Installation Overview
What You Need to Know About the LAT
Setting the Web Proxy Listen-On Port
Installing Microsoft Proxy Server
Reviewing the Server Setup Log
Reinstalling Microsoft Proxy Server
Removing Microsoft Proxy Server
Installing Only the Administration Tool
Installing and Accessing the Documentation
Searching the Documentation
Installation OverviewWhen you install Microsoft Proxy Server:
Before installing Microsoft Proxy Server, be sure to read “Preinstallation Requirements.” It contains important information about installation.
For information about upgrading from a preliminary release of Microsoft Proxy Server, see the Readme.txt file provided on the Microsoft Proxy Server compact disc.
What You Need to Know About the LATDuring Microsoft Proxy Server installation you are asked to complete the Local Address Table Configuration dialog box. The information you provide is used to create a Local Address Table (LAT). This section describes the LAT, tells you what the LAT does, and shows you how the LAT is defined.
What
is the LAT?
What
is a Local LAT?
How
is the LAT Defined?
LAT
Configuration Considerations
What is the LAT?During Microsoft Proxy Server installation, the Setup program helps you create a list of the IP addresses that constitute your private network. The information you provide is used to create a table, called the Local Address Table (LAT), that defines your private network. IP addresses that are external to your private network are specifically excluded from this table.
The Setup program installs the LAT on the server. The file containing the LAT is named Msplat.txt and on the server its default location is C:\Msp\Clients (if you install Microsoft Proxy Server in a different location on the server, the Msplat.txt file is relocated accordingly). The Microsoft Proxy Server Setup program also installs a client Setup program into this directory.
The Microsoft Proxy Server Setup program configures the \Clients subdirectory on the server to be a network share named Mspclnt. Clients can connect to this share by connecting to \\Servername\Mspclnt and then running the client Setup program. The client Setup program configures the client computer as a client of the WinSock Proxy service, and also attempts to configure the client computer’s Internet browser as a client of the Web Proxy service. (The exact client configuration that client Setup implements depends on configuration choices you make during Microsoft Proxy Server Setup.)
During client Setup, the LAT file (Msplat.txt) is copied to the client. In order to keep client LAT files current, the Msplat.txt file is regularly updated from the server. Each time a Windows Sockets application on that client attempts to establish a connection to an IP address, the LAT is used to determine whether the IP address is on the private network, or is external. If the address is internal, the connection is made directly. If the address is external, the connection is made remotely, through the WinSock Proxy service on Microsoft Proxy Server.
Note that this is only a basic overview of the LAT. For more information, see Appendix D, “Architecture.”
What is a Local LAT?In some situations, you may need to provide access to additional internal IP addresses for selected client computers. One way to accomplish this is to create a custom LAT file for a client by editing its copy of the Msplat.txt file. However, this would only be temporarily effective, because each client’s Msplat.txt file is overwritten at regular intervals by a fresh version downloaded from the server. Any changes you make locally are lost each time the server updates the client’s Msplat.txt file.
Instead, you can create a permanent local LAT file for a client by creating a file named Locallat.txt and placing it in the client’s Mspclnt directory. The client will use both the Msplat.txt and Locallat.txt files if present. In this way, you can add additional IP address ranges that the client recognizes as part of the private network. This is useful, for example, to allow client access to a private subnet inside a corporation’s network.
For more information about the local LAT file, including information about how to create and edit a Locallat.txt file by using a text editor, see “Setting Up Clients.”
How is the LAT Defined?The LAT is defined during Microsoft Proxy Server installation, when you complete the Local Address Table Configuration dialog box. The LAT consists of a series of IP address pairs. Each address pair defines either a range of IP addresses (from the first, lower address to the second, higher address), or a single IP address (if both addresses of the pair are identical).
Note Each IP address pair identifies either a range of addresses, or a single IP address. The second entry is not a subnet mask.
To add addresses to the LAT, you can:
During Microsoft Proxy Server installation, when you click the Construct Table button in the Local Address Table Configuration dialog box that generates the list of IP address pairs from internal routing tables used by Windows NT Server, in some cases the generated addresses might not completely define your private network. For example, the generated addresses could omit a subnet of your private network, or could include addresses external to your private network. It is important that you review the generated list of IP addresses. Use the edit controls to add any needed IP address pairs until all addresses of your internal network are defined. Remove any IP address pairs that define external (Internet) addresses.
Note If you find that a subnet of your private network is omitted when the list of IP pairs is generated, you need to add the IP address pairs as described above, but you also need to review and correct the server or network configuration to ensure that the missing subnet becomes accessible for TCP/IP connections.
LAT Configuration ConsiderationsFollowing are some considerations to keep in mind when administering the Local Address Table Configuration dialog box and defining the LAT:
If you generate the list of internal addresses by clicking the Construct Table button, and then remove an address from the Internal IP Ranges list, you can introduce redundant load on the server. Clients will redirect the connections to that address through Microsoft Proxy Server, when they are already connected to that computer on the internal network.
Make sure that external (Internet) addresses are not entered in the Internal IP Ranges list. Doing so will add them to the LAT and will therefore identify them as internal addresses. This is a security breach and can provide unwanted external access to your private network computers. Also, an attempt by a client to connect to such an address is not redirected through Microsoft Proxy Server, and therefore that address is not reachable from the private network.
The IP addresses of the server’s internally connected network adapter cards must be defined as internal addresses (by including them in the Internal IP Ranges list), and the IP addresses of its externally connected cards should be defined as external IP addresses (by excluding them from the Internal IP Ranges list).
Regardless of the addresses entered in the Internal IP Ranges list, if the client is running only IPX/SPX, then any attempt to communicate over IP will be redirected through Microsoft Proxy Server, even if the destination is on the private network.
After Microsoft Proxy Server has been installed, if the LAT needs to be modified it can be edited by using Internet Service Manager, or by using a text editor to edit the Msplat.txt file (located by default in the C:\Msp\Clients directory). For more information see “Server Administration.”
Setting the Web Proxy Listen-On PortThe Web Proxy service uses the port set for the WWW service as its listen-on port. The default is port 80. If you want to use a different port, before installing Microsoft Proxy Server use Internet Service Manager to change the WWW service port number.
During Microsoft Proxy Server setup, the Setup program reads this port number from the Windows NT registry and adds it to the WebProxyPort field of the Mspclnt.ini client configuration file that Setup adds to the server’s Mspclnt client installation share. When a client computer installs the client software from that share (and if the option to configure client browsers has been set), the client’s browser is configured to use this port on the proxy.
If you change the WWW service port number after installing Microsoft Proxy Server, you must edit the WebProxyPort value in the Mspclnt.ini file in the server’s Mspclnt share. If browser clients of that server are not already configured to use that port, also use each browser’s configuration interface to configure the browser to use the new port number.
For more information about client computer configuration, the Mspclnt.ini file, and browser configuration, see “Setting Up Clients.”
Installing Microsoft Proxy ServerRunning Server Setup
Running Server Setup from the Command Line
Running Server SetupFollow these instructions to perform a fresh installation of Microsoft Proxy Server. For information about upgrading from a preliminary release of Microsoft Proxy Server, see the Readme.txt file provided on the Microsoft Proxy Server compact disc.
Verify that the prerequisites listed in “Preinstallation Requirements,” have been satisfied. Also verify that the server has Windows NT Server version 4.0 and Microsoft Internet Information Server (IIS) version 2.0 installed, and then log on using a user account that has administrative privileges on the server.
From the Ntupdate directory on the Microsoft Proxy Server compact disc, open the subdirectory that is appropriate to the server's processor architecture, and run Update.exe to install the Windows NT Server 4.0 Service Pack. After the Service Pack is installed, reboot the server computer and log on again using a user account that has administrative privileges on the server.
From the root directory of the Microsoft Proxy Server compact disc, run Setup.
–Or–
Copy the contents of the compact disc to a shared folder, connect the server to that share, and run Setup.
The Welcome dialog box appears.
Click Continue.
The CD Key Number dialog box appears.
To record the product identification number (displayed on the Certificate of Authenticity provided with the product), type the number in the CD Key box, click OK, and then click OK in the confirmation dialog box that appears.
The Change Folder dialog box appears.
To change the folder into which Microsoft Proxy Server is installed, click Change Folder and complete the dialog box that appears. To accept the default folder, skip this step.
Click OK.
The Installation Options dialog box appears.
To determine which Microsoft Proxy Server components are installed, select or clear the check box for each option. The Installation Options dialog box contains check boxes for the following items:
By default, all components are selected.
When the installation options are set appropriately, click Continue.
The Microsoft Proxy Server Cache Drives dialog box appears. The server’s local drives are listed.
To assign a disk to store cached data, select the drive from the list, type a number in the Maximum Size (MB) box, and click Set.
Repeat as necessary to assign additional drives to store cached data.
When configuring the cache drives you must, at a minimum, allocate at least one drive and 5 MB for caching. However, the recommended minimum allocation is higher. It is suggested you allocate at least 100 MB plus 0.5 MB for each Web Proxy service client (and round up to the nearest full megabyte). For example, if a server will be servicing 79 Web Proxy service clients, it is recommended you allocate 140 MB or more to the cache. For each server the optimal cache allocation varies depending on load and configuration, but in general, increasing the disk space allocation benefits the cache.
Allocate space from a drive to the cache in increments of 5 MB. If you assign a number to the cache that cannot be evenly divided by 5, the allocation is rounded down to the next lowest 5 MB increment. For example, if you assign 194 MB to the C drive, 190 MB is actually allocated from that drive to the cache.
Note It is strongly recommended that you use only NTFS volumes for caching. Also, do not assign a read-only drive (for example, a CD-ROM drive) to the cache.
See “Server Features,” and Appendix D, “Architecture,” for more information about caching.
Click OK.
The Local Address Table Configuration dialog box appears. Use this dialog box to define all the internal IP addresses of your network, and to exclude all external IP addresses. For important information about his dialog box, see What You Need to Know About the LAT, earlier in this chapter.
To create a table of the IP addresses of your internal network, click the Construct Table button.
The Construct Local Address Table dialog box appears.
To add to the LAT three ranges of IP addresses defined by IANA as private address ranges that can be used in a private IP network that is not connected to the Internet, select the Add the private ranges check box.
To choose the network adapter cards on the server whose IP addresses are included in the LAT, select Load from NT Internal Routing Table and complete its options.
If you do not know which of the server’s network adapter cards are connected to the private network, select Load known address ranges from all IP interface cards.
If you know which of the server’s network adapter cards are connected to the private (internal) network and which are connected to the Internet, select Load known address ranges from the following IP interface cards to load only those IP addresses associated with the server’s internally connected cards. Then, in the list of network adapter cards, select the check box for each of the internally connected cards, and clear the check box for each of the externally connected cards.
The Local Address Table Configuration dialog box returns. A list of IP address pairs is displayed in the Internal IP Ranges box.
Verify that the entries in the Internal IP Ranges box correctly identify your internal network. Add any needed IP address pairs until all addresses of your internal network are defined. Remove any IP address pairs that define external (Internet) addresses.
To add a range of IP addresses to the list, under Edit type a pair of addresses in the From and To boxes, and then click the Add button.
To add a single IP address to the list, under Edit type the same address in both the From and To boxes, and then click the Add button.
To remove an IP address or address pair from the list, select it from the Internal IP Ranges box, and then click the Remove button.
When the LAT configuration is properly set, click OK.
The Client Installation/Configuration dialog box appears. Use this dialog box to enter information that is used by the client Setup program that Microsoft Proxy Server Setup installs into the Mspclnt share.
Use the choices under WinSock Proxy Client to specify how the client Setup program will configure WinSock Proxy clients that install from this server.
Select either Machine or DNS Name or IP Addresses. If you select Machine or DNS Name, verify that the name is correct. If necessary type the appropriate name.
When the Enable Access Control check box is selected, WinSock Proxy service security is enabled, and only those clients that have been assigned permissions are able to use the WinSock Proxy service on this server. If you clear this check box, all internal clients will be able to use the WinSock Proxy service on this server. By default, this check box is selected.
See “Server Administration” for information about using Microsoft Proxy Server with DNS, and “Configuring the WinSock Proxy Service” for information about setting WinSock Proxy client permissions.
Use the choices under Web Proxy Client to specify how the client Setup program configures Web Proxy clients that install from this server.
Under Web Proxy Client select Set Client Setup to Configure Browser Proxy Settings to have the client Setup program configure client browsers as a Web Proxy client (if the browser is Netscape Navigator or Microsoft Internet Explorer).
If you select this option, verify that the name shown in the Proxy to be Used by Client box is correct. If necessary type the correct name.
Also, if you select this option the Client Connects to Proxy Via Port value displays the port number that Web Proxy clients will be configured to use. The value in this box cannot be changed here. It is the TCP port number that is set for Internet Information Server, and is changed using Internet Service Manager to administer the WWW service. For more information see Setting the Web Proxy Listen-On Port, earlier in this chapter.
When the Enable Access Control check box is selected, Web Proxy service security is enabled. When this check box is cleared, the Web Proxy service will not attempt to validate connections from clients. By default, this check box is selected. For information about configuring Web Proxy security, see “Configuring the Web Proxy Service.”
When the Client Installation/Configuration dialog box is complete, click OK.
Setup installs Microsoft Proxy Server.
Running Server Setup from the Command
LineOptionally, you can start Setup from the command line and take advantage of the command-line options. For server installations, the syntax is as follows.
setup [/r] [/u] [/k]
where
- /r
Reinstalls Microsoft Proxy Server.
- /u
Removes Microsoft Proxy Server but leaves shared components.
- /k “keynumber”
Provides the compact disc key number, where keynumber is enclosed in quotes. The keynumber is the product identification number displayed on the Certificate of Authenticity provided with the product.
Note When entering the keynumber, do not enter a dash or a space. For example, 123-4567890 is entered as:
/k “1234567890”
Reviewing the Server Setup LogDuring Microsoft Proxy Server installation, the Setup program creates a log, Mpssetup.log, and places it in the root directory of drive C.
If you encounter problems with Setup, review this log by using any text editor (such as Microsoft WordPad or Microsoft Notepad). For more information about logging, see “Monitoring.”
Reinstalling Microsoft Proxy ServerThe Setup dialog box appears.
The Setup dialog box appears.
You can also reinstall Microsoft Proxy Server using the Control Panel.
Removing Microsoft Proxy ServerThe Uninstall Proxy Server dialog box appears.
All installed components (Microsoft Proxy Server, the Proxy Server documentation, and the administration components) are removed from the computer.
You can also remove Microsoft Proxy Server by using the Setup program, but you must have the Microsoft Proxy Server compact disc or be connected to a network share containing that software.
The Setup dialog box appears.
A message appears, asking you to confirm that Microsoft Proxy Server should be removed.
All installed components (Microsoft Proxy Server, the Proxy Server documentation, and the administration components) are removed from the computer.
You can also remove Microsoft Proxy Server by using Control Panel.
Installing Only the Administration ToolTo set up a workstation for remote administration of Microsoft Proxy Server, you can install the administration tool for the Web Proxy and WinSock Proxy services without installing Microsoft Proxy Server. The administration tool can be installed on computers running these operating systems:
Windows NT Server 4.0 At a minimum, the Internet Service Manager component of Microsoft Internet Information Server 2.0 must be installed on the server before the Microsoft Proxy Server administration components can be installed.
From the root directory of the Microsoft Proxy Server compact disc or from a shared network folder, run Setup.
When the Installation Options dialog box appears, select the Install Administration Tool check box, but clear the Install Proxy Server check box.
Optionally, to also install the online Installation and Administration Guide, select the Install Documentation check box.
Click OK, and then follow the on-screen instructions.
After installation, you can open the administration tool from the Microsoft Proxy Server program group.
From the desktop click Start, select Programs, and then select Microsoft Proxy Server.
Click Internet Service Manager.
The Microsoft Internet Service Manager window is displayed. It lists the Internet services available on the local computer. Because Microsoft Proxy Server is not installed on this computer, the Web Proxy and WinSock Proxy services are not included in the list.
From the Properties menu choose Connect to Server.
The Connect to Server dialog box appears.
Type a server name in the Server Name box, then click OK.
The Internet services available on that server are listed in Internet Service Manager. If that server has already had Microsoft Proxy Server installed, the Web Proxy and WinSock Proxy services appear in the list.
As necessary, administer the Web Proxy and WinSock Proxy services on that server.
Installing and Accessing the
DocumentationThe Installation and Administration Guide for Microsoft Proxy Server is installed with Microsoft Proxy Server (unless you change the default settings of the Setup program). It is provided in HTML format and is available online. Once it is installed, you can access the Installation and Administration Guide from two locations:
From the Microsoft Proxy Server program group
Note A Web browser (such as Microsoft Internet Explorer) must be installed on the computer in order for the documentation to be displayed.
Open the Installation and Administration Guide directly from Internet Service Manager to refer to the documentation while you are administering a server.
From the server’s desktop click Start, select Programs, and then select Microsoft Proxy Server.
Click Internet Service Manager.
The Microsoft Internet Service Manager window is displayed.
From the Help menu, click Microsoft Proxy Server Documentation.
The server’s browser starts and the table of contents for the Installation and Administration Guide is displayed.
You can also open the Installation and Administration Guide from the Microsoft Proxy Server program group.
From the server’s desktop click Start, select Programs, and then select Microsoft Proxy Server.
Click Microsoft Proxy Server Documentation.
The server’s browser starts and the table of contents for the Installation and Administration Guide is displayed.
If Microsoft Proxy Server has not yet been installed on a computer, you have the option of installing only the documentation. You can then read or print out the documentation before installing Microsoft Proxy Server.
As another option, without installing any components you can open the Installation and Administration Guide directly from the Microsoft Proxy Server compact disc. You can then read or print out the documentation before performing any installation tasks.
Start an Internet browser.
From the Docs folder on the Microsoft Proxy Server compact disc, open the file Toc_msp.htm.
For example, if the compact disc drive is the computer’s D: drive, you would have the browser open the following address:
file:D:\Docs\Toc_msp.htm
The browser loads the Table of Contents for the Installation and Administration Guide.
Searching the DocumentationWith Microsoft Index Server, users can query an entire site with a click of a button. It automatically indexes the full text and properties of various files (including HTML) on your server, whether it is an intranet, an Internet, or a file-and-print server.
You can use Microsoft Index Server to perform full text searches of the Microsoft Proxy Server Installation and Administration Guide. The Search buttons at the top and bottom of every page in the Installation and Administration Guide take you to a query form, from which you perform your search. A search results page provides you with links to search hits. (Note that this query form intentionally restricts searches to only the Installation and Administration Guide.)
Before you can use the query form to search the Installation and Administration Guide, the following prerequisites must be satisfied:
You must install Microsoft Index Server on the server.
Open the Microsoft Proxy Server Installation and Administration Guide.
From the server’s desktop click Start, select Programs, select Microsoft Proxy Server, and then click Microsoft Proxy Documentation. The server’s browser starts and loads the table of contents for the Installation and Administration Guide.
From the table of contents, click Installing the Search Components.
The Installing the Search Components page appears.
Follow
the instructions displayed on the Installing the Search Components page.
From any page of the Microsoft Proxy Server Installation and Administration Guide, scroll to the top or bottom of the page.
Click the Search button.
The Search page appears.
Compose and issue a query, following the instructions displayed on the Search page.
Note If the prerequisites above are not satisfied, or if Microsoft Index Server has not been installed, when you click the Search button an error will be displayed.
© 1996 by Microsoft Corporation. All rights reserved.