Cài đặt Forefront TMG Server và các vấn đề liên quan [Lưu Trữ] - DIỄN ĐÀN QUẢN TRỊ MẠNG MICRO$OFT AND MORE

microsoftvn

02-23-2011, 07:44 PM

Cài đặt Forefront TMG Server
I. Mô hình:
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/TMG_5F00_thumb_5F00_70340C0D.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/TMG_5F00_7E6FF44C.png)
II. Chuẩn bị:
Trong mô hình lab sử dụng 02 máy Windows Server 2008 R2 và 01 máy Windows 7
- TMG làm chức năng TMG Server (TMG.technetvietnam.local)
- PDC làm chức năng DC, DNS Server (PDC.technetvietnam.local)
- WIN7 làm chứng năng client (WIN7.technetvietnam.local)

Thiết lập TCP/IP cho 2 máy như trong bảng sau:
Interface\Server
PDC
TMG Server
WIN7
LAN
IP : 172.16.1.2
GW : 172.16.1.1
DNS : 172.16.1.2IP : 172.16.1.1
GW :
DNS : 172.16.1.2IP : 172.16.1.11
GW : 172.16.1.1
DNS : 172.16.1.2WAN
IP : 192.168.1.2
GW : 192.168.1.1 (DSL Router)
DNS :

- Cấu hình PDC làm Domain Controller & DNS Server của domain TECHNETVIETNAM.LOCAL
- Join TMG & WIN7 vào domain TECHNETVIETNAM.LOCAL

III. Thực hiện:
1. Thực hiện Windows Update
Chạy Windows Update để cài đặt các bản cập nhật & bản vá lỗi cần thiết trước khi cài đặt Forefront TMG Server
- Trên TMG Server, logon TECHNETVIETNAM\Administrator, chay file autorun.hta trong source cài đặt Forefront TMG 2010
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture001_5F00_thumb_5F00_21C20A54.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture001_5F00_7D2DEC1E.png)
- Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Windows Update
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture002_5F00_thumb_5F00_67692523.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture002_5F00_3164A616.png)
- Sau khi update thành công, chọn Install updates
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture003_5F00_thumb_5F00_621CCF23.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture003_5F00_6B7603A6.png)
- Trong hộp thoại Windows Update, chọn I accept the license terms, chọn Finish
- Sau khi cài đặt Windows Update thành công, chọn Restart now
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture004_5F00_thumb_5F00_217D1365.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture004_5F00_3FC7CA5B.png)

2. Chạy Preparation Tool
Chạy Preparation Tool để cài đặt các Roles & Features cần thiết cho Forefront TMG Server
-Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Preparation Tool
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture005_5F00_thumb_5F00_073F3AF2.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture005_5F00_03325C6F.png)
-Trong hộp thoại Welcome, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture006_5F00_thumb_5F00_7AD3A879.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture006_5F00_39396C2D.png)
- Trong hộp thoại License Agreement, đánh dấu chọn I accept the terms of the License Agreements, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture007_5F00_thumb_5F00_0EEF55B4.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture007_5F00_515F6739.png)
- Trong hộp thoại Installation Type, chọn Forefront TMG services and Management, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture008_5F00_thumb_5F00_674B6A3A.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture008_5F00_70A49EBD.png)
- Sau khi cài đặt thành công, chọn Finish
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture009_5F00_thumb_5F00_58A34F06.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture009_5F00_4900B344.png)

3.Cài đặt Forefront TMG Server
- Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Installation Wizard
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture010_5F00_thumb_5F00_333BEC49.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture010_5F00_16333D81.png)
- Trong hộp thoại Welcome, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture011_5F00_thumb_5F00_54BDAC89.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture011_5F00_3748CACC.png)
- Trong hộp thoại License Agreement, chọn I accept the terms in the license agreement, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture012_5F00_thumb_5F00_48BE4D06.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture012_5F00_391BB144.png)
- Trong hộp thoại Customer Information, khai báo Product Serial Number, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture013_5F00_thumb_5F00_22EAB754.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture013_5F00_5860E8C8.png)
- Trong hộp thoại Setup Scenarios, chọn Forefront TMG services and Management
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture014_5F00_thumb_5F00_14429C20.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture014_5F00_52A85FD3.png)
- Trong hộp thoại Installation Path, khai báo đường dẫn cài đặt, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture015_5F00_thumb_5F00_67BE8D9B.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture015_5F00_3C7765E3.png)
- Trong hộp thoại Define Internal Network, chọn Add để khai báo subnet sử dụng trong hệ thống nội bộ
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture016_5F00_thumb_5F00_0DB6CEA3.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture016_5F00_44FD55DE.png)
- Trong hộp thoại Address, chọn Add Adapter...
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture017_5F00_thumb_5F00_45F7D66C.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture017_5F00_36553AAA.png)
- Trong hộp thoại Select Network Adapters, đánh dấu chọn card LAN (Card LAN là card mạng kết nối và nội bộ), chọn OK
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture018_5F00_thumb_5F00_00E199E7.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture018_5F00_713EFE24.png)
- Trong hộp thoại Define Internal Network, kiểm tra subnet nội bộ là 172.16.1.0-172.16.1.255, chọn Next

microsoftvn

02-23-2011, 07:46 PM

http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture019_5F00_thumb_5F00_68E04A2F.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture019_5F00_576D58A6.png)
- Trong hộp thoại Services Warning, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture020_5F00_thumb_5F00_61576B73.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture020_5F00_03AC703C.png)
- Trong hộp thoại Ready to Install the Program, chọn Install
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture021_5F00_thumb_5F00_44DD0A44.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture021_5F00_111513F3.png)
- Sau khi cài đặt thành công,chọn Finish
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture022_5F00_thumb_5F00_322AA13E.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture022_5F00_749AB2C3.png)
- Vào Start\All Programs\Microsoft Forefront TMG Management, mở Forefront TMG Management
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture023_5F00_thumb_5F00_588F153A.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture023_5F00_41CD3D00.png)
- Trong hộp thoại Getting Started Wizard, chọn Configure network settings
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture024_5F00_thumb_5F00_77D44CBE.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture024_5F00_41639ABC.png)
-Trong hộp thoại Welcome, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture025_5F00_thumb_5F00_7DB18108.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture025_5F00_526A5950.png)
- Trong hộp thoại Network Template Selection, chọn Edge firewall, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture026_5F00_thumb_5F00_4A77D850.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture026_5F00_7B0B5608.png)
- Để chỉ định card mạng kết nối vào nội bộ, trong hộp thoại Local Area Network (LAN) Setting, chọn card LAN, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture027_5F00_thumb_5F00_1E5D6C10.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture027_5F00_2ED5DD0B.png)
- Để chỉ định card mạng kết nối ra Internet,trong hộp thoại Internet Settings, chọn card EXT, chọn Next, chọn Finish
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture028_5F00_thumb_5F00_01E30AE1.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture028_5F00_3929921C.png)
- Trong hộp thoại Getting Started Wizard, chọn Configure system settings
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture030_5F00_thumb_5F00_21284265.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture030_5F00_31A0B360.png)
- Trong hộp thoại Welcome, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture031_5F00_thumb_5F00_1528E2E2.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture031_5F00_25A153DD.png)
- Trong hộp thoại Host Identification, bảo đảm khai báo đúng thông tin của máy TMG Server như trong hình bên dưới, chọn Nex, chọn Finish
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture032_5F00_thumb_5F00_6665BAF0.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture032_5F00_329DC49F.png)
- Trong hộp thoại Getting Started Wizard, chọn Define deployment options
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture034_5F00_thumb_5F00_137D3870.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture034_5F00_23F5A96B.png)
- Hộp thoại Welcome, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture035_5F00_thumb_5F00_7CE29C3B.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture035_5F00_0D5B0D37.png)
-Trong hộp thoại Microsoft Update Setting, chọn use the Microsoft Update service to check for updates, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture036_5F00_thumb_5F00_22DADD43.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture036_5F00_4C4F1E83.png)
-Trong hộp thoại Forefront TMG Protection Features Setting, khai báo License cho NIS & Web Protection như hình bên dưới, đánh dấu chọn Enable Mailware Inspection & Enable URL Filtering, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture037_5F00_thumb_5F00_422014C7.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture037_5F00_606ACBBD.png)
- Hộp thoại NIS Sgnature Update Settings, giữ nguyên cấu hình mặc định, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture038_5F00_thumb_5F00_3D3FF1BC.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture038_5F00_7FB00341.png)
- Hộp thoại Customer Feedback, chọn No, I don't want to participate, chọn Next
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture039_5F00_thumb_5F00_7580F985.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture039_5F00_1EF53AC6.png)
- Hộp thoại Microsoft Telemetry Reporting Service, chọn chế độ Basic, chọn Next & Finish
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture040_5F00_thumb_5F00_027D6A48.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture040_5F00_12F5DB43.png)
- Trong hộp thoại Getting Started Wizard, bỏ dấu chọn Run the Web Access wizard, chọn Close
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture042_5F00_thumb_5F00_41717B94.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture042_5F00_7204F94C.png)
- Kiểm tra cài đặt Forefront TMG Server thành công
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture043_5F00_thumb_5F00_753C0296.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture043_5F00_25CF804F.png)

4. Cài Service Pack 1 cho TMG 2010
Download : http://www.microsoft.com/downloads/en/details.aspx?FamilyID=f0fd5770-7360-4916-a5be-a88a0fd76c7c (http://www.microsoft.com/downloads/en/details.aspx?FamilyID=f0fd5770-7360-4916-a5be-a88a0fd76c7c)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture044_5F00_thumb_5F00_693CA313.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture044_5F00_599A0751.png)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture045_5F00_thumb_5F00_5A9487DF.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture045_5F00_1D049965.png)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture046_5F00_thumb_5F00_32F09C66.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture046_5F00_513B535C.png)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture047_5F00_thumb_5F00_59551062.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture047_5F00_14A5E570.png)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture048_5F00_thumb_5F00_5CF5BBF0.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture048_5F00_2D381371.png)
http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture049_5F00_thumb_5F00_1C560032.png (http://technetvietnam.net/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/hieudd/picture049_5F00_45CA4172.png)

Thanks Hieudao for this tutorial