FREE Monthly Technology Updates One-year Vendor Product Upgrade Protection Plan FREE Membership to Access.Globalknowledge CISCO NETWORK WINDOWS 2000 BUILDING A Melissa Craft, CCNA, MCSE, Network+, MCNE, Citrix CCA Elliot Lewis, CCNA, CCDA, MCSE, CCSE, MCP+I, MCT TECHNICAL EDITOR: Stace Cunningham, CCNA, CLSE, COS/2E, CLSI, COS/2I, CLSA FOR “Many of us are struggling with planning and running a Cisco and Microsoft internetwork. This book clearly explains Cisco Networking Services for Active Directory (CNS/AD). Struggle no more!” —Jacques M. Mueller, COO EngineX Networks 71_FP.qx 11/20/00 3:50 PM Page 1 (1,1) MightyWords DRM With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created solutions@syngress.com, a service that includes the following features: ■ A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. ■ Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difficult topics, written by content experts exclusively for solutions@syngress.com. ■ Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. ■ Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. Once you've purchased this book, browse to www.syngress.com/solutions . To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. solutions@syngress.com 71_BCNW2K_FM 9/10/00 11:57 AM Page i 71_BCNW2K_FM 9/10/00 11:57 AM Page ii CISCO NETWORK WINDOWS 2000 BUILDING A FOR 71_BCNW2K_FM 9/10/00 11:57 AM Page iii Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other inci- dental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 9TRR52MDSE 002 XPSTEH7TC4 003 CLNBC28FV7 004 DC128N4RL6 005 Z745Q25DBR 006 PF62R2DXMB 007 DT88A5ZX44 008 XRCJ743RTG 009 6532M92L8S 010 SMYR8PS2RN PUBLISHED BY Syngress Media, Inc. 800 Hingham Street Rockland, MA 02370 Building a Cisco Network for Windows 2000 Copyright © 2000 by Syngress Media, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN: 1-928994-00-8 Copy edit by: Adrienne Rebello Proofreading by: Nancy Adams Technical edit by: Stace Cunningham Page Layout and Art by: Shannon Tozier Index by: Robert Saigh and Katharine Glennon Project Editor: Katharine Glennon Co-Publisher: Richard Kristof Distributed by Publishers Group West 71_BCNW2K_FM 9/10/00 11:57 AM Page iv Acknowledgments We would like to acknowledge the following people for their kindness and sup- port in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Rhonda Harmon, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Callisma for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise net- works. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their help. David Buckland, Wendi Wong, David Loh, Marie Chieng, Lucy Chong, Leslie Lim, Audrey Gan, and Joseph Chan of Transquest Publishers for the enthu- siasm with which they receive our books. Kwon Sung June at Acorn Publishing for his support. Ethan Atkin at Cranbury International for his help in expanding the Syngress program. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certification Press series. v 71_BCNW2K_FM 9/10/00 11:57 AM Page v vi From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from pro- viding instructor-led training to hundreds of thousands of students world- wide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the first time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Officer, Global Knowledge 71_BCNW2K_FM 9/10/00 11:57 AM Page vi vii Contributors Russell Brown (CCNP, MCSE+I, A+) is an independent consultant in Minneapolis, MN. He focuses on networking and security, specializing primarily in integrating Microsoft products with Cisco Routing. He has over three years of computer consulting experience but still finds time to play the guitar in several bands around the Twin Cities. Some of the projects Russ has worked on include LAN/WAN troubleshooting for small companies, Firewall and Proxy design and implementation, designing procedures for desktop rollouts, and various routing and switching implementations. Russ lives in Minneapolis, MN and can be reached at brown@isd.net. His website is http://ruebarb.tripod.com. Melissa Craft (CCNA, MCSE, Network+, CNE-5, CNE-3, CNE-4, CNE- GW, MCNE, Citrix CCA) designs business computing solutions using technology to automate processes, and using business process reengi- neering techniques. Melissa has successfully designed, implemented and integrated networks ranging in size from a few nodes to over 100,000 nodes. Her consulting experience has incorporated extensive project management, needs-analysis, LAN and WAN design, deployment and operational turnover. Currently, Melissa is Director of e-Business Offering Development for MicroAge Technology Services, a global sys- tems integrator that provides IT design, project management, and sup- port for distributed computing systems. Melissa holds a bachelor’s degree from the University of Michigan, and is a member of the IEEE, the Society of Women Engineers and American MENSA, Ltd. Melissa currently resides in Glendale, Arizona with her family, Dan, Justine, and Taylor, and her two Great Danes (a.k.a Mobile Defense Units), Marm- aduke and Apollo and her Golden Retriever (a.k.a. Mobile Alarm Unit) Pooka. Melissa can be contacted via e-mail at mmcraft@compuserve.com. Elliot Lewis (CCNA, CCDA, MCSE, CCSE, MCP+I, MCT) is the Director of Solution Architecture at EngineX Networks, a leading infrastructure design firm that specializes in designing and implementing industry- leading networking technologies. Specialties include Voice over technolo- gies, High Availability Infrastructure, IP Video/Audio Conferencing, IP 71_BCNW2K_FM 9/10/00 11:57 AM Page vii viii Telephony, Wireless, and Content Networking. Elliot has over 13 years of experience in the design, implementation, and troubleshooting of large mission critical networks. He authored Configuring Cisco Voice Over IP with Syngress Media. He lives in Pleasanton, CA with his wife Meg and two sons, James and Zachary. Elliot Lewis contributed to the technical editing. Sean Thurston (CCNA, CCDA, MCP+I, MCSE) is a Solution Architect for EngineX Networks, a San Francisco-based Voice over IP/QoS network design and implementation company. Sean has extensive network design and implementation experience in complex LAN and WAN environments. He lives in Renton, WA with his fiancée Kerry. Technical Editor Stace Cunningham (CCNA, MCSE, CLSE, COS/2E, CLSI, COS/2I, CLSA, MCPS, A+) is a Systems Engineer with SDC Consulting located in Biloxi, MS. SDC Consulting specializes in the design, engineering, and installation of networks. Stace is also certified as an IBM Certified LAN Server Engineer, IBM Certified OS/2 Engineer, IBM Certified LAN Server Administrator, IBM Certified LAN Server Instructor, IBM Certified OS/2 Instructor. Stace has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1.2 exam, Proxy Server 1.0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the revised Windows 95 exam. In addition, he has coauthored or technical edited about 30 books published by Microsoft Press, Osborne/McGraw-Hill, and Syngress Media as well as contributed to publications from The SANS Institute and Internet Security Advisor magazine. His wife Martha and daughter Marissa are very supportive of the time he spends with his computers, routers, and firewalls in the “lab” of their house. Without their love and support he would not be able to accom- plish the goals he has set for himself. Stace Cunningham authored a chapter in addition to acting as technical director for the book. 71_BCNW2K_FM 9/10/00 11:57 AM Page viii Contents ix Chapter 1—Developing a Windows 2000 and Cisco Internetwork 1 Introduction 2 Directory Enabled Network 2 The DEN Solution 4 About Microsoft’s Windows 2000 and Cisco’s IOS 8 Cisco’s IOS and Software Products 8 Cisco ConfigMaker 9 Cisco Fast Step 11 CiscoWorks 2000 13 Microsoft’s Windows 2000 14 Active Directory 17 Merging together with Cisco Networking Services for Active Directory 20 Best Practices for Implementing a Network 20 Networking Basics 22 OSI Protocol Reference Model 23 Physical Layer 26 Data-Link Layer 27 Network Layer 27 Transport Layer 28 The Session Layer 29 The Presentation Layer 29 The Application Layer 29 Internet History 30 IP Networking Primer 31 Case Studies 36 ABC Chemical Company 36 West Coast Accounting, L.L.C. 37 Summary 38 FAQs 41 Chapter 2—A Tour of Windows 2000 43 Introduction 44 What’s New Since Windows NT 4 44 Active Directory 45 Installation Options 45 Security Options 47 Internet Information Services 48 71_BCNW2K_Contents 9/12/00 3:14 PM Page ix [...]... Router Windows 2000 and L2TP PPTP 15 7 15 8 15 8 15 9 15 9 16 0 16 1 16 1 16 3 16 4 16 5 16 6 16 6 16 7 16 7 16 8 16 8 16 8 16 9 16 9 17 0 17 0 17 1 17 2 17 4 17 4 17 5 17 6 17 7 18 0 18 1 18 2 18 2 18 2 18 4 18 4 18 5 18 5 18 7 18 9 19 1 19 3 19 5 xiii 71_ BCNW2K_Contents xiv 9 /12 /00 3 :14 PM Page xiv Contents Configuring Windows 2000 PPTP Connection Summary FAQs Chapter 6—Designing the Windows 2000 Network Introduction Design Planning Forest Plan... IP Summary FAQs 11 6 11 6 11 7 12 0 12 3 12 4 12 6 12 6 12 8 13 0 13 1 13 1 13 4 13 4 13 5 13 5 13 6 13 6 13 7 13 8 13 9 13 9 14 0 14 0 14 1 14 1 14 2 14 2 14 3 14 4 14 5 14 5 14 6 14 7 14 7 14 8 14 8 14 9 15 0 15 1 15 4 15 6 71_ BCNW2K_Contents 9 /12 /00 3 :14 PM Page xiii Contents Chapter 5—Routing and Remote Access Introduction Remote Access Protocols ISDN ISDN Equipment Types ISDN Protocol Dial-on-Demand Routing Configuring BRI on a Cisco... Figure 1. 1 Figure 1. 1 Separate application-specific databases limit interoperability Report A Report B Report C Report D If a report needs to have data from more than one database, special integration processes must be executed, and sometimes these are not possible Database A Application A Database B Application B Database C Application C Database D Application D Users must know which application leads... Features of the Catalyst 4908G-L3 Catalyst 5000 Hardware Features of the Catalyst 2900 Series Hardware Features of the Catalyst 5000/5002 Series Hardware Features of the Catalyst 5500 Series Modules for the Catalyst 5000 Software Features of the Catalyst 5xxx Series Catalyst 6000 Hardware Features of the Catalyst 6xxx Series Software Features of the Catalyst 6000 Series Catalyst 8500 Hardware Features... my grandfather, Arthur Conat, drove a carriage with horses when he was a teenager He didn’t have a TV, or a telephone, or a car, or a refrigerator, or a washing machine, or running water aside from that at a hand-pumped well By the time he was my age (mid-30s), he had entered a lifelong career at the Bell Telephone Company, which is today AT&T He lived through two world wars, and entered the military... Redundancy and Reliability Circuitry Failover Design Hardware Failover Design The Financial Costs of Redundancy How Do Redundancy and Reliability Affect the Windows 2000 Network? Security on the Routed Architecture How Does Windows 2000 Help Manage ACLs? Quality of Service on the LAN/WAN Using Windows 2000 The Real Integration—Prioritizing Traffic on the LAN/WAN Dynamic QoS—Is This Really a Great Idea?... telecommunications in electronic format, with the encryption and speed available today, are far more advanced than any the world has seen before our lifetimes The Internet has been around for only a mere speck of time in documented history (You can read the Internet history in Chapter 1, by xxi 71_ BCNW2K_preface xxii 9 /10 /00 11 :53 AM Page xxii Preface the way.) Although the Internet’s popularity has made it... section that discusses some of the up and coming technologies for Cisco and Microsoft I hope you find value in this book, and that you are able to use it to help design, implement, and manage a Cisco/Microsoft network www.syngress.com 71_ BCNW2K_preface 9 /10 /00 11 :53 AM Page xxvi 71_ BCNW2K_ 01 9 /10 /00 12 :27 PM Page 1 Chapter 1 Developing a Windows 2000 and Cisco Internetwork Solutions in this chapter: s... Protocol Stack Setting an IP Address on Windows 2000 Establishing the Default Router Testing IP with ICMP on Windows 2000 Setting an IP Address on a Cisco Router 11 0 11 0 11 3 11 4 11 5 11 5 xi 71_ BCNW2K_Contents xii 9 /12 /00 3 :14 PM Page xii Contents Establishing the Default Route Testing IP with ICMP on a Cisco Router DNS Setting up DNS Services on Windows 2000 Setting Up DNS Clients on Windows 2000 Setting... supports both local area network (LAN) and wide area network (WAN) environments, although actual configuration for an environment must also be supported by the Cisco hardware The IOS can scale to multiple interfaces on a single piece of hardware, and with multiple routers in an internetwork, the IOS proves to be versatile in addition to being scalable from small offices to large enterprise internetworks IOS . 6000 Series 411 Catalyst 8500 411 Hardware Features of the 85xx Series 412 Software Features of the 8500 Series 413 Catalyst 12 000 GSR Switches 413 71_ BCNW2K_Contents 9 /12 /00 3 :14 PM Page xviii . Stace has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1. 2 exam, Proxy Server 1. 0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the. 10 9 Introduction 11 0 The TCP/IP Protocol Stack 11 0 Setting an IP Address on Windows 2000 11 3 Establishing the Default Router 11 4 Testing IP with ICMP on Windows 2000 11 5 Setting an IP Address on a Cisco