RADIUS Question

Posted on 2006-05-31
Last Modified: 2010-04-18
Hi all,

We are planning on installing RADIUS service on one of our servers so we can use it for network devices such as managed switches and routers and also packeteer and what have you to authenticate to it.

the plan is to install it on a Domain Controller and for some reason I feel like this may cause a problem, so I searched all the web looking for information regarding running RADIUS on a DC but didn't find any.

So I though that one of the experts must know something about it, which will help me going through a problem that I really don't need.

Does any expert have any information about this setup?

All comments are highly appreciated.

Question by:Medquest
    LVL 51

    Expert Comment

    In Server 2003 this is known as IAS.

    Everything you ever wanted to know (and not know) about IAS:

    LVL 51

    Accepted Solution

    To add to that, there is no requirement to co-locate IAS on a DC.  You certainly can if the edge of your network is well protected.  Every service added to 2003 increases the attack surface of the OS.  By co-locating IAS on a DC you open up a little more of the server to the network and since it's a DC there is a quick and easy path to your domain information if compromised.


    Author Comment

    Thanks a lot for your help

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
    by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    This video discusses moving either the default database or any database to a new volume.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now