1. Insert the Forefront TMG DVD into the DVD drive, or run autorun.hta from a shared network drive.

2. On the main setup page, click Run Windows Update. Windows Update might require one or more computer restarts. If the computer restarts, you must launch the setup page again, as described in step 1 of this procedure.

3. On the main setup page, click Run Preparation Tool to launch the Preparation Tool. For instructions on running the Preparation Tool, see Preparing for installation.

4. On the main setup page, click Run Installation wizard to launch the Forefront TMG Installation Wizard.

5. On the Installation Type page, click the Forefront TMG services and Management button.

6. On the Installation Path page, specify the Forefront TMG installation path.

7. On the Define Internal Network page, click Add, click Add Adapter, and then select the adapter which is connected to the main corporate network. See Adding IP addresses to the internal network below.

   Note:
   If you are installing Forefront TMG on a computer with a single network adapter, all IP address ranges should be configured for the Internal network, except for the following: 0.0.0.0 255.255.255.255 127.0.0.0-127.255.255.255 (Local Host) 224.0.0.0-254.255.255.255 (multicast)

8. On the Ready to Install the Program page, click Install.

   Note:
   The first time you run the Forefront TMG Management console, the Getting Started Wizard starts automatically, enabling you to modify IP address settings for your networks and to configure update settings. For more information, see Configuring initial deployment settings.

On the Addresses page, select any of the following methods to add addresses to the Internal network:

• Add Range—To add a range of IP addresses. You must specify the beginning and ending IP address in the range; for example, 10.0.0.1 to 10.0.0.255.
  
  
• Add Adapter—To select a network adapter. The IP addresses that are included in the Internal network are based on the IP address and subnet mask of the selected adapter.
  
  
• Add Private—To add IP addresses defined as non-routable IP addresses, based on Request for Comment (RFC) 1918, and on the Automatic Private IP Addressing (APIPA) feature. For more information about private addresses, see RFC1918 (http://rfc.net/rfc1918.html) and How to use automatic TCP/IP addressing without a DHCP server (http://go.microsoft.com/fwlink/?linkid=51291).
  
  

The following table shows the permitted IP address ranges, based on RFC 1918 or APIPA.