[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

radius question

Posted on 2002-05-03
1
Medium Priority
?
336 Views
Last Modified: 2010-04-11
I have a 3com firewall that has vpn capabilities, I want to use radius for authentication.  I will install
IAS(radius) on a windows 2000 server.  Now the question is, where should I place the win2000 server;
On the DMZ or my LAN?  Is there any reason I should not place it on my LAN?

Secondly, can the IAS server be a DC or is that a security risk.  

Thanks much
ptran
0
Comment
Question by:ptran2000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 3

Accepted Solution

by:
hnminh earned 400 total points
ID: 6989629
IAS should not be on DMZ since it only serve authenticating to the firewall not anything else from the Internet. Depend on where your firewall is, ie. it is frontier firewall or internal firewall which is directly connected to your LAN or being both, you should configure the the router connected to your LAN to let only the firewall can connect to internal RADIUS service. So if the IAS is inside the firewall, it wont take much risk from the Internet to be a DC!

Actually this topology is how i'm using here in my office. We have Cisco router with 2 ethernet interface, 1 connected to DMZ, 1 to LAN using non-routable IP range (172.16.x.x). The router serve both RAS and VPN using internal IAS which is on our W2K DC!

Hope it help!
0

Featured Post

Understanding Web Applications

Without even knowing it, most of us are using web applications on a daily basis. Gmail and Yahoo email, Twitter, Facebook, and eBay are used by most of us daily—and they are web applications. We often confuse these web applications tools for websites.  So, what is the difference?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question