Solved

Using Microsoft RADIUS and a Cisco 1841 router/vpn

Posted on 2006-11-06
2
664 Views
Last Modified: 2012-06-27
Hello experts,

I want to move our VPN accounts from the router and use RADIUS authentication from our MS Active Directory.  We only have about 18 accounts, so that's not too much of a hassle.  

All I want from the Microsoft server to say, is that this user is ok to be on the VPN.  

This is what I have set up:

1.  Cisco 1841 receives a request and passes it to the MS server
2.  MS looks to see if the user is in a particular group (ie. VPN Users)
3.  If they are, MS gives the green light to the Cisco 1841.
4.  Cisco 1841 allows the user to sign on.

Are there any concerns I should be aware of?  
0
Comment
Question by:tsuthar
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 125 total points
ID: 17885575
The setup is actually quite simple and should work as you have it outlined.  Once you have the 1841 RADIUS configuration in place, add a client (the 1841) in IAS, specify the group to match in the Remote Access Policy and set authentication to unencrypted (PAP).
0
 
LVL 1

Author Comment

by:tsuthar
ID: 17889269
It looks like it does work, and yes it was quite simple.  I just didnt know if I was missing something.  

Apparently not.  

Points for you.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Watchguard Firewall Setup 3 68
Iptables and mirroring ports 4 75
Static route between two Sonicwalls 6 45
How to set DHCPv6 options on a Sonicwall? 13 74
In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now