Re: enterprise RADIUS

From: Ashwin Palekar\(MS\) (ashwinp_at_online.microsoft.com)
Date: 03/06/04 

Date: Sat, 6 Mar 2004 04:41:30 -0800



-- 
-- 
===========================================================
This posting is provided "AS IS" with no warranties and confers no rights
===========================================================
<anonymous@discussions.microsoft.com> wrote in message
news:828801c40335$b7db5050$a101280a@phx.gbl...
> We are evaluating RADIUS products for enterprise wide
> authentication of wireless/VPN/Dial infrastructure.
>
> 1. How many clients can the IAS radius servers support?
IAS scales up from Corporate to large ISP deployments. Refer to capacity
planning section in this document.
http://www.microsoft.com/windows2000/docs/IAS.doc
For larger deployments, you will need W2k3 Enterprise edition.
> 2. Can IAS supports grouping clients, so different
> authenticating schemes can used for groups of clients. We
> want to authenticate wireless user against ActiveDirectory
> & VPN users against secure-id.
Its possible w/ W2k3 IAS.  With W2k3 2003 IAS,  it is also possible to
authenticate users with SecureID; and in addition check user account
permissions (account enabled/disabled); and user group membership in AD.
If the VPN server supports EAP (the same authentication protocol used by
802.1x), then install a ACE agent on the IAS server; and configure the agent
to use the ACE server. If the VPN server supports only legacy authentication
mechanisms (non-EAP), then will have to configure IAS to forward
authentication for vpn users to SecureID RADIUS server; which can then be
configured to use ACE server.
>
> Please advise.

Relevant Pages

  • Re: 802.1x Wired Auth and Authentication
    ... is installed on the NPS or IAS server rejected the connection request. ... This means that you have an IAS authentication extension DLL installed. ...
    (microsoft.public.internet.radius)
  • Re: Need help configuring Wireless Connection profile
    ... "point" the info of the Radius authentication to your current Radius server. ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: Need help configuring Wireless Connection profile
    ... "point" the info of the Radius authentication to your current Radius server. ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: RADIUS
    ... I am implementing a test environment for the RADIUS. ... RADIUS/VPN server. ... The authentication I need is on the basis of the ... Internet Authentication Service (IAS) is the name of RADIUS in the Windows ...
    (microsoft.public.windows.server.networking)
  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... >> IAS servers (do I need a separate certificate for the secondary IAS ... >> of authentication since it involves just installing the certificate on ... >between the AP and the client. ...
    (microsoft.public.internet.radius)
Quantcast