Table Of Content

71_FP.qx 11/20/00 3:50 PM Page 1 (1,1) BUILDING A CISCO NETWORK FOR WINDOWS 2000 FREE Monthly “Many of us are struggling with planning and running Technology Updates a Cisco and Microsoft internetwork. This book clearly explains Cisco Networking Services for Active Directory (CNS/AD). Struggle no more!” One-year Vendor Product Upgrade —Jacques M. Mueller, COO Protection Plan EngineX Networks FREE Membership to Access.Globalknowledge Melissa Craft, CCNA, MCSE, Network+, MCNE, Citrix CCA Elliot Lewis, CCNA, CCDA, MCSE, CCSE, MCP+I, MCT TECHNICAL EDITOR: Stace Cunningham, CCNA, CLSE, COS/2E, CLSI, COS/2I, CLSA 71_BCNW2K_FM 9/10/00 11:57 AM Page i s o l u t i o n s @ s y n g r e s s . c o m With over 1,500,000 copies of our MCSE, MCSD, CompTIA, and Cisco study guides in print, we have come to know many of you personally. By listening, we've learned what you like and dislike about typical computer books. The most requested item has been for a web-based service that keeps you current on the topic of the book and related technologies. In response, we have created [email protected], a service that includes the following features: (cid:2) A one-year warranty against content obsolescence that occurs as the result of vendor product upgrades. We will provide regular web updates for affected chapters. (cid:2) Monthly mailings that respond to customer FAQs and provide detailed explanations of the most difficult topics, written by content experts exclusively for [email protected]. (cid:2) Regularly updated links to sites that our editors have determined offer valuable additional information on key topics. (cid:2) Access to “Ask the Author”™ customer query forms that allow readers to post questions to be addressed by our authors and editors. Once you've purchased this book, browse to www.syngress.com/solutions. To register, you will need to have the book handy to verify your purchase. Thank you for giving us the opportunity to serve you. 71_BCNW2K_FM 9/10/00 11:57 AM Page ii 71_BCNW2K_FM 9/10/00 11:57 AM Page iii BUILDING A CISCO NETWORK FOR W I N D O W S 2 0 0 0 71_BCNW2K_FM 9/10/00 11:57 AM Page iv Syngress Publishing, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively “Makers”) of this book (“the Work”) do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other incidental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable case, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media® and Syngress® are registered trademarks of Syngress Media, Inc. “Career Advancement Through Skill Enhancement™,” “Ask the Author™,” “Ask the Author UPDATE™,” and “Mission Critical™” are trademarks of Syngress Publishing, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 9TRR52MDSE 002 XPSTEH7TC4 003 CLNBC28FV7 004 DC128N4RL6 005 Z745Q25DBR 006 PF62R2DXMB 007 DT88A5ZX44 008 XRCJ743RTG 009 6532M92L8S 010 SMYR8PS2RN PUBLISHED BY Syngress Media, Inc. 800 Hingham Street Rockland, MA 02370 Building a Cisco Network for Windows 2000 Copyright © 2000 by Syngress Media, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN: 1-928994-00-8 Copy edit by: Adrienne Rebello Proofreading by: Nancy Adams Technical edit by: Stace Cunningham Page Layout and Art by: Shannon Tozier Index by: Robert Saigh and Katharine Glennon Project Editor: Katharine Glennon Co-Publisher: Richard Kristof Distributed by Publishers Group West 71_BCNW2K_FM 9/10/00 11:57 AM Page v Acknowledgments We would like to acknowledge the following people for their kindness and support in making this book possible. Richard Kristof, Duncan Anderson, Jennifer Gould, Robert Woodruff, Kevin Murray, Dale Leatherwood, Rhonda Harmon, and Robert Sanregret of Global Knowledge, for their generous access to the IT industry’s best courses, instructors and training facilities. Ralph Troupe and the team at Callisma for their invaluable insight into the challenges of designing, deploying and supporting world-class enterprise networks. Karen Cross, Kim Wylie, Harry Kirchner, John Hays, Bill Richter, Kevin Votel, Brittin Clark, Sarah Schaffer, Ellen Lafferty and Sarah MacLachlan of Publishers Group West for sharing their incredible marketing experience and expertise. Mary Ging, Caroline Hird, and Simon Beale of Harcourt International for making certain that our vision remains worldwide in scope. Annabel Dent, Anneka Baeten, Clare MacKenzie, and Laurie Giles of Harcourt Australia for all their help. David Buckland, Wendi Wong, David Loh, Marie Chieng, Lucy Chong, Leslie Lim, Audrey Gan, and Joseph Chan of Transquest Publishers for the enthu- siasm with which they receive our books. Kwon Sung June at Acorn Publishing for his support. Ethan Atkin at Cranbury International for his help in expanding the Syngress program. Special thanks to the professionals at Osborne with whom we are proud to publish the best-selling Global Knowledge Certification Press series. v 71_BCNW2K_FM 9/10/00 11:57 AM Page vi From Global Knowledge At Global Knowledge we strive to support the multiplicity of learning styles required by our students to achieve success as technical professionals. As the world's largest IT training company, Global Knowledge is uniquely positioned to offer these books. The expertise gained each year from providing instructor-led training to hundreds of thousands of students worldwide has been captured in book form to enhance your learning experience. We hope that the quality of these books demonstrates our commitment to your lifelong learning success. Whether you choose to learn through the written word, computer based training, Web delivery, or instructor-led training, Global Knowledge is committed to providing you with the very best in each of these categories. For those of you who know Global Knowledge, or those of you who have just found us for the first time, our goal is to be your lifelong competency partner. Thank your for the opportunity to serve you. We look forward to serving your needs again in the future. Warmest regards, Duncan Anderson President and Chief Executive Officer, Global Knowledge vi 71_BCNW2K_FM 9/10/00 11:57 AM Page vii Contributors Russell Brown (CCNP, MCSE+I, A+) is an independent consultant in Minneapolis, MN. He focuses on networking and security, specializing primarily in integrating Microsoft products with Cisco Routing. He has over three years of computer consulting experience but still finds time to play the guitar in several bands around the Twin Cities. Some of the projects Russ has worked on include LAN/WAN troubleshooting for small companies, Firewall and Proxy design and implementation, designing procedures for desktop rollouts, and various routing and switching implementations. Russ lives in Minneapolis, MN and can be reached at [email protected]. His website is http://ruebarb.tripod.com. Melissa Craft (CCNA, MCSE, Network+, CNE-5, CNE-3, CNE-4, CNE- GW, MCNE, Citrix CCA) designs business computing solutions using technology to automate processes, and using business process reengi- neering techniques. Melissa has successfully designed, implemented and integrated networks ranging in size from a few nodes to over 100,000 nodes. Her consulting experience has incorporated extensive project management, needs-analysis, LAN and WAN design, deployment and operational turnover. Currently, Melissa is Director of e-Business Offering Development for MicroAge Technology Services, a global systems integrator that provides IT design, project management, and support for distributed computing systems. Melissa holds a bachelor’s degree from the University of Michigan, and is a member of the IEEE, the Society of Women Engineers and American MENSA, Ltd. Melissa currently resides in Glendale, Arizona with her family, Dan, Justine, and Taylor, and her two Great Danes (a.k.a Mobile Defense Units), Marm- aduke and Apollo and her Golden Retriever (a.k.a. Mobile Alarm Unit) Pooka. Melissa can be contacted via e-mail at [email protected]. Elliot Lewis (CCNA, CCDA, MCSE, CCSE, MCP+I, MCT) is the Director of Solution Architecture at EngineX Networks, a leading infrastructure design firm that specializes in designing and implementing industry- leading networking technologies. Specialties include Voice over technologies, High Availability Infrastructure, IP Video/Audio Conferencing, IP vii 71_BCNW2K_FM 9/10/00 11:57 AM Page viii Telephony, Wireless, and Content Networking. Elliot has over 13 years of experience in the design, implementation, and troubleshooting of large mission critical networks. He authored Configuring Cisco Voice Over IP with Syngress Media. He lives in Pleasanton, CA with his wife Meg and two sons, James and Zachary. Elliot Lewis contributed to the technical editing. Sean Thurston (CCNA, CCDA, MCP+I, MCSE) is a Solution Architect for EngineX Networks, a San Francisco-based Voice over IP/QoS network design and implementation company. Sean has extensive network design and implementation experience in complex LAN and WAN environments. He lives in Renton, WA with his fiancée Kerry. Technical Editor Stace Cunningham (CCNA, MCSE, CLSE, COS/2E, CLSI, COS/2I, CLSA, MCPS, A+) is a Systems Engineer with SDC Consulting located in Biloxi, MS. SDC Consulting specializes in the design, engineering, and installation of networks. Stace is also certified as an IBM Certified LAN Server Engineer, IBM Certified OS/2 Engineer, IBM Certified LAN Server Administrator, IBM Certified LAN Server Instructor, IBM Certified OS/2 Instructor. Stace has participated as a Technical Contributor for the IIS 3.0 exam, SMS 1.2 exam, Proxy Server 1.0 exam, Exchange Server 5.0 and 5.5 exams, Proxy Server 2.0 exam, IIS 4.0 exam, IEAK exam, and the revised Windows 95 exam. In addition, he has coauthored or technical edited about 30 books published by Microsoft Press, Osborne/McGraw-Hill, and Syngress Media as well as contributed to publications from The SANS Institute and Internet Security Advisor magazine. His wife Martha and daughter Marissa are very supportive of the time he spends with his computers, routers, and firewalls in the “lab” of their house. Without their love and support he would not be able to accom- plish the goals he has set for himself. Stace Cunningham authored a chapter in addition to acting as technical director for the book. viii 71_BCNW2K_Contents 9/12/00 3:14 PM Page ix Contents Chapter 1—Developing a Windows 2000 and Cisco Internetwork 1 Introduction 2 Directory Enabled Network 2 The DEN Solution 4 About Microsoft’s Windows 2000 and Cisco’s IOS 8 Cisco’s IOS and Software Products 8 Cisco ConfigMaker 9 Cisco Fast Step 11 CiscoWorks 2000 13 Microsoft’s Windows 2000 14 Active Directory 17 Merging together with Cisco Networking Services for Active Directory 20 Best Practices for Implementing a Network 20 Networking Basics 22 OSI Protocol Reference Model 23 Physical Layer 26 Data-Link Layer 27 Network Layer 27 Transport Layer 28 The Session Layer 29 The Presentation Layer 29 The Application Layer 29 Internet History 30 IP Networking Primer 31 Case Studies 36 ABC Chemical Company 36 West Coast Accounting, L.L.C. 37 Summary 38 FAQs 41 Chapter 2—A Tour of Windows 2000 43 Introduction 44 What’s New Since Windows NT 4 44 Active Directory 45 Installation Options 45 Security Options 47 Internet Information Services 48 ix