Part Number: X05-39405 Released: 3/2000 Delivery Guide Course Number: 1562B Designing a Microsoft ® Windows ® 2000 Networking Services Infrastructure Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2000 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, ActiveX, BackOffice, FrontPage, JScript, MS-DOS, NetMeeting, PowerPoint, Visual Basic, Visual C++, Visual Studio, Win32, Windows, Windows Media, Windows NT, are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries/regions. Project Lead: Don Thompson (Volt Technical) Instructional Designers: Patrice Lewis (S&T OnSite), Renu Bhatt NIIT (USA) Inc. Instructional Design Consultants: Paul Howard, Susan Greenberg Program Managers: Jack Creasey, Doug Steen (Independent Contractor) Technical Contributors: Thomas Lee, Bernie Kilshaw, Joe Davies Graphic Artist: Kirsten Larson (S&T OnSite) Editing Manager: Lynette Skinner Editor: Kristen Heller (Wasser) Copy Editor: Kaarin Dolliver (S&T Consulting) Online Program Manager: Debbi Conger Online Publications Manager: Arlo Emerson (Aditi) Online Support: Eric Brandt (S&T Consulting) Multimedia Development: Kelly Renner (Entex) Test Leads: Sid Benevente, Keith Cotton Test Developer: Greg Stemp (S&T OnSite) Production Support: Lori Walker (S&T Consulting) Manufacturing Manager: Rick Terek (S&T OnSite) Manufacturing Support: Laura King (S&T OnSite) Lead Product Manager, Development Services: Bo Galford Lead Product Manager: Ken Rosen Group Product Manager: Robert Stewart Other product and company names mentioned herein may be the trademarks of their respective owners. Course Number: 1562B Part Number: X05-39405 Released: 3/2000 Designing a Microsoft® Windows® 2000 Networking Services Infrastructure iii Contents Introduction Course Materials 2 Prerequisites . 3 Course Outline . 4 Microsoft Official Curriculum . 6 Microsoft Certified Professional Program . 7 Facilities . 9 Module 1: Microsoft ® Windows ® 2000 Networking Services Infrastructure Overview Overview 1 Introduction to Networking Services Design . 2 Microsoft Windows 2000 Networking Services 3 Translating Organizational Goals into a Design 10 Review . 12 Module 2: TCP/IP as a Solution for Networking Overview 1 Introducing TCP/IP 2 Designing a Functional TCP/IP Solution . 7 Securing a TCP/IP Solution . 19 Enhancing a TCP/IP Design for Availability . 27 Optimizing a TCP/IP Design for Performance 28 Lab A: Designing a TCP/IP Solution . 39 Review . 45 Module 3: DHCP as a Solution for IP Configuration Overview 1 Introducing DHCP . 2 Designing a Functional DHCP Solution 8 Securing a DHCP Solution 18 Enhancing a DHCP Design for Availability 23 Enhancing a DHCP Design for Performance . 28 Lab A: Designing a DHCP Solution 32 Review . 40 Module 4: DNS as a Solution for Name Resolution Overview 1 Introducing DNS 2 Designing a Functional DNS Solution . 7 Discussion: Designing DNS Solutions 20 Securing DNS 22 Enhancing a DNS Design for Availability . 28 Optimizing a DNS Design for Performance 31 Discussion: Enhancing DNS Solutions 35 Lab A: Designing a DNS Solution . 37 Review . 48 iv Designing a Microsoft® Windows® 2000 Networking Services Infrastructure Module 5: WINS as a Solution for NetBIOS Name Resolution Overview 1 Introducing WINS 2 Designing a Functional WINS Solution . 8 Securing a WINS Solution . 19 Enhancing a WINS Design for Availability . 22 Optimizing a WINS Design for Performance 27 Lab A: Designing a WINS Solution . 30 Review . 37 Module 6: NAT as a Solution for Internet Connectivity Overview 1 Introducing NAT 2 Designing a Functional NAT Solution . 6 Securing a NAT Solution . 13 Enhancing a NAT Design for Availability and Performance . 19 Discussion: Enhancing a NAT Solution 20 Lab A: Designing a NAT Solution . 22 Review . 30 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Overview 1 Introducing Proxy Server . 2 Designing a Functional Proxy Server Solution 7 Securing a Proxy Server Solution 15 Enhancing a Proxy Server Design for Availability 26 Optimizing a Proxy Server Design for Performance . 31 Lab A: Designing a Proxy Server Solution 40 Review . 53 Module 8: Routing as a Solution for Private Network Connectivity Overview 1 Introducing Routing . 2 Designing a Functional Routing Solution 7 Discussion: Designing Routing Solutions 20 Securing Private Network Connections . 22 Enhancing a Routing Design for Availability and Performance 30 Discussion: Enhancing Routing Solutions . 31 Lab A: Designing a Routing Solution 33 Review . 42 Module 9: Remote User Connectivity Overview 1 Introducing Routing and Remote Access . 2 Designing a Functional Remote Access Solution 10 Securing a Remote Access Solution 26 Enhancing a Remote Access Design for Availability 33 Optimizing a Remote Access Design for Performance 39 Lab A: Designing a Remote Access Solution 43 Review . 50 Designing a Microsoft® Windows® 2000 Networking Services Infrastructure v Module 10: RADIUS as a Solution for Remote Access Overview 1 Introducing RADIUS . 2 Designing a Functional RADIUS Solution 7 Discussion: Designing a RADIUS Solution 16 Securing a RADIUS Solution 18 Enhancing a RADIUS Design for Availability 28 Optimizing a RADIUS Design for Performance . 30 Discussion: Enhancing the RADIUS Solution . 32 Lab A: Designing a RADIUS Solution 34 Review . 43 Module 11: Windows 2000 Network Services Management Overview 1 Defining Management Strategies . 2 Identifying Management Processes . 7 Generating Information on the Status of the Services 8 Demonstration: Scripting . 24 Analyzing the Collected Data 26 Selecting Response Strategies 28 Review . 30 Module 12: Strategies for Combining Networking Services Overview 1 Benefits of Combining Services 2 Constraints of Combining Services 4 Securing a Design by Combining Services 6 Discussion: Combining Networking Services . 8 Enhancing Availability by Combining Services 10 Optimizing Performance by Combining Services 13 Discussion: Enhancing Combined Services Solutions . 17 Lab A: Designing a Combined Services Solution 19 Review . 34 Module 13: Networking Service Designs Overview 1 Evaluating the Existing Configuration . 2 Identifying the Essential Design Decisions 6 Providing Security . 15 Enhancing the Availability and Performance 19 Lab A: Creating Networking Solutions . 28 Review . 89 Designing a Microsoft® Windows® 2000 Networking Services Infrastructure vii About This Course This section provides you with a brief description of the course, audience, prerequisites, and course objectives. Description This course provides students with the information and skills needed to create a Microsoft ® Windows ® 2000 networking services infrastructure design that supports the required network applications. Each module provides a solution based on the needs of an organization. Some Windows 2000 network solutions require a single technology, such as DHCP, to provide Internet Protocol (IP) address configuration support. In other situations, several technology options may be required, such as Open Shortest Path First (OSPF), Routing Information Protocol (RIP), and Internet Group Management Protocol (IGMP), to design an IP routing solution. This course addresses the basic functionality, security, availability, and performance features of each networking service as aspects of a networking services design. The course contains four units corresponding to the various functions provided by networking services. Unit 1, Designing the Network Foundation, introduces the essential services common to all Windows 2000 networks. As a group, these services allow devices to function as integral network hosts. Technologies covered in detail include Transmission Control Protocol/Internet Protocol (TCP/IP), DHCP, DNS, and WINS. Additional technologies discussed in the context of supporting and enhancing an IP network include Internet Protocol Security (IPSec), Windows Clustering, and Quality of Service (QoS). Unit 2, Designing Internet Connectivity, covers elements of networking services designed to support connectivity between the private network and the Internet, while maintaining a level of isolation for some or all of the private network’s resources. Technologies covered in detail in this unit include Microsoft Proxy Server, firewalls, and the Network Address Translation (NAT) protocol. Additional technologies discussed in the context of designing for Internet connectivity include Windows Clustering and Routing and Remote Access. Unit 3, Designing Private Network Connectivity, expands the scope of the network design from a local area to an extranet that connects all remote sites and users. Technologies covered in detail in this unit include routing, remote access, virtual private networking, and Remote Authentication Dial-In User Service (RADIUS). Additional technologies discussed in the context of supporting private network connectivity include IPSec, demand-dial routing, Connection Manager, Windows Clustering, and QoS. Unit 4, Creating an Integrated Network Services Infrastructure Design, integrates all networking services into a comprehensive design that provides a framework for monitoring network infrastructure design compliance and maintaining the network services infrastructure over the long term. This module focuses on developing a design strategy to manage networks, combining services, and creating solutions that support applications. viii Designing a Microsoft® Windows® 2000 Networking Services Infrastructure Audience This course is intended for senior support professionals who are designing or will be designing Windows 2000 networking services infrastructures. This course is also appropriate for network architects and design consultants who design network infrastructures by using Windows 2000 within the solution. The course is also appropriate for assisting those individuals who want to prepare for the Microsoft Certified Systems Engineer certification. Student Prerequisites Prior to taking this course, the student must have completed one of the following courses:  Course 1560B, Updating Support Skills from Microsoft Windows NT ® 4.0 to Microsoft Windows 2000  Course 2153A, Supporting a Microsoft Windows 2000 Networking Infrastructure Course Objectives At the end of this course, the student will be able to:  Describe the aspects of a Windows 2000 networking services infrastructure design.  Design a TCP/IP solution in a Windows 2000 networking infrastructure.  Evaluate and create an IP configuration solution by using DHCP.  Evaluate and create a solution for domain name resolution by using DNS.  Evaluate and create a solution for NetBIOS name resolution by using WINS.  Evaluate and create a NAT solution for Internet connectivity by using the NAT protocol in Routing and Remote Access.  Evaluate and create an Internet connectivity design by using Microsoft Proxy Server 2.0.  Evaluate and create private network connectivity designs by using the IP routing features of Routing and Remote Access.  Evaluate and create a design to connect a remote user to a private network by using the remote access features of Routing and Remote Access.  Evaluate and create a design to connect a remote user to a private network by using the RADIUS features provided by Routing and Remote Access and Internet Authentication Service (IAS).  Evaluate and design strategies for a networking services management plan.  Develop a management strategy for networking services.  Evaluate strategies for combining networking services on a single computer within an infrastructure.  Evaluate and create designs based upon the applications in use by an organization. Designing a Microsoft® Windows® 2000 Networking Services Infrastructure ix Course Timing The following schedule is an estimate of the course timing. Your timing may vary. Day 1 Start End Module 9:00 9:15 Module 0: Introduction 9:15 9:30 Module 1: Microsoft Windows 2000 Networking Services Infrastructure Overview 9:30 10:30 Module 2: TCP/IP As a Solution for Networking 10:30 10:45 Break 10:45 11:45 Lab 2: Designing a TCP/IP Solution 11:45 12:45 Break 12:45 2:00 Module 3: DHCP As a Solution for IP Configuration 2:00 2:30 Lab 3: Designing a DHCP Solution 2:30 2:45 Break 2:45 4:00 Module 4: DNS As a Solution for Name Resolution 4:00 4:45 Lab 4: Designing a DNS Solution Day 2 Start End Module 9:00 9:45 Module 5: WINS As a Solution for NetBIOS Name Resolution 9:45 10:00 Break 10:00 10:45 Lab 5: Designing a WINS Solution 10:45 11:30 Module 6: NAT As a Solution for Internet Connectivity 11:30 12:30 Lunch 12:30 1:15 Lab 6: Designing a NAT Solution 1:15 2:15 Module 7: Microsoft Proxy Server 2.0 As a Solution for Internet Connectivity 2:15 2:30 Break 2:30 3:30 Lab 7: Designing a Proxy Server Solution x Designing a Microsoft® Windows® 2000 Networking Services Infrastructure Day 3 Start End Module 9:00 10:30 Module 8: Routing As a Solution for Private Network Connectivity 10:30 10:45 Break 10:45 11:45 Lab 8: Designing a Routing Solution 11:45 12:45 Lunch 12:45 2:15 Module 9: Remote User Connectivity 2:15 2:45 Lab 9: Designing a Remote Access Solution 2:45 3:00 Break 3:00 4:15 Module 10: RADIUS As a Solution for Remote Access 4:15 5:00 Lab 10: Designing a RADIUS Solution Day 4 Start End Module 9:00 10:15 Module 11: Windows 2000 Network Management 10:15 10:30 Break 10:30 11:30 Module 12: Strategies for Combining Networking Services 11:30 12:00 Lab 12: Designing a Combined Services Solution 12:00 1:00 Lunch 1:00 2:15 Module 13: Networking Service Designs 2:15 2:30 Break 2:30 4:30 Lab 13: Creating Networking Solutions 4:30 5:00 Review and Summarize [...]... review and lab answers, lab files, multimedia presentations, and courserelated Web sites Tprep This folder contains the Trainer Preparation Presentation, a narrated slide show that explains the instructional strategy for the course, and presentation tips and caveats To open the presentation on the Trainer Materials Web page, click Trainer Preparation Presentation xii Designing a Microsoft® Windows® 2000. .. appears next to a slide title when additional information on the topic is covered on the page or pages that follow it bold Represents commands, command options, and portions of syntax that must be typed exactly as shown It also indicates commands on menus and buttons, icons, dialog box titles and options, and icon and menu names italic In syntax statements, indicates placeholders for variable information... prompt ALL CAPITALS Indicate the names of keys, key sequences, and key combinations — for example, ALT+SPACEBAR monospace Represents code samples, examples of screen text, or entries that you type at a command prompt or in initialization files [] In syntax statements, enclose optional items For example, [filename] in command syntax indicates that you can choose to type a file name with the command Type.. .Designing a Microsoft® Windows® 2000 Networking Services Infrastructure xi Trainer Materials Compact Disc Contents The Trainer Materials compact disc contains the following files and folders: Default.htm This file opens the Trainer Materials Web page Readme.txt This file contains a description of the compact disc contents and setup instructions in ASCII format (non-Microsoft Word... Italic is also used for introducing new terms, for book titles, and for emphasis in the text Title Capitals Indicate domain names, user names, computer names, directory names, folders, and file names, except when specifically referring to case-sensitive names Unless otherwise indicated, you can use lowercase letters when you type a directory name or file name in a dialog box or at a command prompt ALL... 2000 Networking Services Infrastructure Student Materials Compact Disc Contents The Student Materials compact disc contains the following files and folders: Default.htm This file opens the Student Materials Web page It provides students with resources pertaining to this course, including additional reading, review and lab answers, lab files, multimedia presentations, and course-related Web sites Readme.txt... course If there are no appendix files, this folder does not appear Fonts This folder contains fonts that are required to view the PowerPoint presentation and Web-based materials Labfiles This folder contains files that are used in the hands-on labs These files may be used to prepare the student computers for the hands-on labs Media This folder contains files that are used in multimedia presentations for... This file contains a description of the compact disc contents and setup instructions in ASCII format (non-Microsoft Word document) AddRead This folder contains additional reading pertaining to this course If there are no additional reading files, this folder does not appear Answers This folder contains answers to the module review questions and hands-on labs Appendix This folder contains appendix files... file is the Classroom Setup Guide It contains a description of classroom requirements, classroom configuration, and classroom setup instructions Errorlog This folder contains a template that is used to record any errors and corrections that you may find in the course Fonts This folder contains fonts that are required to view the Microsoft PowerPoint® presentations and Web-based materials Mplayer This folder... that is used to view any Word document (.doc) files that are included on the compact disc If no Word documents are included, this folder does not appear Designing a Microsoft® Windows® 2000 Networking Services Infrastructure xiii Document Conventions The following conventions are used in course materials to distinguish elements of the text Convention Use Indicates an introductory page This symbol appears . within an infrastructure.  Evaluate and create designs based upon the applications in use by an organization. Designing a Microsoft® Windows® 2000 Networking. in a Windows 2000 networking infrastructure.  Evaluate and create an IP configuration solution by using DHCP.  Evaluate and create a solution for domain