Re: Publishing RADIUS server for external authentication

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Tristan Kington [MSFT] (tristank_at_online.microsoft.com)
Date: 02/03/05 

Date: Thu, 3 Feb 2005 19:24:40 +1100

You should be able to Server Publish the RADIUS server you're using.

If your DMZ uses private IP addresses, you should also have a NAT
relationship between the DMZ network and the Internet. 

-- 
http://blogs.msdn.com/tristank/
--
This post is provided "AS-IS", and confers no warranty.
"Tim Parker-Nance" <tim_pn@hotmail.com> wrote in message 
news:e7dgSqSBFHA.2156@TK2MSFTNGP10.phx.gbl...
We have ISA server 2004 installed on Windows 2003 with a private IP DMZ. We 
sell off dial ups so we need external RADIUS clients to connect with our 
RADIUS server on the DMZ which then sends back accept or rejects to the 
clients.
I have tried numerous setups on ISA and haven't been able to get this right. 
I do not want to use RADIUS for authentication on the inside (e.g. web proxy 
or VPN), it's for the external RADUIS clients only.
Does anyone know how to set this up with ISA?
Thanks
Tim

Relevant Pages

  • Re: Publishing RADIUS server for external authentication
    ... > You should be able to Server Publish the RADIUS server you're using. ... > If your DMZ uses private IP addresses, you should also have a NAT ... > This post is provided "AS-IS", and confers no warranty. ...
    (microsoft.public.isaserver)
  • Re: ISA2004 and OWA Exchange 2003 Questions.
    ... RADIUS server in the *internal* network. ... > I am tasked with getting ISA 2004 up and running in the DMZ to ONLY host ... > need to setup MS Internet Authentication Server to run Radius in the ...
    (microsoft.public.isa)
  • Re: Dicussion on where RADIUS server should be
    ... Then if an external user ... > attempts to connect via VPN, then I would allow only the ports ... > I have a security guy fellow here that tells me that the RADIUS server ... server in it's own DMZ and strictly control access to it, ...
    (microsoft.public.security)
  • Re: Placing Radius server in DMZ using iptables
    ... > Radius Server through the firewall, ... > only thing I am doing is moving the Radius server to the DMZ so Radius ... information you obtain from the packet capture. ...
    (comp.os.linux.security)
  • Re: About Firewall configuration
    ... The Server machine is not DMZ, so can it use Private IP only? ... The router machine is a general router machine which provided by ISP, ... Give a lot of thought to your network design and what you want to do with ...
    (Fedora)