FREE Monthly Technology Updates One-year Vendor Product Upgrade Protection Plan FREE Membership to Access.Globalknowledge CISCO NETWORK WINDOWS 2000 BUILDING A Melissa Craft, CCNA, MCSE, Network+, MCNE, Citrix CCA Elliot Lewis, CCNA, CCDA, MCSE, CCSE, MCP+I, MCT TECHNICAL EDITOR: Stace Cunningham, CCNA, CLSE, COS/2E, CLSI, COS/2I, CLSA FOR “Many of us are struggling with planning and running a Cisco and Microsoft internetwork. This book clearly explains Cisco Networking Services for Active Directory (CNS/AD). Struggle no more!” —Jacques M. Mueller, COO EngineX Networks 71_FP.qx 11/20/00 3:50 PM Page 1 (1,1) Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created solutions@syngress.com, a service that includes the following features: ■ A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. ■ Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difficult topics, written by content experts exclusively for solutions@syngress.com. ■ Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. ■ Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. Once you've purchased this book, browse to www.syngress.com/solutions . To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. solutions@syngress.com 71_BCNW2K_FM 9/10/00 11:57 AM Page i Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com 71_BCNW2K_FM 9/10/00 11:57 AM Page ii Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com CISCO NETWORK WINDOWS 2000 BUILDING A FOR 71_BCNW2K_FM 9/10/00 11:57 AM Page iii Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other inci- dental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 9TRR52MDSE 002 XPSTEH7TC4 003 CLNBC28FV7 004 DC128N4RL6 005 Z745Q25DBR 006 PF62R2DXMB 007 DT88A5ZX44 008 XRCJ743RTG 009 6532M92L8S 010 SMYR8PS2RN PUBLISHED BY Syngress Media, Inc. 800 Hingham Street Rockland, MA 02370 Building a Cisco Network for Windows 2000 Copyright © 2000 by Syngress Media, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN: 1-928994-00-8 Copy edit by: Adrienne Rebello Proofreading by: Nancy Adams Technical edit by: Stace Cunningham Page Layout and Art by: Shannon Tozier Index by: Robert Saigh and Katharine Glennon Project Editor: Katharine Glennon Co-Publisher: Richard Kristof Distributed by Publishers Group West 71_BCNW2K_FM 9/10/00 11:57 AM Page iv Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com Acknowledgments We would like to acknowledge the following people for their kindness and sup- port in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Rhonda Harmon, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Callisma for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise net- works. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their help. David Buckland, Wendi Wong, David Loh, Marie Chieng, Lucy Chong, Leslie Lim, Audrey Gan, and Joseph Chan of Transquest Publishers for the enthu- siasm with which they receive our books. Kwon Sung June at Acorn Publishing for his support. Ethan Atkin at Cranbury International for his help in expanding the Syngress program. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certification Press series. v 71_BCNW2K_FM 9/10/00 11:57 AM Page v Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com vi From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from pro- viding instructor-led training to hundreds of thousands of students world- wide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the first time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Officer, Global Knowledge 71_BCNW2K_FM 9/10/00 11:57 AM Page vi Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com vii Contributors Russell Brown (CCNP, MCSE+I, A+) is an independent consultant in Minneapolis, MN. He focuses on networking and security, specializing primarily in integrating Microsoft products with Cisco Routing. He has over three years of computer consulting experience but still finds time to play the guitar in several bands around the Twin Cities. Some of the projects Russ has worked on include LAN/WAN troubleshooting for small companies, Firewall and Proxy design and implementation, designing procedures for desktop rollouts, and various routing and switching implementations. Russ lives in Minneapolis, MN and can be reached at brown@isd.net. His website is http://ruebarb.tripod.com. Melissa Craft (CCNA, MCSE, Network+, CNE-5, CNE-3, CNE-4, CNE- GW, MCNE, Citrix CCA) designs business computing solutions using technology to automate processes, and using business process reengi- neering techniques. Melissa has successfully designed, implemented and integrated networks ranging in size from a few nodes to over 100,000 nodes. Her consulting experience has incorporated extensive project management, needs-analysis, LAN and WAN design, deployment and operational turnover. Currently, Melissa is Director of e-Business Offering Development for MicroAge Technology Services, a global sys- tems integrator that provides IT design, project management, and sup- port for distributed computing systems. Melissa holds a bachelor’s degree from the University of Michigan, and is a member of the IEEE, the Society of Women Engineers and American MENSA, Ltd. Melissa currently resides in Glendale, Arizona with her family, Dan, Justine, and Taylor, and her two Great Danes (a.k.a Mobile Defense Units), Marm- aduke and Apollo and her Golden Retriever (a.k.a. Mobile Alarm Unit) Pooka. Melissa can be contacted via e-mail at mmcraft@compuserve.com. Elliot Lewis (CCNA, CCDA, MCSE, CCSE, MCP+I, MCT) is the Director of Solution Architecture at EngineX Networks, a leading infrastructure design firm that specializes in designing and implementing industry- leading networking technologies. Specialties include Voice over technolo- gies, High Availability Infrastructure, IP Video/Audio Conferencing, IP 71_BCNW2K_FM 9/10/00 11:57 AM Page vii Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com viii Telephony, Wireless, and Content Networking. Elliot has over 13 years of experience in the design, implementation, and troubleshooting of large mission critical networks. He authored Configuring Cisco Voice Over IP with Syngress Media. He lives in Pleasanton, CA with his wife Meg and two sons, James and Zachary. Elliot Lewis contributed to the technical editing. Sean Thurston (CCNA, CCDA, MCP+I, MCSE) is a Solution Architect for EngineX Networks, a San Francisco-based Voice over IP/QoS network design and implementation company. Sean has extensive network design and implementation experience in complex LAN and WAN environments. He lives in Renton, WA with his fiancée Kerry. Technical Editor Stace Cunningham (CCNA, MCSE, CLSE, COS/2E, CLSI, COS/2I, CLSA, MCPS, A+) is a Systems Engineer with SDC Consulting located in Biloxi, MS. SDC Consulting specializes in the design, engineering, and installation of networks. Stace is also certified as an IBM Certified LAN Server Engineer, IBM Certified OS/2 Engineer, IBM Certified LAN Server Administrator, IBM Certified LAN Server Instructor, IBM Certified OS/2 Instructor. Stace has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1.2 exam, Proxy Server 1.0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the revised Windows 95 exam. In addition, he has coauthored or technical edited about 30 books published by Microsoft Press, Osborne/McGraw-Hill, and Syngress Media as well as contributed to publications from The SANS Institute and Internet Security Advisor magazine. His wife Martha and daughter Marissa are very supportive of the time he spends with his computers, routers, and firewalls in the “lab” of their house. Without their love and support he would not be able to accom- plish the goals he has set for himself. Stace Cunningham authored a chapter in addition to acting as technical director for the book. 71_BCNW2K_FM 9/10/00 11:57 AM Page viii Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com Contents ix Chapter 1—Developing a Windows 2000 and Cisco Internetwork 1 Introduction 2 Directory Enabled Network 2 The DEN Solution 4 About Microsoft’s Windows 2000 and Cisco’s IOS 8 Cisco’s IOS and Software Products 8 Cisco ConfigMaker 9 Cisco Fast Step 11 CiscoWorks 2000 13 Microsoft’s Windows 2000 14 Active Directory 17 Merging together with Cisco Networking Services for Active Directory 20 Best Practices for Implementing a Network 20 Networking Basics 22 OSI Protocol Reference Model 23 Physical Layer 26 Data-Link Layer 27 Network Layer 27 Transport Layer 28 The Session Layer 29 The Presentation Layer 29 The Application Layer 29 Internet History 30 IP Networking Primer 31 Case Studies 36 ABC Chemical Company 36 West Coast Accounting, L.L.C. 37 Summary 38 FAQs 41 Chapter 2—A Tour of Windows 2000 43 Introduction 44 What’s New Since Windows NT 4 44 Active Directory 45 Installation Options 45 Security Options 47 Internet Information Services 48 71_BCNW2K_Contents 9/12/00 3:14 PM Page ix Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com [...]... Chapter 2, A Tour of Windows 2000, ” and Chapter 3, Cisco Hardware and IOS Basics.” Cisco s IOS and Software Products Cisco develops a great deal of software products to work with their hardware products The Cisco IOS is a platform that provides network services to an internetwork It supports both local area network (LAN) and wide area network (WAN) environments, although actual configuration for an... executed, and sometimes these are not possible Database A Application A Database B Application B Database C Application C Database D Application D Users must know which application leads to which data If not, they suffer confusion www.syngress.com 3 71_BCNW2K_01 9/10/00 12:27 PM Page 4 Simpo PDF Merge and Split Unregistered Version - http://www.simpopdf.com 4 Chapter 1 • Developing a Windows 2000 and Cisco. .. 2900XL/3500XL Series Cisco Set-based Switching Products Catalyst 4000 Hardware Features of the 4003/4006 Series Hardware Features of the Catalyst 4912G Series Software Features of the 4xxx Series Features of the Catalyst 4908G-L3 Catalyst 5000 Hardware Features of the Catalyst 2900 Series Hardware Features of the Catalyst 5000/5002 Series Hardware Features of the Catalyst 5500 Series Modules for the Catalyst 5000... where all user account information was held in a single database for the entire internetwork, thus requiring users to need only a single password Then again, the designer could recommend that the users are trained on having longer passwords using numbers and characters (rather than alphabet-only), and suggest that a policy be put in place to force the users to change the passwords on a 60- or 90-day basis... security, and provisioning of Quality of Service (QoS) As a result, DEN harnesses the power of a database to centralize and manage network systems and services DEN defines a common schema for network units and services, and enables interoperability between them DEN specifies an object-oriented information model, called a directory, for networked units A networked unit is defined within the directory as a class... How Do Redundancy and Reliability Affect the Windows 2000 Network? Security on the Routed Architecture How Does Windows 2000 Help Manage ACLs? Quality of Service on the LAN/WAN Using Windows 2000 The Real Integration—Prioritizing Traffic on the LAN/WAN Dynamic QoS—Is This Really a Great Idea? When Should Another Method of QoS Be Used? Case Studies ABC Chemical Company Main Router Configuration 343 344... levels into the management of users and applications s Application and management of policies s Integration of extensible management applications into the directory to centralize the network management s Utilization of common protocols, common application programming interfaces (APIs), and a common repository for information to ensure interoperability s Advanced services from configuration, access control,... Preface xxiii ment corporation, provides operating systems and applications for both business and personal use Cisco, as a hardware original equipment manufacturer, produces internetwork equipment and the internetwork operating systems that move data from one point in an internetwork to another point Internetworks are primarily business-based However, the Internet (the world’s largest internetwork) has... Distributed storage Application B Application D Users can access directory for use of applications attributes that describe its properties For example, an attribute for a user account may be the user’s telephone number DEN does not define a management protocol like Simple Network Management Protocol (SNMP), even though it enables network management at a new level It does not define a network protocol... Groups FSMOs Global Catalog Configuration Schema LDAP So, You Want to Migrate? Quick! Plan Your Project Windows 2000 Case Studies ABC Chemical Company West Coast Accounting, L.L.C Summary FAQs Chapter 3 Cisco Hardware and IOS Basics Introduction Networking Basics: The Difference between Routers and Switches Hierarchical Design Model When Is It Appropriate to Use Routers? When Is It Appropriate to Use Switches? . Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their. Engineers and American MENSA, Ltd. Melissa currently resides in Glendale, Arizona with her family, Dan, Justine, and Taylor, and her two Great Danes (a. k .a Mobile Defense Units), Marm- aduke and Apollo. Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale