Solved

Setting up Radius on a Win2k Server and a Sonicwall 3060 w/ Viewpoint

Posted on 2004-09-06
2
785 Views
Last Modified: 2013-12-19
I am helping a school setup a Sonicwall pro 3060 w/viewpoint software to monitor/track all students.
since the Sonicwall radius feature limits out at around 100 entries and we have more students than that, we would like
to run some kinda Radius on our Win2k Server and have it pull the information from AD?  is this at all possible.

A tech in another dept. told me that Radius was still included in Win2k only it was called something else.

Ps.. im new to this site.  i've been watching it for sometime now.  I've been waiting for a good question to post.


0
Comment
Question by:nextech01
2 Comments
 
LVL 37

Accepted Solution

by:
Bing CISM / CISSP earned 250 total points
ID: 11991602
hi nextech0, welcome to EE! ;)

> we would like to run some kinda Radius on our Win2k Server and have it pull the information from AD?  is this at all possible.

definitely YES.

> A tech in another dept. told me that Radius was still included in Win2k only it was called something else.

officially, it is Internet Authentication Service (IAS) in W2K, the MS implementation of a RADIUS server.

i believe the following two whitepapers are informative:

Internet Authentication Service for Windows 2000
http://www.microsoft.com/windows2000/techinfo/howitworks/communications/remoteaccess/ias.asp

"To grant the connecting user-appropriate access to the network, IAS authenticates users in Windows 2000 Active Directory™ service domains, Microsoft® Windows NT® 4.0 domains, or the local Security Accounts Manager (SAM) in Windows 2000. IAS supports new features in Active Directory, such as user principal names and universal groups."

RADIUS Protocol Security and Best Practices
http://www.microsoft.com/windows2000/techinfo/administration/radius.asp

"These practices include using strong shared secrets, the Message-Authenticator attribute, cryptographic-quality values for the Request Authenticator, different shared secrets for each RADIUS client/server pair, and IPsec to provide data confidentiality for RADIUS messages"

hope it helps,
bbao
0
 

Author Comment

by:nextech01
ID: 12061056
Thanks for a quick reply.   can't wait to get to the white papers
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now