Checklist Summary:

The purpose of this guide is to provide technical guidance to network administrators of small to medium size networks in the configuration and integration of Microsoft Windows 2000 Server Router features. This guide also informs the reader about additional security features that are available in the Microsoft Windows 2000 Server Router environment. This guide is not intended to provide individual security settings for the network devices. Instead, it is designed to provide the reader an idea of what functionality is recommended in the integration of the Windows 2000 router within a TCP/IP network. The Microsoft Windows 2000 Router Configuration Guide presents a general overview of the routing features, recommended routing protocol, and filtering services. This overview is designed to show the recommended functionality in various locations within a network. The author intends for this guide to be used to help the planning phase of a small to medium sized network with typically less than 50 LAN segments. This guide should not be used on its own as an all-encompassing blueprint for router configuration.

Checklist Role:

• Enterprise Router

Known Issues:

Do not attempt to implement any of the settings in this guide without first testing in a non-operational environment. This document is only a guide containing recommended security settings. It is not meant to replace well-structured policy or sound judgment. Furthermore, this guide does not address site-specific configuration issues. Care must be taken when implementing this guide to address local operational and policy concerns. The security changes described in this document only apply to Microsoft Windows 2000 Server systems and should not be applied to any other Windows versions or operating systems.

Target Audience:

This document is intended for Microsoft Windows 2000 network administrators and network designers. However, it should be useful for anyone involved with designing a routable network that includes Microsoft Windows 2000 hosts and/or servers.

Target Operational Environment:

• Managed

Testing Information:

The security configuration guide has been extensively tested in a lab and operational environment.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Perform a complete backup of your system before implementing any of the recommendations in this guide.

Disclaimer:

Do not attempt to implement any of the settings in this guide without first testing them in a non-operational environment. Security configuration guides are provided for the Department of Defense and other government agencies requiring security configuration guidelines. The guides contain recommended security settings. They are not intended to replace well-structured policy or sound judgment. The guides do not address site-specific configuration issues. Care must be taken when implementing the guides to address local operational and policy concerns. All security changes described in the guides are applicable only to specifically identified operating systems or architecture components and should not be applied to any other operating system or architecture components.

Product Support:

Not provided.

Point of Contact:

SNAC.Guides@nsa.gov

Sponsor:

Not provided.

Licensing:

Refer to the legal statement provided found in the download package. http://www.nsa.gov/notices/notic00004.cfm? Address=/snac/os/win2k/w2k_router.pdf

Change History:

v1.0, 2001-08-13
Updated status to Archive - 10/24/18

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 10/24/2018