Program Overview

---

Program Overview

The program "AL-1804. Network Administration of Astra Linux Special Edition 1.8" aims to form or improve competencies in the implementation, administration, and support of network services implemented in the Astra Linux operating system.

Program Details

• Level of Complexity: Not specified
• Duration: 40 academic hours
• Training Schedule: 5 days, 8 academic hours per day

Annotation

The goal of this program is to equip students with the knowledge and skills necessary for network administration, focusing on Astra Linux Special Edition 1.8. This includes understanding network fundamentals, configuring network interfaces, diagnosing network issues, and managing network services.

Knowledge and Skills Acquired

Upon completion of this program, students will acquire the following knowledge and skills:

• Understanding of IP address types, classes, and ranges for private networks
• Knowledge of naming rules for network interfaces in Linux
• Understanding of the purpose and structure of data transmitted over basic TCP/IP protocols
• Ability to configure network interfaces and connections using nmcli, nmtui, and nm-connection-editor
• Ability to configure Ethernet interface aggregation using the bonding mechanism
• Familiarity with basic network diagnostic utilities
• Ability to diagnose network faults using diagnostic utilities
• Ability to configure the sshd service and ssh client, and use ssh for proxying and tunneling
• Understanding of DNS terminology, the purpose of DNS servers, and DNS operation modes
• Ability to install and configure DHCP for dynamic and static address allocation, and diagnose DHCP service operation
• Ability to install and configure the SQUID proxy server
• Ability to use Ansible variables and work with roles
• Understanding of the basic protocols used in FreeIPA
• Ability to manage user and group accounts with mandatory access control
• Ability to configure centralized storage for domain user home directories
• Understanding of HTTP, HTTPS, SMTP, and IMAP protocol operation
• Ability to install and configure the Apache2 web server and virtual hosting
• Ability to install a secure email package
• Understanding of the architecture and purpose of CUPS-based printing systems
• Ability to configure servers for remote network installation: HTTP, TFTP, DHCP, and perform remote installation

Instructors

• (Norka Evgeny Olegovich)
• (Orlov Egor Sergeevich)

Related Courses

• System Administration
• Linux
• Astra Linux

Schedule

The program is scheduled to run from March 30, 2026, to April 3, 2026, with classes from 10:00 to 17:20 each day.

Cost

• For Individuals: 60,000
• For Legal Entities: 60,000
• Discounts are available based on the number of participants, contract sum, and other conditions negotiated with the client.

Prerequisites

Knowledge and skills equivalent to the courses "ALSE-1602. Basic Administration of Astra Linux Special Edition" and "ALSE-1603. Advanced Administration of Astra Linux Special Edition" or similar, with a preference for experience in supporting network services.

Modules

The program consists of 13 modules covering a wide range of topics from network fundamentals and TCP/IP to advanced topics like FreeIPA, Ansible, and network installation.

Module 1: Basics of TCP/IP Networks. Network Configuration and Diagnostics

• Introduction to TCP/IP networks
• IP addresses, classes, and private networks
• Subnetting and classless addressing
• Basic TCP/IP protocols (ARP, ICMP, IP, TCP, UDP)
• Network interface naming and configuration
• Ethernet interface aggregation (bonding)
• Network diagnostic utilities

Module 2: Configuring Remote Access via SSH

• Introduction to SSH
• Configuring the sshd service and ssh client
• Using SSH for proxying and tunneling

Module 3: DNS Service

• DNS terminology and components
• Domains and zones
• Types and operation modes of DNS servers
• Resource records (SOA, NS, A, AAAA, PTR, MX, SRV)
• Installing and configuring a DNS server

Module 4: DHCP Service

• DHCP terminology and algorithm
• Installing and configuring a DHCP server
• Configuring a DHCP client
• Diagnosing DHCP service issues

Module 5: SQUID Proxy Server

• SQUID capabilities
• Installing and minimally configuring SQUID
• General configuration parameters
• Access lists
• User authentication (basic, NCSA)
• Generating reports (cachemgr)
• Diagnostics and troubleshooting

Module 6: Synchronizing Time over the Network using NTP

• Time management in systemd (timedatectl, systemd-timesyncd)
• NTP terminology
• Installing and configuring chrony
• Configuring an NTP server for an isolated network
• Diagnosing NTP service issues (chronyc)

Module 7: Managing Host Configurations with Ansible

• Ansible architecture
• Installing and configuring Ansible
• Using Ansible from the command line
• Creating inventory files and playbooks
• Variables
• Roles

Module 8: Identity Management System (IdM) - FreeIPA

• FreeIPA architecture and components
• Overview of basic protocols used in FreeIPA (LDAP, Kerberos, SMB)
• Installing and initially configuring a FreeIPA server
• Introducing a client host to the FreeIPA domain
• Installing a FreeIPA replica
• Managing users and groups
• Limiting user access to services on specified hosts using HBAC rules
• Managing centralized storage of SUDO rules
• Integrating FreeIPA with a SAMBA file server
• Configuring services for authentication through the FreeIPA domain
• Replicating a FreeIPA server
• Integrating with Microsoft Active Directory (AD) by establishing trust relationships

Module 9: Web Server based on Apache

• HTTP protocol basics
• Installing the Apache web server and management utility
• Apache configuration files
• Basic web server configuration (ServerName, ServerAlias, ServerAdmin, Listen, DocumentRoot)
• Configuring virtual hosting
• Managing Apache modules
• Integrating Apache2 and FreeIPA
• Supporting mandatory access control in Apache2

Module 10: Email System based on Exim and Dovecot

• Email system principles
• Email system components and their purpose
• SMTP/ESMTP and IMAP protocols
• Using DNS for email message transmission
• Installing and configuring a secure email package (Exim, Dovecot, Thunderbird)
• Integrating the email system with FreeIPA with support for mandatory access control

Module 11: Secure Printing and Document Marking Complex

• Composition and architecture of the printing system
• Installing and configuring the CUPS service
• Configuring the print service client
• Managing queues, printers, and jobs
• Document marking
• Integrating the CUPS service and FreeIPA

Module 12: Installing Astra Linux over the Network

• Configuring the HTTP server repository for Astra Linux
• Configuring the TFTP server
• Configuring the DHCP server
• Preparing the automatic response file
• Configuring access to the repository

Module 13: Introduction to IPv6 (Optional)

• Introduction to IPv6
• Implementing security labels in IPv6
• IPv6 address structure
• Types of IPv6 addresses
• Methods of obtaining IPv6 addresses

Institution

The program is offered by the Higher Engineering School of the Saint Petersburg Polytechnic University of Peter the Great.