FREE Monthly Technology Updates One-year Vendor Product Upgrade Protection Plan FREE Membership to Access.Globalknowledge CISCO NETWORK WINDOWS 2000 BUILDING A Melissa Craft, CCNA, MCSE, Network+, MCNE, Citrix CCA Elliot Lewis, CCNA, CCDA, MCSE, CCSE, MCP+I, MCT TECHNICAL EDITOR: Stace Cunningham, CCNA, CLSE, COS/2E, CLSI, COS/2I, CLSA FOR “Many of us are struggling with planning and running a Cisco and Microsoft internetwork. This book clearly explains Cisco Networking Services for Active Directory (CNS/AD). Struggle no more!” —Jacques M. Mueller, COO EngineX Networks 71_FP.qx 11/20/00 3:50 PM Page 1 (1,1) With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created solutions@syngress.com , a service that includes the following features: ■ A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. ■ Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difficult topics, written by content experts exclusively for solutions@syngress.com . ■ Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. ■ Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. Once you've purchased this book, browse to www.syngress.com/solutions . To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. solutions@syngress.com 71_BCNW2K_FM 9/10/00 11:57 AM Page i 71_BCNW2K_FM 9/10/00 11:57 AM Page ii CISCO NETWORK WINDOWS 2000 BUILDING A FOR 71_BCNW2K_FM 9/10/00 11:57 AM Page iii Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other inci- dental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 9TRR52MDSE 002 XPSTEH7TC4 003 CLNBC28FV7 004 DC128N4RL6 005 Z745Q25DBR 006 PF62R2DXMB 007 DT88A5ZX44 008 XRCJ743RTG 009 6532M92L8S 010 SMYR8PS2RN PUBLISHED BY Syngress Media, Inc. 800 Hingham Street Rockland, MA 02370 Building a Cisco Network for Windows 2000 Copyright © 2000 by Syngress Media, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN: 1-928994-00-8 Copy edit by: Adrienne Rebello Proofreading by: Nancy Adams Technical edit by: Stace Cunningham Page Layout and Art by: Shannon Tozier Index by: Robert Saigh and Katharine Glennon Project Editor: Katharine Glennon Co-Publisher: Richard Kristof Distributed by Publishers Group West 71_BCNW2K_FM 9/10/00 11:57 AM Page iv Acknowledgments We would like to acknowledge the following people for their kindness and sup- port in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Rhonda Harmon, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Callisma for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise net- works. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their help. David Buckland, Wendi Wong, David Loh, Marie Chieng, Lucy Chong, Leslie Lim, Audrey Gan, and Joseph Chan of Transquest Publishers for the enthu- siasm with which they receive our books. Kwon Sung June at Acorn Publishing for his support. Ethan Atkin at Cranbury International for his help in expanding the Syngress program. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certification Press series. v 71_BCNW2K_FM 9/10/00 11:57 AM Page v vi From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from pro- viding instructor-led training to hundreds of thousands of students world- wide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the first time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Officer, Global Knowledge 71_BCNW2K_FM 9/10/00 11:57 AM Page vi vii Contributors Russell Brown (CCNP, MCSE+I, A+) is an independent consultant in Minneapolis, MN. He focuses on networking and security, specializing primarily in integrating Microsoft products with Cisco Routing. He has over three years of computer consulting experience but still finds time to play the guitar in several bands around the Twin Cities. Some of the projects Russ has worked on include LAN/WAN troubleshooting for small companies, Firewall and Proxy design and implementation, designing procedures for desktop rollouts, and various routing and switching implementations. Russ lives in Minneapolis, MN and can be reached at brown@isd.net. His website is http://ruebarb.tripod.com. Melissa Craft (CCNA, MCSE, Network+, CNE-5, CNE-3, CNE-4, CNE- GW, MCNE, Citrix CCA) designs business computing solutions using technology to automate processes, and using business process reengi- neering techniques. Melissa has successfully designed, implemented and integrated networks ranging in size from a few nodes to over 100,000 nodes. Her consulting experience has incorporated extensive project management, needs-analysis, LAN and WAN design, deployment and operational turnover. Currently, Melissa is Director of e-Business Offering Development for MicroAge Technology Services, a global sys- tems integrator that provides IT design, project management, and sup- port for distributed computing systems. Melissa holds a bachelor’s degree from the University of Michigan, and is a member of the IEEE, the Society of Women Engineers and American MENSA, Ltd. Melissa currently resides in Glendale, Arizona with her family, Dan, Justine, and Taylor, and her two Great Danes (a.k.a Mobile Defense Units), Marm- aduke and Apollo and her Golden Retriever (a.k.a. Mobile Alarm Unit) Pooka. Melissa can be contacted via e-mail at mmcraft@compuserve.com. Elliot Lewis (CCNA, CCDA, MCSE, CCSE, MCP+I, MCT) is the Director of Solution Architecture at EngineX Networks, a leading infrastructure design firm that specializes in designing and implementing industry- leading networking technologies. Specialties include Voice over technolo- gies, High Availability Infrastructure, IP Video/Audio Conferencing, IP 71_BCNW2K_FM 9/10/00 11:57 AM Page vii viii Telephony, Wireless, and Content Networking. Elliot has over 13 years of experience in the design, implementation, and troubleshooting of large mission critical networks. He authored Configuring Cisco Voice Over IP with Syngress Media. He lives in Pleasanton, CA with his wife Meg and two sons, James and Zachary. Elliot Lewis contributed to the technical editing. Sean Thurston (CCNA, CCDA, MCP+I, MCSE) is a Solution Architect for EngineX Networks, a San Francisco-based Voice over IP/QoS network design and implementation company. Sean has extensive network design and implementation experience in complex LAN and WAN environments. He lives in Renton, WA with his fiancée Kerry. Technical Editor Stace Cunningham (CCNA, MCSE, CLSE, COS/2E, CLSI, COS/2I, CLSA, MCPS, A+) is a Systems Engineer with SDC Consulting located in Biloxi, MS. SDC Consulting specializes in the design, engineering, and installation of networks. Stace is also certified as an IBM Certified LAN Server Engineer, IBM Certified OS/2 Engineer, IBM Certified LAN Server Administrator, IBM Certified LAN Server Instructor, IBM Certified OS/2 Instructor. Stace has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1.2 exam, Proxy Server 1.0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the revised Windows 95 exam. In addition, he has coauthored or technical edited about 30 books published by Microsoft Press, Osborne/McGraw-Hill, and Syngress Media as well as contributed to publications from The SANS Institute and Internet Security Advisor magazine. His wife Martha and daughter Marissa are very supportive of the time he spends with his computers, routers, and firewalls in the “lab” of their house. Without their love and support he would not be able to accom- plish the goals he has set for himself. Stace Cunningham authored a chapter in addition to acting as technical director for the book. 71_BCNW2K_FM 9/10/00 11:57 AM Page viii Contents ix Chapter 1—Developing a Windows 2000 and Cisco Internetwork 1 Introduction 2 Directory Enabled Network 2 The DEN Solution 4 About Microsoft’s Windows 2000 and Cisco’s IOS 8 Cisco’s IOS and Software Products 8 Cisco ConfigMaker 9 Cisco Fast Step 11 CiscoWorks 2000 13 Microsoft’s Windows 2000 14 Active Directory 17 Merging together with Cisco Networking Services for Active Directory 20 Best Practices for Implementing a Network 20 Networking Basics 22 OSI Protocol Reference Model 23 Physical Layer 26 Data-Link Layer 27 Network Layer 27 Transport Layer 28 The Session Layer 29 The Presentation Layer 29 The Application Layer 29 Internet History 30 IP Networking Primer 31 Case Studies 36 ABC Chemical Company 36 West Coast Accounting, L.L.C. 37 Summary 38 FAQs 41 Chapter 2—A Tour of Windows 2000 43 Introduction 44 What’s New Since Windows NT 4 44 Active Directory 45 Installation Options 45 Security Options 47 Internet Information Services 48 71_BCNW2K_Contents 9/12/00 3:14 PM Page ix [...]... Features of the 4003/4006 Series Hardware Features of the Catalyst 4912G Series Software Features of the 4xxx Series Features of the Catalyst 4908G-L3 Catalyst 5000 Hardware Features of the Catalyst 2900 Series Hardware Features of the Catalyst 5000/5002 Series Hardware Features of the Catalyst 5500 Series Modules for the Catalyst 5000 Software Features of the Catalyst 5xxx Series Catalyst 6000 Hardware... my grandfather, Arthur Conat, drove a carriage with horses when he was a teenager He didn’t have a TV, or a telephone, or a car, or a refrigerator, or a washing machine, or running water aside from that at a hand-pumped well By the time he was my age (mid-30s), he had entered a lifelong career at the Bell Telephone Company, which is today AT&T He lived through two world wars, and entered the military... Terminal Services Farms LAN and Switching Considerations Scaling Bandwidth Scaling Considerations IP Multicast Virtual LANs and Emulated LANs Policy in the Core Comparing Campus Network Design Models The Hub and Router Model The Campus-wide VLAN Model Multiprotocol over ATM WAN Link Considerations with Windows 2000 Routing and Scalability Planning for the Future Growth of the Company’s Infrastructure Network. .. services are provided by Windows 2000 and can be managed effectively with Cisco IOS You will learn about these throughout this book While users are pushing the limits of Internet bandwidth consumption and technology, businesses have a new problem—managing the users Not only does a business have to manage the users who work for them, but there is also an escalating challenge with managing the data that attaches... Organizations are running into a conflict between business unit managers who need new functionality for providing new e-business services and Information Technology (IT) groups who are tasked with reducing the total cost of owning the technology on the network IT groups are also faced with management applications that are proprietary and database systems that are unable to interoperate; both situations... the addition of new network services or result in increased integration costs This divided system is shown in Figure 1.1 Figure 1.1 Separate application-specific databases limit interoperability Report A Report B Report C Report D If a report needs to have data from more than one database, special integration processes must be executed, and sometimes these are not possible Database A Application A Database... past two decades and see the evolution At one time, Apple was in the lead (or it was IBM, or Novell, or Microsoft), and recently Cisco made the news as having edged out Microsoft as the leading capitalized technology giant Microsoft edged Cisco back the next day, of course, but the statement was made—there are changes in the way people invest in technology and those changes are happening today So rather... the internetworks for each At the end of the book, you will find a chapter named “Fast Track.” This chapter will encapsulate the major concepts found throughout the book If you want to get an overview of everything before you start, flip to the back and read “Fast Track” first If you read through the book and you don’t really care for a review, then the only part of “Fast Track” that will be of value is... Quick! Plan Your Project Windows 2000 Case Studies ABC Chemical Company West Coast Accounting, L.L.C Summary FAQs Chapter 3 Cisco Hardware and IOS Basics Introduction Networking Basics: The Difference between Routers and Switches Hierarchical Design Model When Is It Appropriate to Use Routers? When Is It Appropriate to Use Switches? Switching Overview and Application Cisco Switch Models Catalyst 6500... 3:14 PM Page x Contents Terminal Services Remote Access Protocols Network Load Balancing What Happened to WINS? DNS Support Recovery Console Quality of Service File System Changes and Disk Support Active Directory Architecture Domain Architecture Changes Forest Domain Tree Domain Sites Organizational Units User Accounts Groups FSMOs Global Catalog Configuration Schema LDAP So, You Want to Migrate? Quick! . Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare. family, Dan, Justine, and Taylor, and her two Great Danes (a. k .a Mobile Defense Units), Marm- aduke and Apollo and her Golden Retriever (a. k .a. Mobile Alarm