Connecting Your Network to the Internet.docx

1、Connecting Your Network to the InternetOperating SystemConnecting Your Network to the InternetDeployment ScenarioAbstractIn todays business, being connected to the marketplace and to your customers means getting connected to the Internet. Windows 2000 makes it easier to securely connect your network

2、 to the Internet, enabling your employees to access the information they need. This guide outlines the steps to provide secure shared Internet access to Microsoft Windows 2000-based clients that are directly attached to a medium-sized private network. 2000 Microsoft Corporation. All rights reserved.

3、The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft

4、 cannot guarantee the accuracy of any information presented after the date of publication.This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT.Complying with all applicable copyright laws is the responsibility of the user. Without l

5、imiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of M

6、icrosoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give y

7、ou any license to these patents, trademarks, copyrights, or other intellectual property.Microsoft, Active Directory, Windows, Windows NT and the Windows logo are registered trademarks of Microsoft Corporation.Other product or company names mentioned herein may be the trademarks of their respective o

8、wners.Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA0200ContentsIntroduction 1Scenario Requirements 2Scenario Tasks 2Internet COnnection Setup Tasks 3Overview 3Establishing an Internet account with an ISP 3Configuring Windows 2000 Server for Internet Access 4Assigning IP addresse

9、s 4To Enable Routing 6Creating a Dedicated Internet Connection 7Creating a Demand-Dial Internet Connection 7Demand Dial Internet configuration 10Updating the local DNS server for Internet naming resolution 12Conclusion 15Summary 16For More Information 17Windows 2000 Web Site Resources 17Introduction

10、In todays business, being connected to the marketplace and to your customers means getting connected to the Internet. Microsoft Windows 2000 makes it easier to securely connect your network to the Internet, enabling your employees to access the information they need. Connecting a medium-sized office

11、 network to the Internet has traditionally been a difficult process requiring separate machines and extensive knowledge of network devices. For many, making a connection to the Internet seemed costly and difficult to manage. With Windows 2000 Server, making a connection to the Internet is easy, secu

12、re, and can be accomplished with relatively inexpensive hardware and basic Internet service provider (ISP) services. This guide is intended for users of medium-sized Windows 2000 domain-based networks who want to set up Internet access and share it with local area network clients. It assumes a basic

13、 understanding of domain-based networks, Domain Naming Services (DNS), and Dynamic Host Configuration Protocol (DHCP). This guide is not intended as a comprehensive review of all routing features of Windows 2000, rather, it is a focused guide of the basic Internet gateway capabilities. Scenario Requ

14、irementsThis document will walk you through setting up a Windows 2000-based server as an Internet connection server that shares access with a local area network. This guide builds on the network configuration in the “Upgrading a Windows NT Domain to Windows 2000 Active Directory” deployment scenario

15、 guide. (It shows how to configure a single domain-based Windows 2000 network with DNS and DHCP services enabled.) To connect to the Internet, this guide assumes you have an active account with an ISP and a physical connection to the Internet. This could be a dial-up connection, like an analog modem

16、 or ISDN, or a dedicated connection like a cable modem or Digital Subscriber Line (DSL).To configure the server for Internet access sharing, you will need to install the Routing and Remote Access Services (RRAS) that is included with the Optional Windows 2000 components package. To install this comp

17、onent on your Windows 2000 Server, click Start, point to Programs, point to Administrative Tools, click Configure your server, click Networking and click Routing. Follow the instructions on this page to install the RRAS. You must have network administrator rights to configure this setup.Scenario Tas

18、ksIn this guide you perform the following tasks:Setup and Management Tasks Network setup and configuration using the Internet Connection services. Includes an overview of common ISP authentication issues incurred when using the wizard. Configuration and setup of Routing and Remote Access Service edg

19、e of network gatewayInternet COnnection Setup TasksOverview Routing and Remote Access Service (RRAS), integrated in Windows 2000 Server, provides a variety of capabilities such as connecting remote users, connecting office networks, and connecting networks to the Internet. This guide shows you how t

20、o configure your Windows 2000 Server to provide a basic outbound connection to the Internet that can be shared with other computers on your internal network. To set up your network for Internet access, you need to:1. Establish an Internet account with an ISP. 2. Configure Windows 2000 Server for Int

21、ernet access.3. Update your local DNS server for Internet naming resolution.Establishing an Internet account with an ISP You must establish an account with an Internet service provider (ISP) to access the Internet. An ISP provides the following information to configure your server and network enviro

22、nment: Account username and password. Used for authentication purposes. Assigned IP Address. This is your public IP address associated with your account. This can be statically or dynamically assigned. ISP DNS Server Address. Used to forward DNS requests for Internet names to the ISPs DNS server. Mo

23、dem Access Number. The ISPs access number if you are connecting through demand dial. Note: If you plan to host a Web server or a remote access server, you need to request a static IP address or have an ISP that supports Dynamic DNS. Outbound Internet traffic will work with a dynamically assigned IP

24、address but external computers will not be able to connect to your network over the Internet.Before you set up Internet sharing, check with your ISP about any licensing limitations on shared access through a single ISP connection. Configuring Windows 2000 Server for Internet AccessSelect a computer

25、on your network domain that will perform as the Internet connection server. This computer requires Windows 2000 Server with Routing and Remote Access Services (RRAS) installed and two network connections: one to the internal network and one that will connect to the Internet. The internal connection

26、should be a Network Interface Card (NIC) while the external connection can either be a NIC or a modem, depending on the type of connection required. Assigning IP addresses If your server is already connected to the network, the Internal NIC should already have an IP address that was dynamically assi

27、gned by the local DHCP server. Because this server will be used as the Internet Connection Server, you will need to assign a static IP address to the Internal NIC. This static IP address should be selected from the DHCP Excluded Address Range defined in the DHCP New Scope Wizard, explained in “Upgra

28、ding a Windows NT Domain to Windows 2000 Active Directory” deployment guideTo communicate the servers new role as an Internet gateway to all clients on the network, you will also need to add this static IP address to the Router (Default Gateway) list in the New Scope Wizard. For this guide, we assum

29、e that the Internal NIC is assigned a reserved static IP Address of 10.10.1.90. We also assume that the ISP assigned a static public IP address of 169.254.0.20 to your company. The public IP address should be assigned to the external Internet connection. To assign IP addresses to NICs, 4. Select Sta

30、rt, point to Settings, point to Network and Dial Up Connections, right click the name of the network interface (Internal Connection) and select Properties. 5. In the General tab, select TCP/IP and click Properties. Click Use the following IP address and type in the assigned IP address. Click OK to a

31、ccept the changes.6. Repeat these steps for the External Internet Connection NIC but assign the static IP address provided by your ISP.Note: When you have two NICs installed on the Server, you can identify the Internal and External NICs. Unplug the network connection cables from both NICs. Take the

32、cable that is connected to your LAN and plug it back into a NIC. Right click My Network Places and click Properties. The icon that is illuminated is your active Internal Connections NIC. You can rename this NIC by right clicking and selecting Rename. RRAS can be configured to provide the following networking services: Internet Connection Server provides secure access to the Internet for all client computers on the local area network. Remote Access Server allows computers to remotely connect to the private