Provide a pool ip from IAS to Radius Clients

From: Luyper Silveira (luyper_at_sotreq.com.br)
Date: 10/13/04 

Date: Wed, 13 Oct 2004 08:00:34 -0700

Dear,

I have a IAS server (Windows 2003 server) installed in my
company and a have an external radius client connecting
with it. I need to provide to the radius client some
attributes and, one of them, is the ip address. My
question is, Am I able to provide just one ip address? I
tried to do it to get an ip from the RRAs installed in
the same server but I receive the message Error:
691:Access was denied because the username and/or
password was invalid on the domain.

I made the following sets:

1 - I have an RRAs service with a pool address installed
and working well in the same server that is running IAS.
2 - I added the radius client.
3 - I created a Connection Request Policie and I added
the attribute Framed-IP-Address with the value
255.255.255.254 (beside the other atributes needes)to get
an ip from server.
4 - I created a Remote Access Policie and, in the Profile
properties' IP tab, when I choose the option Assign a
static IP address (and define an IP static), everything
works well and I'm able to establish the connection, but,
when I choose the option Server must supply an ip
address, I'm not able to establish the connection and the
message above is displayed.

When I look at the IAS log, everything seems Ok, see
below:
LINE1:
192.168.15.1,luyper@sotreq.net,10/13/2004,11:47:16,IAS,U19
DCMTZA,6,2,4,192.168.15.1,61,0,7,1,30,2121,31,2138657722,7
7,50666 31200
V.90,5,5,4108,192.168.15.1,4116,0,4128,Embratel Client
Radius,4155,1,25,311 1 172.16.1.29 10/08/2004 15:35:15
80,4130,sotreq.net/98Matriz/Informatica/Luyper
Silveira,4127,1,4129,SOTREQ\luyper,4136,1,4142,0
LINE2:
192.168.15.1,luyper@sotreq.net,10/13/2004,11:47:16,IAS,U19
DCMTZA,25,311 1 172.16.1.29 10/08/2004 15:35:15
80,4130,sotreq.net/98Matriz/Informatica/Luyper
Silveira,27,36000,6,2,28,18000,7,1,8,255.255.255.254,4108,
192.168.15.1,4116,0,4128,Embratel Client
Radius,4155,1,4154,Embratel Connection
Request,8,255.255.255.254,7,1,28,300,6,2,27,600,4129,SOTRE
Q\luyper,4127,1,4149,Embratel Remote Access,4136,2,4142,0

My question is: Can I provide an Ip to a Radius Client
from IAS using an Ip address from a RRAs's pool?

thanks.

Relevant Pages

  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... Access Policy, ... But I still wonder why it stops working if you stop IAS from ... IAS server in "New features for IAS" Can't remember how I got forwarded ... In the "connection request policies" The default policy there is fine but ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Authentication Service Issues
    ... open IAS server. ... Restart the computer and reconfigure the RRAS and IAS server. ... Microsoft CSS Online Newsgroup Support ... Logging Error - An error occurred while trying to make a connection to ...
    (microsoft.public.windows.server.sbs)
  • Re: 802.1x authentication for wireless issues w/ ISA 2004
    ... IAS server in "New features for IAS" Can't remember how I got forwarded ... What I found was that the Remote Access Policy that we setup in IAS needs to ... In the "connection request policies" The default policy there is fine but ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Authentication issue
    ... IAS server Configured as a member server and ... about what a RADIUS client is: ... "We want to authenticate Radius Clients using AD User credentials." ... RADIUS clients use the RADIUS protocol to communicate with IAS or ...
    (microsoft.public.internet.radius)
  • Re: Adding A Radius Client
    ... The Radius client setting is needed when you are using a different IAS ... we add the RRAS VPN server as the RADIUS client on the IAS ...
    (microsoft.public.isa.vpn)