Designing Vpn Connectivity

By Author: Shirley Green
Total Articles: 129
Comment this article

VPNs present complicated network connectivity and security issues. In addition to selecting MCSE 2003 VPN protocols, you secure the connections between client and server by selecting and configuring client and server components and by using supporting net?work infrastructure.
After this lesson, you will be able to
Explain the considerations for designing client and server VPN configurations.
Explain the network infrastructure considerations for VPNs.
Place VPN servers on networks.
Provide firewall configuration information to administrators to support PPTP and L2TP/
IPSec VPNs.
Design secure VPN connectivity.
Estimated lesson time: 45 minutes
Considerations for Designing Client and Server VPN Configurations
Many VPN client and server configuration selections must match before secure com-munications can take place. The following components can be configured to provide security for VPN connections. You must consider all these components as you design client and server MCSE Exams VPN configuration.
...
... Authentication, Authorization, and Accounting Selection Considerations
Two selections are possible for controlling authentication, authorization, and account?ing: Windows or RADIUS. You can select one to control all three, and you can choose one for authentication and authorization and the other for accounting. When Windows authentication is selected, the local Security Accounts Manager (SAM) database of the VPN server will be used if the VPN server is a stand-alone computer and the Active Directory directory services database will be used if the VPN server is a domain mem?ber. When RADIUS is used, the Active Directory database can also be used regardless of whether the VPN server is a domain member. When RADIUS is used, a RADIUS client (such as a Windows Server 2003 computer) passes credentials to the RADIUS server, which forwards them to Active Directory for validation. RADIUS is implemented in Windows Server 2003 as a server, the Internet Authentication Service (IAS).
Authentication Considerations
PPTP and L2TP/IPSec both require user authentication to be A+ Exams configured. Additionally, when using L2TP/IPSec, you must configure both computer and user authentication.