.3 Configure and Synchronize WSUS Server

4.9 Configure NAS Server

4.9.1 Set up NAS Drives

4.9.2 Install Symantec Backup Exec 2010 R2 for Windows

4.9.3 Install Remote Agents

4.9.4 Configure Backup Exec - Single AX-150

4.9.4.1 Device Creation (Single AX-150)

4.9.4.2 Full Backup Job Creation (Single AX-150)

4.9.4.3 Incremental Backup Job Creation (Single AX-150)

4.9.4.4 NAS Full Backup Job Creation (Single AX-150)

v

4.9.4.5 NAS Incremental Backup Job Creation (Single AX-150)

4.9.5 Configure Backup Exec - Dual AX-150

4.9.5.1 Device Creation (Dual AX-150)

4.9.5.2 Full Backup Job Creation (Dual AX-150)

4.9.5.3 Incremental Backup Job Creation (Dual AX-150)

4.9.5.4 NAS Full Backup Job Creation (Dual AX-150)

4.9.5.5 NAS G Drive Full Backup Job Creation (Dual AX-150)

4.9.5.6 NAS Incremental Backup Job Creation (Dual AX-150)

4.9.5.7 NAS G: Drive Incremental Backup Job Creation (Dual AX-150)

4.9.6 Configure Backup Exec - AX-4/5

4.9.6.1 Device Creation (AX-4/5)

4.9.6.2 Full Backup Job Creation (AX-4/5)

4.9.6.3 NAS Backup Job Creation (AX-4/5)

4.9.6.4 NAS Full Backup Job Creation (AX-4/5)

4.9.6.5 NAS G Drive Full Backup Job Creation (AX-4/5)

4.9.6.6 NAS H Drive Full Backup Job Creation (AX-4/5)

4.9.6.7 NAS I Drive Full Backup Job Creation (AX-4/5)

4.9.6.8 NAS J Drive Full Backup Job Creation (AX-4/5)

4.9.6.9 NAS Incremental Backup Job Creation (AX-4/5)

4.9.6.10 NAS G: Drive Incremental Backup Job Creation (AX-4/5)

4.9.6.11 NAS H: Drive Incremental Backup Job Creation (AX-4/5)

4.9.6.12 NAS I: Drive Incremental Backup Job Creation (AX-4/5)

4.9.6.13 NAS J: Drive Incremental Backup Job Creation (AX-4/5)

4.9.7 WSUS Server Clients – Point a Windows Server 2008 R2 Client to the WSUS Server (Optional)

4.9.8 WSUS XP Clients – Point a TACLAN Windows XP Client to the WSUS Server (Optional)

4.10 FILO Server – Configure SMVI (NetApp Storage Only)

4.10.1 Schedule SMVI Virtual Machine Backup Jobs

4.10.2 Starting SME the First Time

4.10.3 Configure a SME Backup Job

4.10.4 Create an SME Exchange Backup Schedule

5.0 Build the TACLAN Client

5.1 Build the TACLAN Client on a Panasonic Client

5.1.1 Set BIOS for Ghosting for Panasonic Clients

5.1.2 Load the TACLAN Client Core Image onto Panasonic Client

5.1.3 Restore BIOS from Ghosting for Panasonic Clients

5.2 Build the TACLAN Client on a Dell Precision T3400/T3500/390 Workstation

5.2.1 Set Bios for Ghosting for Dell Precision T3400/390/T3500 Workstation

5.2.1.1 Set BIOS for Ghosting for Precision T3400/390 Workstation

5.2.1.2 Set BIOS for Ghosting for Precision T3500 Workstation

5.2.2 Load the TACLAN Client Core Image onto Dell Precision T3400/ T3500/390 Workstation

5.2.3 Restore BIOS from Ghosting for Dell Precision T3400/T3500/390 Workstation

5.2.3.1 Restore BIOS from Ghosting for Dell Precision T3400/390 Workstation

5.2.3.2 Restore BIOS from Ghosting for Dell Precision T3500 Workstation vi

5.3 Build the TACLAN Client on a Maxvision MaxPac (Enhanced Imagery Workstation)

5.3.1 Set BIOS for Ghosting for MaxPac Workstation

5.3.1.1 Set BIOS for Ghosting for MaxPac Workstation 8020SRA2

5.3.1.2 Set BIOS for Ghosting for MaxPac Workstation 8040SRA2/9210SRA2

5.3.2 Load the TACLAN Client Core Image onto TACLAN-Supported MaxPac Workstation

5.3.3 Restore BIOS from Ghosting for MaxPac Workstation

5.4 Build the TACLAN Client on a General Dynamics MR-1

5.4.1 Set BIOS for Ghosting for the General Dynamics MR-1

5.4.2 Load the Image onto TACLAN-Supported General Dynamics MR-1

5.4.3 Restore BIOS from Ghosting for the General Dynamics MR-1

5.5 Build the TACLAN Client on the Dell Laptop Clients

5.5.1 Set Bios for Ghosting for Dell Laptop Clients

5.5.1.1 Set Bios for Ghosting for Dell M6400 and E6500

5.5.1.2 Set BIOS for Ghosting for Dell M90 and M6300

5.5.2 Load the Image onto TACLAN-Supported Dell M6400, M6300, M90, and E6500 . 123

5.5.3 Restore BIOS from Ghosting for Dell Laptop Clients

5.5.3.1 Restore BIOS from Ghosting for Dell M6400 and E6500

5.5.3.2 Restore BIOS from Ghosting for Dell Precision M90 and M6300

5.6 Set the Classification of the TACLAN-Supported Clients

5.7 Load Required Applications onto TACLAN-Supported Clients

5.8 Create a Custom Ghost Image of a TACLAN-Supported Laptop

5.9 Load a Custom Image of a TACLAN-Supported Panasonic Laptop

5.10 Set up Display for 1024 X 768

5.11 Change the Client Computer Name/Fully Qualified Domain Name (FQDN)

5.12 Join the Domain

5.13 Set up the Dual Monitor

5.14 Execute Client Post-Application Script

6.0 Install and Configure Peripherals

6.1 Scanners

6.1.1 Cannon LiDE 500F Scanner

6.1.2 Cannon LiDE 600F Scanner

6.1.3 Cannon LiDE 80 Scanner

6.1.4 HP ScanJet 3570c

6.1.5 HP ScanJet 3670

6.1.6 HP ScanJet G3110

6.2 Printers

6.2.1 HP LaserJet 1320N Printer

6.2.1.1 Configure the HP LaserJet 1320N Printer for DHCP

6.2.1.2 Disable SNMP on the 1320N Printer

6.2.1.3 Add the HP LaserJet 1320N Printer

6.2.2 HP LaserJet P2015dn Printer

6.2.2.1 Configure the HP LaserJet P2015dn Printer for DHCP

6.2.2.2 Disable SNMP on the P2015dn Printer

6.2.2.3 Add the HP LaserJet P2015dn Printer

6.2.3 HP LaserJet 3005n Printer

vii

6.2.3.1 Configure the HP LaserJet 3005n Printer for Static IP Address

6.2.3.2 Disable SNMP on the 3005n Printer

6.2.3.3 Add the HP LaserJet 3005n Printer

6.2.4 HP LaserJet 3800n Printer

6.2.4.1 Configure the HP LaserJet 3800n Printer for Static IP Address

6.2.4.2 Disable SNMP on the 3800n Printer

6.2.4.3 Add the HP LaserJet 3800n Printer

6.2.5 HP DeskJet 6940 Printer

6.2.5.1 Add the HP DeskJet 6940 Printer for DHCP

6.2.6 HP DeskJet 3930 Printer

6.2.6.1 Configure the HP DeskJet 3930 Printer

6.2.7 HP LaserJet 4200n Printer

6.2.7.1 Configure the HP LaserJet 4200n Printer for DHCP

6.2.7.2 Disable SNMP on the 4200n Printer

6.2.7.3 Add the HP LaserJet 4200n Printer

6.2.8 HP LaserJet 1200n Printer

6.2.8.1 Configure the HP LaserJet 1200n Printer for DHCP

6.2.8.2 Disable SNMP on the 1200n Printer

6.2.8.3 Install the Printer Wizard

6.2.8.4 Add the HP LaserJet 1200n Printer

6.2.9 HP LaserJet 4100n Printer

6.2.9.1 Configure the HP LaserJet 4100n Printer for DHCP

6.2.9.2 Disable SNMP on the 4100n Printer

6.2.9.3 Add the HP LaserJet 4100n Printer

6.2.10 HP DeskJet 3650 Printer

6.2.10.1 Configure the HP LaserJet 3650n Printer

6.2.11 HP DeskJet 5940 Printer

6.2.11.1 Add the HP DeskJet 5940 Printer for DHCP

6.2.12 HP LaserJet 1300n Printer

6.2.12.1 Configure the HP LaserJet 1300n Printer for DHCP

6.2.12.2 Disable SNMP on the 1300n Printer

6.2.12.3 Add the HP LaserJet 1300n Printer for DHCP

6.2.13 HP Color LaserJet CP2025

6.2.13.1 USB Connection

6.2.13.2 LAN Connection

6.2.14 HP LaserJet P2055dn

6.2.14.1 USB Connection

6.2.14.2 LAN Connection

6.2.15 HP LaserJet P3015dn

6.2.15.1 USB Connection

6.2.15.2 LAN Connection

6.2.16 HP Color LaserJet CP3505n

6.2.16.1 USB Connection

6.2.16.2 LAN Connection

6.3 Add a Network Printer

7.0 Post-Installation Updates

7.1 Downloading and Installing IAVAs

viii

7.2 Instructions for Downloading and Installing Required HBSS Modules (NIPR and SIPR Only)

7.3 Non-HBSS Antivirus Instructions

Appendix A: Configure PointSec and Password Policy Enforcer (PPE)

A1.0 Configure PointSec on the Domain Controller 2 (Optional Installation) A1.1 Create the PointSecProtectClient GPO A1.2 Create Workstations OU A1.3 Link the GPO A1.4 Move Computer Objects A1.5 Push PointSec Protector Client to Computers

A2.0 Configure Password Policy Enforcer A2.1 Install the PPE License A2.2 Create the PPE Client GPO A2.3 Create Workstations OU A2.4 Link the GPO A2.5 Move Computer Objects A2.6 Push PPE Client to Computers

Appendix B: Installing and Configuring WAVE

B1.0 Applicability

B2.0 Purpose

B3.0 Minimum Requirements B3.1 Hardware Requirements B3.2 Software Requirements

B4.0 WAVE Basics

B4.1 WAVE Infrastructure Components B4.1.1 WAVE Management Server B4.1.2 WAVE Media Server B4.1.3 WAVE Desktop Communicator B4.1.4 WAVE Dispatch Communicator

B4.2 WAVE Logical Components B4.2.1 WAVE Channels B4.2.2 Standard Channels B4.2.3 Point-to-point Trunk Channels B4.2.4 Multicast Trunk Channels

B4.3 WAVE Sessions B4.3.1 Meet-Me Session B4.3.2 Group Call Session B4.3.3 Channel Access Session B4.3.4 Advanced Session

B4.4 WAVE Profiles B4.4.1 WAVE Users B4.4.2 WAVE Zones B4.4.3 WAVE Supernodes

B4.5 WAVE Installation ix

B4.5.1 Installing the Management Server B4.5.2 Acquiring a License B4.5.3 Activating the Installation B4.5.4 Changing the Administrative Password B4.5.5 Installing the Media Server B4.5.6 Installing the Desktop Communicator B4.5.7 Networking Considerations for WAVE B4.5.8 Basic Router Configuration B4.5.9 Adapting to Unicast-only Networks

B4.6 Configuring WAVE B4.6.1 Creating Users B4.6.2 Creating Profiles B4.6.3 Creating Channels

B4.6.3.1 Creating Standard Channels B4.6.3.2 Creating Multicast Trunk Channels

B4.6.3.3 Creating Point-to-Point Trunk Channels

B4.6.4 Creating Sessions B4.6.4.1 Advanced Sessions

B4.7 WAVE Deployment Architecture B4.7.1 Deployment Methodologies

B4.7.1.1 Centralized Administration B4.7.1.2 Distributed Administration

B4.8 RoIP and WAVE B4.8.1 Basics of RoIP B4.8.2 Attaching Radios to the Cisco Router B4.8.3 Configuring the Cisco Router for RoIP

B4.8.3.1 Minimum Requirements B4.8.4 Configuring Voice Ports

B4.8.4.1 Configuring Dial Peers B4.8.5 Configuring WAVE to Input Radio Audio Traffic

B4.8.5.1 Creating a Multicast Trunk Channel

B4.8.5.2 Bridging the Radio Multicast Trunk Channel with Standard Channels

B4.8.6 Voice Recording B4.8.6.1 Recording Voice Traffic on a WAVE Desktop Client

B4.8.6.2 Recording Voice Traffic on a WAVE Management Server

B4.8.6.3 Archiving Recordings B4.8.6.4 Configuring Recording in a Session

B4.9 Recording on the WAVE Desktop Communicator

B4.10 Searching Recordings B4.10.1 User Search Privileges B4.10.2 User Search B4.10.3 Administrative Search

B4.11 Storage of Audio Recordings

Appendix C: Buffalo TeraStation NAS Devices

C1.0 Configure the Buffalo TeraStation NAS Devices

C2.0 Archive SAN Shares to Buffalo TeraStation (ManageData.exe) x

Appendix D: Install Microsoft Structured Query Language Server

D1.0 Introduction

D1.1 Overview

D1.2 Scope

D1.3 Hardware Requirements D1.4 Software Requirements

D2.0 Install Microsoft SQL Server 2008 R2 on TACLAN 10.X

D2.1 Create SQL Service Account D2.2 Deploy New SQL Server Virtual Machine

D2.2.1 Build Virtual Machines D2.2.2 Change TACLAN Administrator Password and Join Domain

D2.2.3 Change IP Address D2.2.4 Join Domain as a New Server D2.2.5 Configure VM Tools Update

D2.3 Configure SQL Server Virtual Machine Prerequisites

D2.3.1 Create a Local SolarWinds Account (SolarWinds)

D2.3.2 Map to TACFILO LAPTOP and Add E:\ Partition

D2.3.3 Install .NET 3.5.1 Feature D2.3.4 Install and Configure the Simple Network Management Protocol (SNMP) Feature (SolarWinds)

D2.4 Install Microsoft SQL Server 2008 R2 D2.4.1 Add License Key for SQL 2008R2 D2.4.2 Enable TCP/IP Protocol D2.4.3 Configure the SQL User Account for Database Access (SolarWinds)

D2.4.4 Configure SQL Server Manager Snap-in (SolarWinds)

D2.4.5 Configure SQL Server Instance (SolarWinds)

D2.4.6 Apply Security Settings

Appendix E: Microsoft Office SharePoint Server (MOSS) 2007 Installation

E1.0 Introduction

E1.1 Hardware Requirements E1.2 Software Requirements E1.3 MOSS Service Accounts Requirements E1.4 Virtual Infrastructure Login

E2.0 Install MOSS on TACLAN 10.1 E2.1 Configure the SharePoint Server Virtual Machine Prerequisites

E2.1.1 Map to TACFILO Laptop and Add E:\ Partition

E2.1.2 Install .NET 3.5.1 Feature E2.1.3 Create Service and Application Pool Accounts

E2.1.4 Create DNS Entries for Web Application IP Addresses

E2.1.5 Configure Active Directory Sites and Services E2.1.6 Assign SQL Server Security Roles E2.1.7 Check Event Logs E2.1.8 Add Local Admin Users

E2.2 Install and Configure MOSS 2007 on TACLAN 10.1

E2.2.1 Install MOSS 2007 and SP2 E2.2.2 Change Permissions to DCOM xi

E2.2.3 Change the IIS Logs Location and Enable Security Log Access for Farm Account .. 264

E2.2.4 Unlock Trusted Sites E2.3 Run the SharePoint Products and Technologies Configuration Wizard

E2.3.1 Configure Central Administration E2.3.2 Configure McAfee Exclusions E2.3.3 Modify TACMOSS Server Path Statement

E2.3.4 Modify \ect\hosts File and E Drive Permissions

E2.3.5 Configure Component Services E2.4 Create and Configure Farm Services and Shared Services Provider

E2.4.1 Configure Outgoing E-Mail E2.4.2 Start the Office SharePoint Server Search Service

E2.4.3 Start the Windows SharePoint Services (WSS) Search Service

E2.4.4 Create the Shared Services Provider (SSP) Name and Web Application

E2.4.5 Create My Site Location for the Shared Services Provider (SSP) and Web Application

E2.4.6 Configure My Sites Self –Service Creation E2.4.7 Test Access to SSP Administration E2.4.8 Configure My Sites Naming Format E2.4.9 Test Access to My Sites E2.4.10 Configure Farm Level Search E2.4.11 Configure SSP Level Search E2.4.12 Configure Connection for Profile Services E2.4.13 Import the Profiles

E2.5 Create SharePoint Sites E2.5.1 Create a New Web Site E2.5.2 Create New Site Collection E2.5.3 Apply MOSS Patches E2.5.4 Lock Trusted Sites E2.5.5 Rejoin TACMBR to the Domain

Appendix F: Install SolarWinds on TACLAN Suites

F1.0 Introduction

F1.1 Hardware Requirements F1.2 Software Requirements

F2.0 Install SolarWinds Orion on TACLAN 10.X F2.1 Create a Local SolarWinds Account F2.2 Configure Member Server Prerequisites

F2.2.1 Increase RAM on Member Server F2.2.2 Set up Internet Information Services (IIS) F2.2.3 Install and Configure the SNMP Feature F2.2.4 Add New E:\ Partition on Member Server

F2.3 Install SolarWinds Orion F2.3.1 Install SolarWinds Orion on TACLAN 10.0 Segment

F2.3.2 Install SolarWinds Orion on TACLAN 10.1 Segment

F2.4 Request SolarWinds Orion License Keys F2.4.1 SolarWinds Orion NPM F2.4.2 SolarWinds Orion NCM F2.4.3 SolarWinds Orion NTA xii

F2.4.4 SolarWinds Orion IPAM F2.5 License and Configure SolarWinds Orion Suite

F2.5.1 SolarWinds Orion NPM F2.5.2 Verify No SNMPv2 Community Strings Are Used by SNMPv3 Nodes

F2.5.3 SolarWinds Orion NCM F2.5.4 SolarWinds Orion NTA F2.5.5 SolarWinds Orion IPAM

F2.6 Configure Security F2.6.1 Limit Web Site Connections F2.6.2 Set Application Pool Recycling Settings

List of Figures

Figure 2-1 TACLAN 10.1 Build Process

Figure B-1 Licensing Section Figure B-2 Install Software Page

Figure B-3 Users Page

Figure B-4 Add User Page

Figure B-5 Profiles Page

Figure B-6 Add Profile Page

Figure B-7 Channels Page

Figure B-8 Sessions Page

Figure B-9 Central Administration WAVE Architecture Figure B-10 Distributed Administration WAVE Architecture Figure B-11 E&M Ports

Figure B-12 Radio Connector Cable

Figure B-13 Recording Section of Session Information Page Figure B-14 Audio Receive Section

Figure B-15 Instant Replay Icon

Figure B-16 Audio Replay Screen

Figure B-17 Recording Rights

Figure B-18 Recordings Page

List of Tables

Table B-1 Recording Settings

Table B-2 Audio Replay Icons

Table B-3 Recording Search Functions

Table B-4 Audio File Size

1.0 Introduction

1.0 Introduction

1.1 Applicability

The information contained in this document is intended for TACLAN system administrators who have a solid working knowledge of TACLAN hardware, operating systems (Windows server 2008 R2, Windows XP Professional, and VMware ESX3.5), the client-server operating environment, the VMware Infrastructure 3 (VI3), and vSphere environments.

IMPORTANT: It is important to read through the entire document prior to beginning the installation.

1.1.1 Server

The TACLAN version 10.1 server build applies to Dell PowerEdge servers, as reflected in the following table:

Version 10.1 Release Applicability to TACLAN Server s

Server Processors Memory

Dell 1950 Dual socket, 2 cores each 8 gigabytes

Dell 1950 Dual socket, 4 cores each 8 gigabytes

Dell R610 Dual socket, 4 cores each 24 gigabytes

Dell R610 Dual socket, 6 cores each 24 gigabytes

1.1.2 Client

Client installation instructions are provided in Section 5.0, Build the TACLAN Client.

The version 10.1 client installation is a new build. The TACLAN version 10.1 client build applies to those specific Panasonic (CF-18, CF-19, and CF-52s), MaxVision (MaxPac 8020SRA2, MaxPac8040SRA2, and MaxPac9210SRA2 portables), Dell (E6500, M6300, M6400, M90 laptops, and 390, T3400, and T3500 desktops), and the General Dynamics MR1

IX750 client models identified as supported in the TACLAN Version Document (VDD). In addition to connecting to a version 10.

clients may also be used in a standalone mode.

NOTE: The TACLAN Version portable universal serial bus ( TACLAN Secret Internet Protocol Router Network http://sofonline.socom.smil.mil/sites/SORDAC/C4P

1.1.3 Peripherals

Installation instructions for peripherals supported by TACLAN version Section 6.0, Install and Configure Peripherals

1.2 Installation Manual Purpose

The primary purpose of this Installation Manual is to provide detailed instru Full Suite Non-Secure Internet Protocol Router Network (NIPRNET), Router Network (SIPRNET), and Joint Worldwide Intelligence Communications System (JWICS) segments using Dell R610s new builds.

This manual also provides instructions on the following:

How to install the TACLAN version part of the TACLAN version 10.1 o Panasonic CF-o Dell Precision 390 quad processor desktop clients

How to install peripheral devices, being fielded as part of the version legacy peripheral devices that remain supported in version (e.g., printers, routers, switches, scanners, and storage devices) VDD identifies these devices.

1.3 Document Conventions

The following conventions are used throughout this document:

Bold Italics Text

Bolded Text

Italics Text

<Ctrl-L>

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

FOR OFFICIAL USE ONLY

client models identified as supported in the TACLAN Version 10.1 Version Description In addition to connecting to a version 10.1 server domain, version 10.

clients may also be used in a standalone mode.

The TACLAN Version 10.1 VDD is available on the version universal serial bus (USB) bootable hard drive as well as on the

Secret Internet Protocol Router Network (SIPRNET) web site at .socom.smil.mil/sites/SORDAC/C4P/taclan/Pages/taclan.aspx

Installation instructions for peripherals supported by TACLAN version 10.1 are provided in Install and Configure Peripherals.

Installation Manual Purpose The primary purpose of this Installation Manual is to provide detailed instructions for building

Secure Internet Protocol Router Network (NIPRNET), Secret Internet Protocol , and Joint Worldwide Intelligence Communications System

(JWICS) segments using Dell R610s or 1950s. These server and client installations are for

This manual also provides instructions on the following:

How to install the TACLAN version 10.1 client build onto other clients that are not fielded as

10.1 Full Suite, specifically

-18, -19, and -51 (non-core duo) clients

Dell Precision 390 quad processor desktop clients

How to install peripheral devices, being fielded as part of the version 10.1 Full Suite as well as legacy peripheral devices that remain supported in version 10.1, that have a software component (e.g., printers, routers, switches, scanners, and storage devices). The TACLAN Version

Document Conventions The following conventions are used throughout this document:

Options that the user is to select are in italics .

Text that the user must type is printed in lettering that resembles the output from a typewriter

Text displayed on the computer screen is in italics.

This key combination indicates a command that is entered. This command, for example, indicates that the user should hold down the

TACLAN Version 10.1 Installation Manual

Version Description server domain, version 10.1 version 10.1 bootable hard drive as well as on the web site at /taclan/Pages/taclan.aspx.

are provided in ctions for building Secret Internet Protocol

, and Joint Worldwide Intelligence Communications System ient installations are for client build onto other clients that are not fielded as

Full Suite as well as , that have a software component he TACLAN Version 10.1

Options that the user is to select are in bold

Text that the user must type is printed in bold lettering that resembles the output from a typewriter.

Text displayed on the computer screen is in key combination indicates a command that is entered. This command, for example, indicates that the user should hold down the

[IP Address]

<Enter>

IMPORTANT: The steps that should be strictly adhered to.

STOP: The Stop icon calls particular attention to information or procedures that, if not strictly followed, could result in loss of da

NOTE: The Note icon calls particular attention to technical tips or helpful information that goes a step beyond the basic build process.

1.4 Media

One unclassified USB bootable hard drive containing the TACLAN version release is provided for the new installation and configuration of the TACLAN Suite. The release on the portable USB drive supports installing the version onto Dell R610 and 1950 servers makes/models as identified in the TACLAN Version

1.5 Hardware Requirements

The following table identifies server, client computing, and storage hardware fielded as part of TACLAN version 10.1 Full Suite

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

FOR OFFICIAL USE ONLY

Control key and press the L key simultaneously.

Text contained within brackets, such as [192.168.1.10] or [Domain Administrator Password], indicates that a substitution can be made. Additionally, text displayed on the computer screen that was originally typed is also displayed in brackets. This information is unique and is not necessarily the same for every system.

This symbol is used between steps that follow each other. Select Start ���� Shut Down Restart means that you should select the Start button, select Shut Down, and then select Restart.

Press the Enter key or other key within the arrows.

The Information icon calls particular attention to information or steps that should be strictly adhered to.

icon calls particular attention to information or procedures that, if not strictly followed, could result in loss of data or equipment malfunction.

icon calls particular attention to technical tips or helpful information that goes a step beyond the basic build process.

One unclassified USB bootable hard drive containing the TACLAN version 10.1 release is provided for the new installation and configuration of the TACLAN version Suite. The release on the portable USB drive supports installing the version 10.1 servers, as well as installing the version 10.1 client build onto makes/models as identified in the TACLAN Version 10.1 VDD.

Hardware Requirements The following table identifies server, client computing, and storage hardware fielded as part of

Full Suite.

TACLAN Version 10.1 Installation Manual

Control key and press the L key

Text contained within brackets, such as dministrator

, indicates that a substitution can be made. Additionally, text displayed on the computer screen that was originally typed is also displayed in brackets. This information is unique and is not necessarily the same for

This symbol is used between steps that follow Shut Down ���� means that you should select the Start button, select Shut Down, and then select key or other key within the icon calls particular attention to information or icon calls particular attention to information or procedures that, ta or equipment malfunction.

icon calls particular attention to technical tips or helpful

10.1 software version 10.1 Full

10.1 server build client build onto

The following table identifies server, client computing, and storage hardware fielded as part of

TACLAN Version 10.1 Full Suite Server, Client, and Storage Hardware

Hardware Type Manufacturer Model Number

N

IP

R N

E T

S

IP

R N

E T

JW

IC

S

Remarks

Server Dell 224-4848 224-8479

X X X

PowerEdge R610 (quad processor, quad port onboard NIC, quad port add-on NIC, redundant power supply)

Server Dell 222-7263 223-4545

X X X

PowerEdge 1950 (quad processor, dual port onboard NIC, quad port add-on NIC, redundant power supply)

Client or Server Panasonic

CF-18, CF-19,

Core2 Duo

X X X Specific model numbers per VDD

Storage NetApp FAS2040:Single FAS2040:Dual

X X X FAS2040 (iSCSI, redundant processor, redundant power supply)

Appendix B of the TACLAN Version 10.1 VDD identifies all hardware that remains supported by the TACLAN program. Hardware previously fielded by the TACLAN program that does not appear in the appendix will NOT be supported by the program. For those hardware components found in the TACLAN Version 10.1 Full Suite, the last three columns of Table B-1 indicate the network segment on which the hardware is/may be used.

A complete list of all TACLAN version 10.1 hardware is contained in the version 10.1 As-Built Configuration Database available from the TACLAN configuration manager.

2.0 Tables and Figures

2.0 Tables and Figures

The following figure shows the flow of the TACLAN 10.1 build process. It also identifies the hardware on which a configuration process occurs.

Figure 2-1 TACLAN 10.1 Build Process

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segme nt

STOP: Back up any data you would like to keep before continuing. This is a destructive build. All storage systems, to include the NetApp FAS2040, AX- 150, and AX/4-5, will be completely rebuilt. All your data will be lost as a result of this rebuild.

The following table provides a list of information necessary to complete the software build of a TACLAN NIPRNET, SIPRNET, or JWICS system. It is strongly recommended you make a copy of this table template and place your information on the copy. Once information is recorded, it may be classified and must be handled appropriately. You must determine, prior to starting, which type of system (NIPRNET, SIPRNET, or JWICS) you are building. You also need to contact your network administrator to obtain information on IP addresses, Domain Name Service (DNS), and Default Gateways. Before beginning the installation, ensure the following information is available. You will require this information for each segment you build. Each segment may vary in some areas (i.e., IP addresses, local administrator password).

NIPRNET/SIPRNET/JWICS Cut Sheet (General Informatio n)

NOTE: This cut sheet may be classified when filled in and must be handled appropriately.

Item # Item Notes 1 Classification:

2 Domain Name:

3 Domain Admin User Name:

4 Domain Admin Password:

5 Router Username:

6 Router Password:

7 WAN IP:

8 WAN Subnet Mask:

9 Ethernet Switch Username:

10 Ethernet Switch Password:

11 ESX root Password:

12 NetApp root Password: NetApp Only 13 Fiber Switch Password: AX-4/5 Only 14 Fiber SAN Username: AX-150 and AX-4/5 Only 15 Fiber SAN Password: AX-150 and AX-4/5 Only 16 Server Subnet Default Gateway:

17 Subnet Mask:

18 Server VLAN IP:

19 Server VLAN ID:

20 DHCP Scope Begin:

21 DHCP Scope End:

22 DNS Forwarder:

23 FILO Server Name:

24 FILO Server IP:

25 ESX1 Name:

26 ESX1 IP:

27 ESX2 Name:

NOTE: This cut sheet may be classified when filled in and must be handled appropriately.

Item # Item Notes

28 ESX2 IP:

29 vSphere Server Name:

30 vSphere Server IP:

31 2nd DC Name:

32 2nd DC IP:

33 Exchange Server Name:

34 Exchange Server IP:

35 Member Server Name:

36 Member Server IP:

37 Web Server Name:

38 Web Server IP:

39 WSUS Server Name:

40 WSUS Server IP:

41 Upstream WSUS Server IP:

42 NAS Server Name: AX-150 and AX-4/5 Only 43 NAS Server IP: AX-150 and AX-4/5 Only 44 9124 Fiber Switch IP: AX-4/5 Only 45 Primary Fiber SAN SPA IP: AX-150 and AX-4/5 Only 46 Primary Fiber SAN SPB IP: AX-4/5 Only 47 Secondary Fiber SAN SPA IP: AX-150 and AX-4/5 Only 48 Secondary Fiber SAN SPB IP: AX-4/5 Only 49 Primary iSCSI SAN A-e0a IP: NetApp Only 50 Primary iSCSI SAN B-e0a IP: NetApp Only 51 Secondary iSCSI SAN A-e0a

IP:

NetApp Only

52 Secondary iSCSI SAN B-e0a

IP:

NetApp Only

53 Vault iSCSI SAN B-e0a IP: NetApp Only 54 Client Subnet Default Gateway:

55 Subnet Mask:

56 Client VLAN IP:

57 Client VLAN ID:

58 DHCP Scope Begin:

59 DHCP Scope End:

60 Storage Subnet: NetApp Only 61 Subnet Mask: NetApp Only 62 VLAN ID: NetApp Only 63 ESX1 2nd Service Console: NetApp Only 64 ESX1 Storage VMKernel: NetApp Only 65 ESX2 2nd Service Console: NetApp Only 66 ESX2 Storage VMKernel: NetApp Only 67 Exchange Server iSCSI IP: NetApp Only 68 Primary iSCSI SAN A-e0c IP: NetApp Only 69 Primary iSCSI SAN B-e0c IP: NetApp Only 70 Secondary iSCSI SAN A-e0c IP: NetApp Only 71 Secondary iSCSI SAN B-e0c IP: NetApp Only 72 Vault iSCSI SAN B-e0c IP: NetApp Only 73 VMotion Subnet:

74 Subnet Mask:

NOTE: This cut sheet may be classified when filled in and must be handled appropriately.

Item # Item Notes 75 VMotion VLAN ID:

76 ESX1 VMotion IP:

77 ESX2 VMotion IP:

3.1 Build a TACLAN FILO Laptop Server

NOTE: Sections 6.1 through 6.3 Manual should be comp

The following section describes in detail how to build a TACLAN First server on a Panasonic CF-52 model FKN or newer laptop computer with a minimum of system memory. The time required to complete the tasks in this section is approximately 4 hours. Before proceeding, ensure that the following

• TACLAN external hard drive

• TACLAN Panasonic CF-

IMPORTANT: It is imperative that these instructions are followed exactly.

Skipping steps may cause unexpected results and render the system unusable.

The administrator is strongly encouraged to read the before initiating the build procedures.

3.1.1 Connect FILO to the

� 1. Ensure that your CF-52 laptop computer is shut down. Connect the laptop to an A/C power source.

� 2. Connect an Ethernet cable from the FILO laptop to the 3560G switch, port number 1.

� 3. Connect the TACLAN external hard drive into an available USB port on the CF laptop.

NOTE: Do not use will not properly load the one in the rear furthest from the VGA port.

� 4. Locate the Cisco 3560G switch in the rear of the

on. Reset the 3560G switch configuration by STAT, DUPLEX, SPEED and PoE lights stop flashing (typically 12 seconds) and wait 5 min until the switch reboots. The mode button is located on the

� 5. Verify that the 3560G switch completed the boot proc and STAT LED lights are steady green.

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

FOR OFFICIAL USE ONLY

Build a TACLAN FILO Laptop Server

6.1 through 6.3 of the v10.1 Operations and Maintenance

Manual should be completed prior to continuing with section 3.1.

The following section describes in detail how to build a TACLAN First-In, Last- 52 model FKN or newer laptop computer with a minimum of system memory. The time required to complete the tasks in this section is approximately 4 hours. Before proceeding, ensure that the following are available:

TACLAN external hard drive

-52 laptop computer

It is imperative that these instructions are followed exactly.

Skipping steps may cause unexpected results and render the system unusable.

s strongly encouraged to read the entire set of directions before initiating the build procedures.

FILO to the Network Switch

52 laptop computer is shut down. Connect the laptop to an A/C t cable from the FILO laptop to the 3560G switch, port number 1.

Connect the TACLAN external hard drive into an available USB port on the CF

Do not use the USB port in the rear next to the VGA port. This port will not properly load the core image. Use one of the two side USB ports or the one in the rear furthest from the VGA port.

Locate the Cisco 3560G switch in the rear of the network case and ensure it is powered Reset the 3560G switch configuration by pressing and holding the Mode button until the

STAT, DUPLEX, SPEED and PoE lights stop flashing (typically 12 seconds) and wait 5 min until the switch reboots. The mode button is located on the lower left corner of switch.

Verify that the 3560G switch completed the boot process by confirming that the SYST and STAT LED lights are steady green. The LED lights are located on the back of the switch.

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

D04293-R01

Operations and Maintenance

-Out (TACFILO) 52 model FKN or newer laptop computer with a minimum of 8 GB of system memory. The time required to complete the tasks in this section is approximately 4

It is imperative that these instructions are followed exactly.

Skipping steps may cause unexpected results and render the system unusable.

entire set of directions

52 laptop computer is shut down. Connect the laptop to an A/C t cable from the FILO laptop to the 3560G switch, port number 1.

Connect the TACLAN external hard drive into an available USB port on the CF-52

USB port in the rear next to the VGA port. This port core image. Use one of the two side USB ports or the etwork case and ensure it is powered Mode button until the

STAT, DUPLEX, SPEED and PoE lights stop flashing (typically 12 seconds) and wait 5 minutes switch.

ess by confirming that the SYST The LED lights are located on the back of the switch.

3.1.2 Set up a Panasonic CF-52 Laptop to Boot from the External USB Hard Drive

� 1. Power on the FILO laptop.

� 2. Press <F2> to enter the BIOS Setup Utility screen when the blue screen with the word “PANASONIC” centered on it is displayed. (This screen is only visible for a few seconds during the boot process. It is while this screen is displayed that you must press <F2>. If you do not press <F2> in time, then shut down the system and start over.)

� 3. From the BIOS Setup Utility screen, use the arrow keys until Boot is highlighted.

� 4. Ensure that USB Hard Disk is listed as the first device in the Boot Option priority order.

If it is not, then press the <down-arrow> key if necessary to highlight boot option #1 . Then press <F6> until USB HARD DISK appears.

STOP: The Panasonic laptop being used as the FILO must be one of the following models: CF-52FKN102M, CF-52FKP10AM, CF-52NKE102M, or CF-52NKG102M. The laptop must also have at least 4GB of physical RAM.

Use the Information Tab in the BIOS to check the model number and memory size to verify it meets these minimal requirements.

� 5. Press the arrow key to highlight Advanced .

� 6. Some laptop models have the next few items located under CPU Configuration . If you see an option named CPU Configuration, highlight it and press <Enter>. If CPU Configuration is not listed, continue with the next step.

� 7. Highlight Execute-Disable Bit Capability and press the <Spacebar> until it is enabled.

If this option is not available, continue with the next step.

� 8. Highlight Intel (R) Virtualization Technology and press the <Spacebar> until it is enabled.

� 9. On the CF-52NKG models, press the <Esc> key to access the Wireless Switch option.

� 10. Highlight Wireless Switch. Then press the <Spacebar> until it is disabled.

� 11. Highlight Modem. Then press the <Spacebar> until it is disabled.

� 12. Highlight SD Slot/SD Card Slot. Then press the <Spacebar> until it is disabled.

� 13. Press the arrow key to highlight Main .

STOP: Correct FILO Server time is important because all other system times will be synchronized with the FILO Server.

� 14. Set the system time and date using the <Tab> and <Number> keys as required.

� 15. Press <F10> to save your settings.

� 16. At the Save Values and Reboot window, ensure that Yes is highlighted.

� 17. Press <Enter>. The system will restart.

3.1.3 Load the TACLAN FILO Image onto the Panasonic CF

NOTE: If at any time during the build of TACLAN box is displayed (i.e.

on screen instructions within the box.

� 1. If not already done, plug in the

� 2. Wait until the TACLAN

���� FILO.

� 3. At the Do you wish to perform a clean install <Enter>. Disk 0 is the FILO hard drive.

this time, the image is applied and files are co take approximately 40 minutes to complete

� 4. When the copy process is complete, you Press the <Spacebar> to close the command prompt.

� 5. Unplug the external USB d

NOTE: The system will be busy for message screens will appear that are informational only and do not need input.

The system will reboot automatically.

� 6. At The user’s password must be changed… Change process.

� 7. In the New password field, type the

� 8. In the Confirm password

� 9. Click OK to complete the Pa

NOTE: During the following steps, use the cut sheet your system administrator provided to complete the Configurator form

� 10. At the TACLAN Configurator

� 11. Under the Domain section, s classification.

� 12. Complete the rest of the form using the appropriate values for each field. As each field is selected, a cross-reference “tip” will be displayed in the lower that will tell you what item number to reference on your cut sheet.

� 13. Set the time zone in accordance with local requirements.

� 14. When all required fields have been filled in and verified, c

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

FOR OFFICIAL USE ONLY

. The system will restart.

Load the TACLAN FILO Image onto the Panasonic CF -52 Laptop If at any time during the build of TACLAN 10.1, a Notification Pop displayed (i.e., network issues or preflight check failed), always follow the screen instructions within the box.

, plug in the external USB drive and power on the laptop.

TACLAN menu appears, and then click Begin ���� System Builds

Do you wish to perform a clean install…Disk 0 prompt, type [Yes] Disk 0 is the FILO hard drive. Disk 1 is the TACLAN external hard drive.

this time, the image is applied and files are copied to the FILO laptop server. This process will to complete.

When the copy process is complete, you will be prompted to Press any key to continue to close the command prompt.

Unplug the external USB drive and click Begin ���� Exit to reboot.

The system will be busy for 5 minutes. During this process, various message screens will appear that are informational only and do not need input.

The system will reboot automatically.

rd must be changed… prompt click OK to begin the Password field, type the Domain Admin Password (see cut sheet assword field, re-enter the password and press <Enter> to complete the Password Change process.

During the following steps, use the cut sheet your system administrator provided to complete the Configurator form.

TACLAN Configurator screen, activate the Create New Domain section, select the Classification drop-down arrow and select your

Complete the rest of the form using the appropriate values for each field. As each field reference “tip” will be displayed in the lower-left portion of the that will tell you what item number to reference on your cut sheet.

Set the time zone in accordance with local requirements.

When all required fields have been filled in and verified, click Build .

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

D04293-R01

52 Laptop Notification Pop-Up network issues or preflight check failed), always follow the

USB drive and power on the laptop.

System Builds ���� Server

[Yes] and press Disk 1 is the TACLAN external hard drive. During pied to the FILO laptop server. This process will

Press any key to continue.

During this process, various message screens will appear that are informational only and do not need input.

to begin the Password cut sheet item #4).

<Enter>.

During the following steps, use the cut sheet your system administrator radio button.

down arrow and select your

Complete the rest of the form using the appropriate values for each field. As each field left portion of the Configurator

� 15. The FILO Server begins This will take approximately 2 minutes

3.1.4 Install Software and

NOTE: If at any point during the installation an administrator account is locked out, complete the following steps:

a. Using the following key sequence, log into the FILO with another administrator account (i.e., tacexch)

<Ctrl-Alt- Del>

<Esc>

<Ctrl-Alt- Del>

b. Within Active Directory Users and Computers account that is locked out under the

c. Within its Properties

d. Uncheck the

e. Select OK.

f. Close out of

� 1. Press <Ctrl+Alt+Del>

� 2. In the Password field, type the #4) and press <Enter>. After logon, the system continues the configuration process and again reboots. This process will take approximately

� 3. After the system has restarted, p

� 4. Type the TACLAN Domain Admin Password ( <Enter>.

NOTE: After logon, setup configures DHCP; NTP; McAfee Virus Scan Enterprise, McAfee Anti process will take approximately

� 5. After the system has restarted, p

� 6. When the US DEPARTMENT OF DEFENSE WARNING STATEMENT click OK to agree.

� 7. Type the Domain Admin User Name ( Password (see cut sheet item #4)

� 8. In the lower left corner of the show this window… checkbox and

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

FOR OFFICIAL USE ONLY

begins the configuration process and will reboot upon completion approximately 2 minutes to complete.

Install Software and Set Domain Controller Time

If at any point during the installation an administrator account is locked out, complete the following steps:

Using the following key sequence, log into the FILO with another administrator account (i.e., tacexch):

Del>

Del>

Active Directory Users and Computers, select the administrative account that is locked out under the Users tree.

Properties dialogue, select the Account tab.

Uncheck the Unlock account checkbox.

Close out of Active Directory Users and Computers.

to log in.

field, type the TACLAN Domain Admin Password (se After logon, the system continues the configuration process and again approximately 8 minutes to complete.

After the system has restarted, press <Ctrl+Alt+Del> to log in.

LAN Domain Admin Password (see cut sheet item #4) and

After logon, setup configures DHCP; NTP; McAfee Virus Scan McAfee Anti-Spyware, HyperTerminal, etc., and then reboots.

process will take approximately 20 minutes to complete.

After the system has restarted, press <Ctrl+Alt+Del> to log on.

DEPARTMENT OF DEFENSE WARNING STATEMENT

Domain Admin User Name (see cut sheet item #3) and the Domain Admin #4) and press <Enter>.

In the lower left corner of the Initial Configuration Tasks window, activate the checkbox and click Close .

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

D04293-R01 upon completion.

If at any point during the installation an administrator account is locked

Using the following key sequence, log into the FILO with another

, select the administrative ee cut sheet item After logon, the system continues the configuration process and again and press

After logon, setup configures DHCP; NTP; McAfee Virus Scan and then reboots. This

DEPARTMENT OF DEFENSE WARNING STATEMENT dialog appears, Domain Admin window, activate the Do not

� 9. Close Server Manager window.

� 10. At the Banner Tip of the Day Close .

� 11. In the lower right corner, and time settings….

� 12. Click Change time zone…

NOTE: It is important to change the time zone

� 13. Ensure that the correct time zone is selected

� 14. Click the Automatically adjust complete.

� 15. Click Change date and time…

� 16. Enter the Domain Admin User Name ( Password (see cut sheet item #4)

� 17. Use the <Up> and <Down complete.

� 18. Click OK to return to the FILO

3.1.5 Disable FILO Laptop Standby Power Function

� 1. Click Start . In the Search programs and files… press <Enter>. The Power Options

� 2. Click Create a power p la

� 3. Enter the Domain Admin User Name ( Password (see cut sheet item #4)

� 4. Activate the High performance

� 5. Under Plan name, type

� 6. Click the drop-down arrow box under

� 7. Click the drop-down arrow box under

� 8. Click the Create button.

� 9. Close the Power Options

3.1.6 Remove Root Hints

� 1. Open the Server Manager.

� 2. Enter the Domain Admin User Name ( Password (see cut sheet item #4)

FOR OFFICIAL USE ONLY

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

FOR OFFICIAL USE ONLY

window.

Banner Tip of the Day window, deactivate the Show Tips at... checkbox and

In the lower right corner, click on the Date/Time information, then click

Change time zone… .

important to change the time zone before changing the time.

t the correct time zone is selected.

Automatically adjust clock… check box if required and click OK

Change date and time… .

Domain Admin User Name (see cut sheet item #3) and the Domain Admin #4) and press <Enter>.

Down> arrows to adjust the time as required, click to return to the FILO desktop.

Disable FILO Laptop Standby Power Function

Search programs and files… dialog, type Power Options Power Options window will open.

lan.

Domain Admin User Name (see cut sheet item#3) and the Domain Admin #4) and press <Enter>.

ormance radio button.

type TACLAN in the space provided and click Next .

down arrow box under On battery, and click Never .

down arrow box under Plugged in, and click Never .

button.

Power Options window.

Remove Root Hints Open the Server Manager.

Domain Admin User Name (see cut sheet item#3) and the Domain Admin item #4) and press <Enter>.

TACLAN Version 10.1 Installation Manual

3.0 Build a NIPRNET, SIPRNET, or JWICS TACLAN Segment

D04293-R01 checkbox and click

, then click Change date changing the time.

OK when the Domain Admin click OK when

Power Options and the Domain Admin the Domain Admin

� 3. Expand Roles � DNS Server � DNS, and then select (FILO Servername).

� 4. In the center pane, <right-click> on Root Hints and select Properties .

� 5. Select Remove to remove all of the entries in the populated list.

� 6. Select OK.

� 7. Select Yes.

� 8. Close the Server Manager.

3.1.7 Change the Boot Order in…