Configuration of Windows Routing and NAT

Actual target:

• Ability to configure and test routing networks in a virtual environment

You can enable the routing feature with Windows Server 2008

u can add static routes

You can view the routing table for your computer

U can configure packet filtering on the Windows router

U can configure dynamic routed rip on Windows routers

• Configure NAT

• Configure Port Mappings

Network environment:

Enterprise Environment:

From security considerations, the enterprise computer is divided into 3 segments according to the department, each network segment uses the router connection configured by Windows Server 2008, Router2 connects the research and Development Department network and marketing department network, Router1 connects the marketing department network and the sales department network, Natserver Server connects sales department and Internet, the public network IP address is 23.23.2.2,webserver is located in the Sales department network, is the enterprise's Web site.

Enterprise Requirements:

• Achieve full access to each other in three network segments of intranet

• Research department does not allow access to the Internet

• The marketing and sales department allows access to the Internet

• Allow Internet users to access webserver

• Ability to use Terminal Services management on the Internet webserver

Experimental environment:

Ürouter1, Router2, and Natserver install the Windows Server 2008 operating system with 2 network adapters.

Üwebserver installs the Windows Server 2008 operating system and installs the Web server role and enables Remote Desktop.

ÜZHANGPC is located in the Research and Development Department network, installs Vista Enterprise version operating system.

ÜWANGPC is located on the internet and installs the Vista Enterprise operating system.

5.1.1 Install and configure Routing and Remote Access on Router1

Task:

U change duplicate name local connection

• Change the IP address and subnet mask and preferred DNS

• Install the Routing and Remote Access service

• Enable and configure the Routing and Remote Access service

• Static routes added to the Sales Department network

Static routing of networks added to the Internet

• View the routing table

Steps:

1. On the Router1, click "Start" à "set" à "network connection", turn on the network connection, rename the network connection connecting the marketing department to "marketing Network", and the network connection of the research and development department is called "Research and Development Department network".

2. As pictured, the IP address of the "Research and Development Department network" is set to 172.16.3.1.

3. Set the IP address of the "marketing Network" to 172.16.2.2.

4. Open Server Manager and click "Add role".

5. Before the start of the dialog box, click "Next".

6. In the Select Server Role dialog box, select "Network Policy and Access Service" and click "Next".

7. In the presence of the network Policy and Access Service dialog box, click "Next".

8. In the Select Role Service dialog box that appears, select Routing and Remote Access service, remote Access service, and routing.

9. In the Confirmation Selection dialog box that appears, click "Install".

10. After the installation is complete, click "Close" in the Setup Results dialog box.

11. Click "Start" à "program" à "Administrative Tools" à "Routing and Remote Access" to open the Routing and Remote Access management tool.

12. Right-click Router1 and click "Configure and Enable Routing and Remote Access."

13. In the welcome use Routing and Remote Access Server Setup Wizard dialog box that appears, click Next.

14. In the configuration dialog box that appears, select "Customize" and click "Next".

15. In the Custom Configuration dialog box that appears, select LAN Routing and click Next.

16. In the Completing the Routing and Remote Access Server Setup Wizard dialog box, click "Finish", and in the Startup Service dialog box that appears, click "Start Service".

17. Under IPv4, right-click "Static route" and click "Show IP Routing table".