RE: VPN Server Client address space.
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 24 Aug 2004 12:18:54 -0500
Hi William,
What's the purpose of assigning a static address? You can perform strong
user/group based access controls over VPN clients using the ISA
firewall's VPN server.
HTH,
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
Sent: Tuesday, August 24, 2004 12:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] VPN Server Client address space.
http://www.ISAserver.org
Hello,
I am currently using a Windows 2000 RRAS server for my PPTP VPNs. I am
planning on replacing this with an ISA 2004 Sever. Currently we assign
"Real"
IP addresses to the clients rather than private addresses. Both the
internal
and external interfaces of the current server live on "Real Routable"
interfaces.
My question is can I configure the VPN networks on ISA to use a private
address space (192.168.x.x) while retaining the current network configs
for
the internal and external interfaces? It appears that I can but I just
wanted
to be sure.
Part2:
We use RADIUS for our vpn authentication. When using Radius is it
possible to
assign a specific address to a user when they authenticate? I would like
a
given user to always receive the same IP address when they connect. I
know
that the information can be assigned from my RADIUS server, I am just
not
sure if RRAS will honor the assignment.
Thanks
Bill
William Holmes (MCP)
Department of Computer Science
310 Upson Hall
Cornell University
Ithaca, NY 14853
wtholmes@xxxxxxxxxxxxxx
607 255-1757 (o) 607 227-6049 (c)
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
