This course is for support professionals new to Windows 2000 who will be responsible for installing, configuring and supporting a network infrastructure that uses the Microsoft Windows 2000 Server. This course provides delegates with the information and skills needed to create and administer a networking services infrastructure design that supports the required network applications.

The course prepares candidates for Microsoft examinations 70-216 and 70-221.

This course covers the subject areas covered in Microsoft Course MS2153 / 1562.

Delegates should have successful completed the PTR Windows 2000 Operating System & Networking Essentials and Windows 2000 Professional and Server Support courses or have an equivalent knowledge level prior to attending this course.

Topics covered on the 5 day Windows 2000 Network Infrastruct. Design, Implementation & Admin. course

Windows 2000 Network Services Overview

• Essential Network Services
• Internet Connectivity Support
• Routing and Remote Access Support
• Transmission Control Protocol/Internet Protocol (TCP/IP)
• Dynamic Host Configuration Protocol (DHCP)
• Domain Name System (DNS)
• Windows Internet Naming Service (WINS)
• WINS Operation
• WINS Fault Tolerance
• Network Address Translation (NAT)
• Proxy Server
• Routing and Remote Access
• Remote User Connectivity
• Virtual Private Networks
• RADIUS
• Internet Information Services
• Routing
• Securing and Enhancing Network Services
• IPSec
• Clustering
• Quality of Service (QoS)
• VPN
• Demand-Dial
• Connection Manager

Overview of Network Services Design

• Network Services Design - Introduction
  
• Strategy for Windows 2000 Network Service Implementation
  
• Current Network Implementation
• Current Network Infrastructure - Documentation
• Analysis of Documented Data

TCP/IP

• Introduction to TCP/IP Networks
• Benefits of Using TCP/IP
• TCP/IP for Windows 2000
• Design Considerations
• TCP/IP for Windows 2000 Features
• Network Design Requirements
• IP Addressing
• IP Network and Host Addressing
• Classes of IP Address
• Subnet Masks
• Determining the Destination of a Packet
• Subnet Masks - continued
• Subnetting
• Supernetting
• IP Addressing for a Network
• Subnet Requirements
• IP Configuration Methods
• TCP/IP and Security
• Protecting IP Traffic
• Internet Protocol Security (IPSec)
• Increasing the Availability of TCP/IP Networks
• Optimising TCP/IP Network Performance
• Optimisation of Subnet Designs
• Optimising IP Performance
• Optimising Remote Subnets
• Optimising Performance With QoS
• QoS Connections

DHCP

• DHCP Operation
• Installing DHCP Server
• Creating a DHCP Scope
• Configuring DHCP Clients
• Creating Superscopes
• Creating Multicast Groups
• DHCP Integration
• Configuring Option Classes
• Monitoring and Troubleshooting DHCP Server
• DHCP Design
• DHCP Design in a Non-Routed Network
• DHCP Design in a Routed Network
• Support for Non-DHCP or Non-Microsoft Clients
• Securing the DHCP Service
• Enhancing DHCP for Availability
• Optimising DHCP Performance

DNS

• Overview
• DNS Namespace
• Zones of Authority
• Name Resolution
• Microsoft Windows 2000 DNS Features
• Integrating DNS with Other Services
• Installing the DNS Server Service
• Configuring DNS Clients
• DNS Design Decisions
• Designing a Functional DNS Design Solution
• DNS Server Zone Types
• Configuring DNS zones
• DNS Server Placement
• Reverse Lookup Zone Design
• DNS Subdomains
• DNS and Intranets
• Connecting DNS to the Internet
• Using Berkeley Internet Name Domain (BIND) DNS Servers
• Integrating DNS and WINS
• DNS Dynamic Update Protocol
• Configuring Dynamic Updates
• Configuring Zones
• Integrating DNS Namespaces
• Securing DNS
• Securing Dynamically Updated DNS Zones
• Securing DNS Zone Replication
• Enhancing a DNS Design for Availability
• Using Replicated Zones
• Using Server Clusters
• Optimising DNS Designs for Performance
• Reducing Query Resolution Time
• Reducing The Impact of Replication On Network Traffic

WINS

• Installing the WINS Server Service
• Integrating WINS with DNS
• Configuring NetBIOS Name Resolution
• Support for Non-WINS Clients
• WINS Replication
• How Replication Works
• Configuring Replication
• WINS Database Maintenance
• Designing a Functional WINS Solution
• Designing WINS for a LAN
• Designing for a Routed Network
• WINS Clients
• Non-WINS Clients
• Multiple WINS Servers
• Securing a WINS Configuration
• WINS Availability
• Optimising WINS

Network Security

• Public Key Infrastructure - Concepts
• Public Key Encryption
• Public Key Authentication
• Certification Authority
• Windows 2000 Support for Public Key Infrastructure
• Installation and Management of Certificate Services
• Certificate Authority Models
• Installing Certificate Services
• Subordinate Certificate Authorities
• Requesting a Certificate from an Enterprise CA
• Requesting a Certificate from a Stand-Alone CA
• Viewing Certificates
• Managing Certificates
• Issuing Certificates
• Revoking Certificates
• Configure Active Directory for Certificates
• Common Network Security Problems
• Internet Protocol Security (IPSec)
• IPSec Data Exchange Process
• Data Exchange Process
• Implementing IPSec
• IPSec Protection Levels
• Optimising IPSec Performance
• Configuring TCP/IP for Server Security
• Troubleshooting Network Security

Remote Access

• Configuring Remote Access
• Remote Access and DHCP
• Virtual Private Networks
• Properties of a VPN
• Tunnelling Protocols
• Remote Access Policies
• Components of Remote Access Policies
• How Remote Access Policies are Applied
• The Default Remote Access Policy
• Creating a Remote Access Policy
• Configuring the Dial-in Profile
• Troubleshooting Remote Access
• Remote Access Design
• Integrating Remote Access into a LAN
• Integrating Remote Access in a Routed Network
• Integrating VPN in a Routed Environment
• VPN and Internet Integration
• Location of the Remote Access Server in a Private Network
• Securing Remote Access
• Remote Access Availability
• Optimising Remote Access Performance

RADIUS

• RADIUS Overview
• Windows 2000 IAS
• Configuring Radius Clients
• Designing RADIUS as a Remote Access Solution
• Location of RADIUS Clients and RADIUS Servers
• Remote Access Connections
• Remote Access Protocols
• RADIUS Connection Attributes
• Securing RADIUS
• RADIUS Availability
• Optimising RADIUS Performance

Routing

• Understanding Routing
• Routing Tables
• Configuring Network Connections
• Enabling Routing and Remote Access
• Adding a Static Route
• Configuring a Routing Interface
• IP Packet Filtering
• Demand-Dial Routing
• Configuring a One-Way Initiated Connection
• Configuring a Two-Way Initiated Connection
• Routing Protocols
• Adding and Configuring RIP for IP
• Additional RIP Configuration
• Designing a Routing Solution
• Router Placement
• Router Integration with the Existing Network
• Static Routing
• Including RIP for IP
• Including OSPF for IP
• Including IGMP
• Including DHCP Relay Agent
• Securing IP Routing
• Using IP Packet Filters to Restrict Traffic
• Protecting Data Using Tunnels
• Router Authentication
• Integrating Routers into Screened Subnets
• Routing Availability and Performance

Network Address Translation

• Overview
• Design Decisions for A NAT Solution
• Features of NAT<
• The NAT Translation Process
• Designing a Functional NAT Solution
• Integrating the NAT Server into the Existing Network
• Selecting NAT Server Options
• Securing a NAT Solution
• Restricting Internet Traffic by Using IP Filters
• Increasing NAT Security by Using VPN
• Increasing the Availability and Performance of a NAT Design

Proxy Server

• Overview
• Design Decisions for Proxy Server
• Proxy Server Features
• Integration of Proxy Server with Other Network Services
• Designing a Functional Proxy Server Solution
• Proxy Server Placement
• Integrating Proxy Server Into the Existing Network
• Determining Proxy Server Client Requirements
• Securing Proxy Server
• Restricting Access to Internet Resources
• Determining the Number of Screened Subnets
• Restricting Traffic with Packet Filters
• Restricting Outbound Traffic with Domain Filters
• Restricting In-bound Traffic with Web Publishing
• Enhancing a Proxy Server Design for Availability
• Enhancing Availability for Outbound Client Requests
• Enhancing the Availability for Inbound Client Requests
• Optimising a Proxy Server design for Performance
• Selecting the Proxy Server Cache Method
• Improving Performance - Using Multiple Proxy Servers in a Hierarchy
• Distributing IP Traffic Across Multiple Proxy Servers

Web Server (IIS)

• Overview of Internet Information Server
• IIS Installation
• Web Site Configuration
• Configuring Web Site Identification
• Methods of Authentication
• Configuring Authentication
• Default Documents
• Administering IIS
• Monitoring Web Server Performance
• Troubleshooting IIS
• Common IIS Problems

Managing and Troubleshooting a Windows 2000 Network Infrastructure

• Network Administration and Troubleshooting
• Terminal Services
• Installing Terminal Services
• Simple Network Management Protocol
• Management Information Base
• MIB Name Space
• SNMP Communities
• Installing SNMP
• Troubleshooting TCP/IP
• Using ARP
• Troubleshooting IP Routing
• Troubleshooting Host Name Resolution
• Troubleshooting NetBIOS Name Resolution
• Troubleshooting Network Services
• Monitoring the Network
• Using Network Monitor
• The Windows 2000 Performance Console
• Event Viewer
• Other Windows 2000 Monitoring Tools

Connectivity

• Overview of NetWare Connectivity
• Client Services for NetWare
• Gateway Services for NetWare
• Installing the Gateway Service for NetWare
• Configuring Gateway Services for NetWare
• Services for NetWare
• Interoperating with Macintosh Systems
• AppleTalk Network Integration Services
• Installing File Services for Macintosh
• Configuring File Services for Macintosh
• Installing Print Services for Macintosh
• Configuring Print Services for Macintosh
• Features of Systems Network Architecture (SNA)
• Hierarchical SNA
• Peer-to-Peer SNA
• Host Integration Server 2000
• Interoperating with UNIX Systems

Combining Network Services

• Installing Multiple Network Services
• Configuring Multiple Network Service Problems
• Ensuring Security with Multiple Network Services
• Signed Drivers, Services and Applications
• Using Windows 2000 Clusters
• Cluster Hardware and Connectivity
• Cluster Software Configuration
• Installing Network Services on a Cluster
• Optimising the Network

Appendix A - Test Practice
Appendix B - Glossary of Terms
Appendix C - Review Answers
Appendix D - Answers to Design Practicals
Appendix E - Answers to Test Practice
Appendix F - Acknowledgements

   (excl.VAT)