| ABOUT THIS BOOK | xix |
| Features of This Book | xix |
| Part 1 | xix |
| Part 2 | xx |
| Part 3 | xx |
| The CD-ROMs | xx |
| Before You Begin Part 1 | xxi |
| Prerequisites for Part 1 | xxi |
| Reference Materials | xxii |
| Conventions Used in Part 1 | xxii |
| Chapter and Appendix Overview | xxiii |
| Where to Find Specific Skill in Part 1 | xxv |
| Getting Started with Part 1 | xxviii |
| Before You Begin Part 2 | xxx |
| Exam Prerequisites | xxx |
| Reference Materials | xxxi |
| Know the Products | xxxi |
| Conventions Used in Part 2 | xxxi |
| Section and Appendix Overview for Part 2 | xxxii |
| Getting Started with Part 2 | xxxiii |
| The Microsoft Certified Professional Program | xxxv |
| Microsoft Certification Benefits | xxxv |
| Requirements for Becoming a Microsoft Certified Professional | xxxviii |
| Technical Training for Computer Professionals | xxxviii |
| Technical Support | xl |
| PART 1 SELF-PACED TRAINING FOR MICROSOFT WINDOWS 2000 NETWORK INFRASTRUCTURE ADMINISTRATION | |
| CHAPTER 1 Introducing Microsoft Windows 2000 Networking | 3 |
| About This Chapter | 3 |
| Before You Begin | 3 |
| Lesson 1: The OSI Reference Model | 4 |
| Introducing the OSI Reference Model | 4 |
| Using the OSI Model in the Real World | 15 |
| Lesson Review | 16 |
| Lesson Summary | 17 |
| Lesson 2: Installing and Binding Windows 2000 Network Components | 18 |
| Introducing the Windows 2000 Networking Components | 18 |
| Installing Windows 2000 Networking Components | 22 |
| Binding Windows 2000 Networking Components | 23 |
| Exercise 1: Installing and Binding Protocols | 24 |
| Lesson Review | 25 |
| Lesson Summary | 26 |
| CHAPTER 2 Introducing TCP/IP | 27 |
| About This Chapter | 27 |
| Before You Begin | 27 |
| Lesson 1: TCP/IP Overview | 28 |
| TCP/IP Standards | 28 |
| TCP/IP Architecture | 29 |
| TCP/IP Protocols | 31 |
| Exercise 1: Examining ARP Traffic with Network Monitor | 42 |
| Exercise 2: TCP/IP Protocols | 45 |
| Lesson Review | 45 |
| Lesson Summary | 46 |
| Lesson 2: IP Addressing and Subnetting | 47 |
| IP Address Structure | 47 |
| Subnet Masks | 49 |
| Subnetting | 52 |
| Exercise 1: Subnetting a Class B Address | 60 |
| Lesson Review | 60 |
| Lesson Summary | 62 |
| Lesson 3: Understanding TCP and UDP | 63 |
| TCP | 63 |
| UDP | 73 |
| Exercise 1: TCP Header Fields | 74 |
| Exercise 2: TCP and UDP Functions | 75 |
| Lesson Review | 75 |
| Lesson Summary | 77 |
| CHAPTER 3 Implementing TCP/IP | 79 |
| About This Chapter | 79 |
| Before You Begin | 79 |
| Lesson 1: Installing and Configuring TCP/IP | 80 |
| Configuring TCP/IP | 83 |
| Configuring Basic TCP/IP Properties | 83 |
| Configuring Advanced TCP/IP Properties | 86 |
| Exercise 1: TCP/IP Configuration Requirements | 90 |
| Lesson Review | 91 |
| Lesson Summary | 92 |
| Lesson 2: Using the Windows 2000 TCP/IP Tools | 93 |
| Ping | 93 |
| Tracert.exe | 95 |
| Pathping.exe | 97 |
| Ipconfig.exe | 99 |
| Arp.exe | 100 |
| Netstat.exe | 101 |
| Nbtstat.exe | 103 |
| Nslookup.exe | 104 |
| Telnet.exe | 105 |
| Ftp.exe | 106 |
| Exercise 1: TCP/IP Utilities | 106 |
| Lesson Review | 107 |
| Lesson Summary | 107 |
| CHAPTER 4 NetWare Networking with Windows 2000 | 109 |
| About This Chapter | 109 |
| Before You Begin | 109 |
| Lesson 1: Introducing IPX and NWLink | 110 |
| Introducing IPX | 110 |
| IPX Protocols | 111 |
| Windows 2000 and NetWare Compatibility | 118 |
| Exercise 1: IPX Properties | 119 |
| Lesson Review | 120 |
| Lesson Summary | 120 |
| Lesson 2: Using the Windows 2000 NetWare Clients | 121 |
| Installing Client Service for NetWare | 121 |
| Configuring NWLink | 124 |
| Configuring Client Service for NetWare | 126 |
| Using Gateway Service for NetWare | 127 |
| Exercise 1: Installing and Configuring NWLink | 132 |
| Lesson Review | 134 |
| Lesson Summary | 135 |
| CHAPTER 5 Implementing the Dynamic Host Configuration Protocol | 137 |
| About This Chapter | 137 |
| Before You Begin | 137 |
| Lesson 1: Introducing DHCP | 138 |
| Understanding the Origins of DHCP | 138 |
| DHCP Messaging | 141 |
| Understanding DHCP Communications | 146 |
| Exercise 1: DHCP Message Types | 150 |
| Lesson Review | 150 |
| Lesson Summary | 151 |
| Lesson 2: Using the DHCP Server | 152 |
| Implementing DHCP | 152 |
| Installing Windows 2000 DHCP Server | 153 |
| Authorizing a DHCP Server | 154 |
| Creating a Scope | 156 |
| Activating a Scope | 160 |
| Creating a Superscope | 161 |
| Configuring DHCP Options | 161 |
| Deploying DHCP Options with User Classes | 164 |
| Creating a Reservation | 167 |
| Exercise 1: Examining DHCP Traffic | 169 |
| Exercise 2: Configuring Scopes | 174 |
| Lesson Review | 174 |
| Lesson Summary | 175 |
| Lesson 3: Administering DHCP | 176 |
| Monitoring DHCP Activity | 176 |
| Controlling Conflict Detection | 179 |
| Compacting the DHCP Database | 180 |
| Using DHCP Relay Agents | 180 |
| Integrating DHCP with DNS | 182 |
| Lesson Review | 185 |
| Lesson Summary | 186 |
| Lesson 4: Troubleshooting DHCP | 187 |
| Preventing DHCP Problems | 187 |
| Troubleshooting DHCP Clients | 188 |
| Troubleshooting DHCP Servers | 190 |
| Lesson Review | 192 |
| Lesson Summary | 192 |
| CHAPTER 6 Routing IP | 193 |
| About This Chapter | 193 |
| Before You Begin | 193 |
| Lesson 1: Understanding IP Routing | 194 |
| Routing Principles | 194 |
| Routing Tables | 197 |
| Routing Hardware | 203 |
| Routing Software | 205 |
| Exercise 1: Routing Tables | 205 |
| Lesson Review | 205 |
| Lesson Summary | 206 |
| Lesson 2: Routing with RRAS | 207 |
| Configuring RRAS | 207 |
| Manually Configuring RRAS | 210 |
| Implementing Demand-Dial Routing | 210 |
| Configuring Demand-Dial Interfaces | 214 |
| Creating Static Routes | 217 |
| Exercise 1: Configuring RRAS | 221 |
| Lesson Review | 222 |
| Lesson Summary | 223 |
| Lesson 3: Using Dynamic Routing Protocols | 224 |
| Dynamic Routing Protocols | 224 |
| Understanding RIP | 226 |
| Installing RIP | 228 |
| Understanding OSPF | 231 |
| Installing OSPF | 232 |
| Exercise 1: Configuring RRAS | 233 |
| Exercise 2: Static and Dynamic Routing | 234 |
| Lesson Review | 234 |
| Lesson Summary | 236 |
| CHAPTER 7 Understanding the Domain Name System | 237 |
| About This Chapter | 237 |
| Before You Begin | 237 |
| Lesson 1: IP Host Naming and DNS | 238 |
| Using Host Tables | 238 |
| Designing the DNS | 240 |
| Introducing the Domain Name Space | 241 |
| Understanding Domain Name Servers | 247 |
| Understanding Resolvers | 249 |
| Exercise 1: Understanding DNS Terminology | 249 |
| Lesson Review | 250 |
| Lesson Summary | 250 |
| Lesson 2: Resolving Host Names with DNS | 251 |
| DNS Messaging | 251 |
| Resolving a Name | 255 |
| Name Server Caching | 257 |
| Performing Reverse Name Lookups | 258 |
| Exercise 1: Understanding DNS Communications | 260 |
| Lesson Review | 261 |
| Lesson Summary | 262 |
| Lesson 3: Planning a DNS Implementation | 263 |
| DNS Considerations | 263 |
| Exercise 1: Implementing DNS | 264 |
| Lesson Review | 270 |
| Lesson Summary | 271 |
| CHAPTER 8 Using the Windows 2000 DNS Server | 273 |
| About This Chapter | 273 |
| Before You Begin | 273 |
| Lesson 1: Installing and Configuring Windows 2000 DNS | 274 |
| Installing DNS Server | 274 |
| Implementing a Caching-Only Server | 277 |
| Exercise 1: Testing a Simple Query on a DNS Server | 278 |
| Lesson Review | 279 |
| Lesson Summary | 279 |
| Lesson 2: Working with Zones | 280 |
| Creating a Zone | 280 |
| Creating Active Directory-Integrated Zones | 285 |
| Delegating Zones | 286 |
| Configuring Dynamic Updates | 289 |
| Exercise 1: Configuring Zones | 290 |
| Lesson Review | 292 |
| Lesson Summary | 293 |
| Lesson 3: Working with Resource Records | 294 |
| Understanding Resource Record Types | 294 |
| Viewing Resource Records | 297 |
| Creating Resource Records | 298 |
| Exercise 1: Adding Resource Records | 300 |
| Lesson Review | 302 |
| Lesson Summary | 302 |
| Lesson 4: Configuring Zone Transfers | 303 |
| Zone Replication and Zone Transfers | 303 |
| Zone Transfer Security | 306 |
| DNS Notification | 307 |
| Lesson Review | 308 |
| Lesson Summary | 309 |
| Lesson 5: Monitoring and Troubleshooting DNS | 310 |
| Monitoring DNS Servers | 310 |
| DNS Troubleshooting Scenarios | 313 |
| Lesson Review | 316 |
| Lesson Summary | 316 |
| CHAPTER 9 Implementing Windows Internet Name Service | 317 |
| About This Chapter | 317 |
| Before You Begin | 317 |
| Lesson 1: Introducing NetBIOS | 318 |
| NetBIOS Naming | 318 |
| Registering and Resolving Names | 321 |
| NetBIOS Name Caching | 322 |
| Using Lmhosts | 323 |
| Using Broadcast Transmissions | 327 |
| Using NetBIOS Name Servers | 330 |
| Understanding NetBIOS Node Types | 330 |
| Exercise 1: NetBIOS Name Resolution Concepts | 333 |
| Lesson Review | 333 |
| Lesson Summary | 334 |
| Lesson 2: WINS Name Registration and Resolution | 335 |
| Understanding WINS Messaging | 335 |
| Understanding the NetBT Message Formats | 339 |
| Lesson Review | 344 |
| Lesson Summary | 344 |
| Lesson 3: Implementing WINS | 345 |
| Installing a WINS Server | 345 |
| Configuring a Windows 2000 WINS Client | 347 |
| Supporting Non-WINS Clients | 348 |
| Maintaining the WINS Database | 350 |
| Exercise 1: Installing and Configuring WINS | 352 |
| Lesson Review | 354 |
| Lesson Summary | 355 |
| Lesson 4: Configuring WINS Replication | 356 |
| Replication Overview | 356 |
| Configuring a WINS Server as a Push or Pull Partner | 356 |
| Planning How Many WINS Servers to Use | 359 |
| Initiating Database Replication | 359 |
| WINS Automatic Replication Partners | 360 |
| Configuring WINS Database Replication | 360 |
| Lesson Review | 362 |
| Lesson Summary | 362 |
| CHAPTER 10 Securing Network Protocols | 363 |
| About This Chapter | 363 |
| Before You Begin | 363 |
| Lesson 1: Using Packet Filters | 364 |
| Understanding Packet Filtering | 364 |
| Configuring Packet Filters in the TCP/IP Client | 367 |
| Configuring Packet Filters in RRAS | 371 |
| Lesson Review | 375 |
| Lesson Summary | 376 |
| Lesson 2: Using Ipsec | 377 |
| Securing IP Communications | 377 |
| IPsec Standards | 382 |
| IPsec Protocols | 382 |
| Transport Mode and Tunnel Mode | 386 |
| L2TP Tunneling | 388 |
| Exercise 1: Understanding IPsec Terminology | 388 |
| Lesson Review | 389 |
| Lesson Summary | 389 |
| Lesson 3: Deploying Ipsec | 390 |
| IPsec Components | 390 |
| Deploying Ipsec | 392 |
| Running IPsec Policy Management | 392 |
| Creating a New Policy | 393 |
| Creating Policies in Active Directory | 396 |
| Configuring IPsec Policies | 396 |
| Configuring IPsec for Tunnel Mode | 406 |
| Exercise 1: Using Ipsec | 406 |
| Lesson Review | 408 |
| Lesson Summary | 408 |
| CHAPTER 11 Using the Remote Access Service | 409 |
| About This Chapter | 409 |
| Before You Begin | 409 |
| Lesson 1: Introducing the Remote Access Service | 410 |
| Overview of Remote Access | 410 |
| Remote Access Security | 413 |
| Installing a Remote Access Server | 416 |
| Exercise 1: RAS Authentication Protocols | 420 |
| Lesson Review | 420 |
| Lesson Summary | 421 |
| Lesson 2: Configuring a Remote Access Server | 422 |
| Configuring RAS Server Properties | 422 |
| Allowing Inbound Connections | 427 |
| Using Multilink | 428 |
| Using RRAS with DHCP | 430 |
| Exercise 1: Configuring a RAS Server | 430 |
| Lesson Review | 431 |
| Lesson Summary | 432 |
| Lesson 3: Managing Remote Access Security | 433 |
| Configuring Authentication | 433 |
| Controlling User Access | 437 |
| Exercise 1: Creating a Remote Access Policy | 447 |
| Lesson Review | 448 |
| Lesson Summary | 450 |
| Lesson 4: Virtual Private Networking | 451 |
| Implementing a VPN | 451 |
| Integrating a VPN in a Routed Environment | 457 |
| Integrating VPN Servers with the Internet | 457 |
| Managing Virtual Private Networking | 458 |
| Exercise 1: Creating a VPN Connection | 459 |
| Lesson Review | 462 |
| Lesson Summary | 462 |
| CHAPTER 12 Using Network Address Translation | 463 |
| About This Chapter | 463 |
| Before You Begin | 463 |
| Lesson 1: Introducing NAT | 464 |
| Routing to the Internet | 464 |
| Understanding NAT | 465 |
| Exercise 1: Understanding NAT Communications | 470 |
| Lesson Review | 471 |
| Lesson Summary | 471 |
| Lesson 2: Installing and Configuring NAT | 472 |
| Implementing NAT | 472 |
| Installing NAT with RRAS | 472 |
| Configuring RRAS to Use NAT | 478 |
| Configuring NAT Interface Properties | 482 |
| Configuring NAT Properties | 486 |
| Exercise 1: Configuring a NAT Installation | 489 |
| Lesson Review | 490 |
| Lesson Summary | 491 |
| Lesson 3: Installing Internet Connection Sharing | 492 |
| Differentiating ICS and NAT | 492 |
| Installing ICS | 493 |
| Configuring ICS | 494 |
| Lesson Review | 497 |
| Lesson Summary | 498 |
| CHAPTER 13 Implementing Certificate Services | 499 |
| About This Chapter | 499 |
| Before You Begin | 499 |
| Lesson 1: Introducing Certificates | 500 |
| Understanding Encryption Keys | 500 |
| Understanding Certificates | 502 |
| Exercise 1: Understanding Certificates and Encryption | 507 |
| Lesson Review | 507 |
| Lesson Summary | 508 |
| Lesson 2: Installing and Configuring Microsoft Certificate Services | 509 |
| Preparing to Install MCS | 509 |
| Protecting a CA | 510 |
| Installing Certificate Services | 510 |
| Configuring a CA | 514 |
| Backing Up and Restoring a CA | 519 |
| Exercise 1: Installing a Stand-Alone CA | 522 |
| Lesson Review | 523 |
| Lesson Summary | 524 |
| Lesson 3: Managing Certificates | 525 |
| Certificate Enrollment | 525 |
| Creating the Certificates Console | 527 |
| Using the Certificates Console | 529 |
| Revoking Certificates | 534 |
| Removing EFS Recovery Keys | 535 |
| Exercise 1: Requesting a Certificate Using the CA Web Interface | 536 |
| Lesson Review | 537 |
| Lesson Summary | 538 |
| CHAPTER 14 Monitoring Network Activity | 539 |
| About This Chapter | 539 |
| Before You Begin | 539 |
| Lesson 1: Monitoring Windows 2000 Activity | 540 |
| Using Event Viewer | 540 |
| Using the Performance Console | 544 |
| Using the Shared Folders Snap-in | 552 |
| Exercise 1: Monitoring System Performance Parameters | 559 |
| Lesson Review | 560 |
| Lesson Summary | 560 |
| Lesson 2: Monitoring Network Services | 561 |
| Monitoring DHCP Activity | 561 |
| Monitoring WINS Activity | 565 |
| Monitoring DNS Activity | 567 |
| Monitoring RRAS Activity | 568 |
| Monitoring IPsec Activity | 572 |
| Lesson Review | 573 |
| Lesson Summary | 573 |
| Lesson 3: Using Network Monitor | 574 |
| Overview of Network Monitor | 574 |
| Capturing Frame Data | 576 |
| Using Capture Filters | 577 |
| Displaying Captured Data | 579 |
| Using Display Filters | 580 |
| Network Monitor Performance Issues | 581 |
| Exercise 1: Capturing Frames with Network Monitor | 582 |
| Lesson Review | 582 |
| Lesson Summary | 583 |
| PART 2 PREPARATION FOR EXAM 70-216: IMPLEMENTING AND ADMINISTERING A MICROSOFT WINDOWS 2000 INFRASTRUCTURE | |
| OBJECTIVE DOMAIN 1: Installing, Configuring, Managing, Monitoring, and Troubleshooting DNS in a Windows 2000 Network Infrastructure | 587 |
| Tested Skills and Suggested Practices | 588 |
| Further Reading | 589 |
| Objective 1.1: Install, configure, and troubleshoot DNS. | 591 |
| Questions | 592 |
| Answers | 594 |
| Objective 1.2: Manage and monitor DNS. | 597 |
| Questions | 598 |
| Answers | 601 |
| OBJECTIVE DOMAIN 2: Installing, Configuring, Managing, Monitoring, and Troubleshooting DHCP in a Windows 2000 Network Infrastructure | 605 |
| Tested Skills and Suggested Practices | 606 |
| Further Reading | 606 |
| Objective 2.1: Install, configure, and troubleshoot DHCP. | 609 |
| Questions | 610 |
| Answers | 611 |
| Objective 2.2: Manage and monitor DHCP. | 613 |
| Questions | 614 |
| Answers | 616 |
| OBJECTIVE DOMAIN 3: Configuring, Managing, Monitoring, and Troubleshooting Remote Access in a Windows 2000 Network Infrastructure | 619 |
| Tested Skills and Suggested Practices | 620 |
| Further Reading | 621 |
| Objective 3.1: Configure and troubleshoot remote access. | 623 |
| Questions | 624 |
| Answers | 628 |
| Objective 3.2: Manage and monitor remote access. | 631 |
| Questions | 632 |
| Answers | 635 |
| Objective 3.3: Configure remote access security. | 637 |
| Questions | 638 |
| Answers | 641 |
| OBJECTIVE DOMAIN 4: Installing, Configuring, Managing, Monitoring, and Troubleshooting Network Protocols in a Windows 2000 Network Infrastructure | 645 |
| Tested Skills and Suggested Practices | 646 |
| Further Reading | 646 |
| Objective 4.1: Install, configure, and troubleshoot network protocols. | 649 |
| Questions | 650 |
| Answers | 656 |
| Objective 4.2: Configure TCP/IP packet filters. | 659 |
| Questions | 660 |
| Answers | 665 |
| Objective 4.3: Configure and troubleshoot network protocol security. | 669 |
| Questions | 670 |
| Answers | 674 |
| Objective 4.4: Manage and monitor network traffic. | 677 |
| Questions | 678 |
| Answers | 679 |
| Objective 4.5: Configure and troubleshoot IPSec. | 681 |
| Questions | 682 |
| Answers | 686 |
| OBJECTIVE DOMAIN 5: Installing, Configuring, Managing, Monitoring, and Troubleshooting WINS in a Windows 2000 Network Infrastructure | 691 |
| Tested Skills and Suggested Practices | 692 |
| Further Reading | 692 |
| Objective 5.1: Install, configure, and troubleshoot WINS. | 695 |
| Questions | 696 |
| Answers | 698 |
| Objective 5.2: Configure WINS replication. | 701 |
| Questions | 702 |
| Answers | 707 |
| Objective 5.3: Configure NetBIOS name resolution. | 711 |
| Questions | 712 |
| Answers | 714 |
| Objective 5.4: Manage and monitor WINS. | 717 |
| Questions | 718 |
| Answers | 721 |
| OBJECTIVE DOMAIN 6: Installing, Configuring, Managing, Monitoring, and Troubleshooting IP Routing in a Windows 2000 Network Infrastructure | 725 |
| Tested Skills and Suggested Practices | 726 |
| Further Reading | 726 |
| Objective 6.1: Install, configure, and troubleshoot IP routing protocols. | 729 |
| Questions | 730 |
| Answers | 732 |
| Objective 6.2: Manage and monitor IP routing. | 735 |
| Questions | 736 |
| Answers | 738 |
| OBJECTIVE DOMAIN 7: Installing, Configuring, and Troubleshooting Network Address Translation (NAT) | 741 |
| Tested Skills and Suggested Practices | 741 |
| Further Reading | 742 |
| Objective 7.1: Install Internet Connection Sharing. | 745 |
| Questions | 746 |
| Answers | 747 |
| Objective 7.2: Install NAT. | 751 |
| Questions | 753 |
| Answers | 755 |
| Objective 7.3: Configure NAT properties. | 759 |
| Questions | 761 |
| Answers | 764 |
| Objective 7.4: Configure NAT interfaces. | 767 |
| Questions | 768 |
| Answers | 770 |
| OBJECTIVE DOMAIN 8: Installing, Configuring, Managing, Monitoring, and Troubleshooting Certificate Services | 773 |
| Tested Skills and Suggested Practices | 774 |
| Further Reading | 774 |
| Objective 8.1: Install and configure Certificate Authority (CA). | 777 |
| Questions | 778 |
| Answers | 782 |
| Objective 8.2: Issue and revoke certificates. | 785 |
| Questions | 786 |
| Answers | 789 |
| Objective 8.3: Remove the Encrypting File System (EFS) recovery keys. | 793 |
| Questions | 794 |
| Answers | 795 |
| PART 3 APPENDIXES | |
| APPENDIX A Questions and Answers | 801 |
| APPENDIX B Procedures for the Tested Skills and Suggested Practices | 863 |
| GLOSSARY | 877 |
| INDEX | 917 |
