Article ID: 323955
Article Last Modified on 10/30/2006
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional Edition
- Microsoft Small Business Server 2000 Standard Edition
This article was previously published under Q323955
IN THIS TASK
SUMMARY
This article describes the different configurable parameters that are available for setting network parameters, including the setting of multiple IP addresses for a single interface and the setting of security and TCP/IP filtering, all in relation to a UNIX configuration.
back to the top
Setting Basic TCP/IP Parameters
Windows sets the TCP/IP settings for individual interfaces by selecting the interface and configuring its properties. This is analogous to setting parameters through the Ifconfig utility under UNIX, or by setting the corresponding values in /etc/hosts, /etc/netmask, and /etc/defaultgateway.
To set the TCP/IP parameters:
- Log on to the Server for NIS computer by using an administrative-level account.
- Right-click My Network Places, and then click Properties.
- Right-click the interface that you want to configure, and then click Properties.
- The driver and protocols support on this interface are displayed. Click Internet Protocol (TCP/IP), and then click Properties.
- Type the IP address of the computer, which should be unique to this computer on your network; this IP address will be the primary IP address that is used to connect to the computer on this interface.
- Type the subnet mask to use for the IP address on this interface.
- Type the IP address of the default gateway for this interface.
- Type the IP addresses for the DNS servers to use on this interface.
- Click OK to accept these TCP/IP settings.
- Click OK to accept the properties for the interface.
The new settings that you have configured are available immediately.
back to the top
Configuring Additional IP Addresses
It is common under UNIX to configure additional IP addresses for a given physical interface card to allow for IP-based virtual Web servers. These are typically configured under UNIX through the ifconfig command.
To configure additional IP addresses for a given interface:
- Log on to the Web server computer by using an administrative-level account.
- Right-click My Network Places, and then click Properties.
- Right-click the interface that you want to configure, and then click Properties.
- The driver and protocols support on this interface are displayed. Click Internet Protocol (TCP/IP), and then click Properties.
- Click Advanced to open the Advanced Properties window.
- Click IP Settings.
- Click Add under IP addresses, and then type the additional IP address and subnet mask.
- Continue to add as many IP addresses as you need.
- Click OK to accept the advanced TCP/IP settings.
- Click OK to accept these TCP/IP settings.
- Click OK to accept the properties for the interface.
The new settings that you have configured are available immediately.
back to the top
Configuring IP Security
To enable secure TCP/IP communication over a network interface, you must enable IP security in the interface properties.
To configure IP security:
- Log on to the Web server computer by using an administrative-level account.
- Right-click My Network Places, and then click Properties.
- Right-click the interface that you want to configure, and then click Properties.
- The driver and protocols support on this interface are displayed. Click Internet Protocol (TCP/IP), and then click Properties.
- Click Advanced to open the Advanced Properties window.
- Click Options.
- Click IP security, and then click Properties.
- To disable IP security, click Do Not Use IPSEC.
- To enable client-initiated security, click Client (Respond Only).
- To enable secure communications, but not enforce it for clients that do not respond to the secure request, click Server (Request Security).
- To enable secure communications where all communication must be secure and unsecure communication is not allowed, click Secure Server (Require Security).
- Click OK to accept the IP security settings.
- Click OK to accept the advanced TCP/IP settings.
- Click OK to accept the TCP/IP settings.
- Click OK to accept the properties for the interface.
Configuring TCP/IP Filtering
You may want to limit which TCP, UDP, and IP protocols are accepted. Under UNIX, this information is configured either through the inetd or xinetd daemon, through a secondary wrapper such as tcpwrapper or through a firewall or IP protocol filter.
To configure these parameters under Windows:
- Log on to the Web server computer by using an administrative-level account.
- Right-click My Network Places, and then click Properties.
- Right-click the interface that you want to configure, and then click Properties.
- The driver and protocols support on this interface are displayed. Click Internet Protocol (TCP/IP), and then click Properties.
- Click Advanced to open the Advanced Properties window.
- Click Options.
- Click TCP/IP filtering, and then click Properties.
- Click Enable TCP/IP Filtering.
- Under TCP or UDP or IP Protocols, click Permit All to enable any protocol or Permit Only to accept only those protocols that are listed.
- To add a protocol to the accepted list, click Add under the appropriate heading. Type the protocol number, and then click OK.
- Click OK to accept the TCP/IP filtering settings.
- Click OK to accept the advanced TCP/IP settings.
- Click OK to accept the TCP/IP settings.
- Click OK to accept the properties for the interface.
REFERENCES
For additional information about how to prepare a server, or multiple servers, for a UNIX-to-Windows Migration, click the article number below to view the article in the Microsoft Knowledge Base:
323970 HOW TO: Prepare the Target Server for a UNIX-to-Windows Migration
Keywords: kbhowto kbhowtomaster KB323955
