--------------------------------------------------
Primary product documentation for IAS
· Online help included with the Windows 2000 and Windows .NET Server
families
IAS online help includes checklists for installation and configuration,
instructions for specific procedures, background information on IAS and
RADIUS, common RADIUS scenarios, and troubleshooting.
To access IAS online help for the Windows 2000 Server family, click Start,
then click Help. In the tree pane of the Windows 2000 help dialog box, open
Networking, and then open Internet Authentication Service. You can also
access IAS Help from within the Internet Authentication Service snap-in. You
can also access IAS Help on the Web at
http://www.microsoft.com/windows2000/en/server/help/. In the tree pane, open
Networking, and then open Internet Authentication Service.
To access IAS online help for the Windows .NET Server family, click Start,
then click Help and Support. Under Contents, click Network Services. Click
Managing Remote Connections, and then click Internet Authentication Service.
You can also access IAS Help from within the Internet Authentication Service
snap-in.
· Windows 2000 Server Resource Kit
The Internet Authentication Service chapter of the Windows 2000 Server
Resource Kit Internetworking Guide at
http://www.microsoft.com/windows2000/techinfo/reskit/en-us/intwork/inbc_ias_
elfq.asp?frame=true contains technical details of RADIUS messages, IAS
processes, security considerations, performance tuning, and additional
troubleshooting.
White Papers and Articles
IAS for Windows 2000 is described in the following white papers and
articles:
· "Internet Authentication Service for Windows 2000" white paper at
http://www.microsoft.com/windows2000/techinfo/howitworks/communications/remo
teaccess/ias.asp
Combines information from Windows 2000 Help and the Windows 2000 Resource
Kit into a single paper. Includes additional information on performance and
capacity planning, registry settings, performance counters, and a FAQ.
· RADIUS Protocol Security and Best Practices article at
http://www.microsoft.com/windows2000/techinfo/administration/radius.asp.
Describes the security issues of the RADIUS protocol and how they can be
minimized or resolved using implementation and deployment best practices.
· Access Server Requirements for Interoperability with the Internet
Authentication Service at
http://www.microsoft.com/windows2000/techinfo/howitworks/communications/remo
teaccess/iasinterop.asp
· "Enterprise Deployment of IEEE 802.11 using Windows XP and Windows
2000 Internet Authentication Service" white paper at
http://www.microsoft.com/WindowsXP/pro/techinfo/deployment/wireless/default.
asp.
Describes how to deploy IEEE 802.11 wireless access with IEEE 802.1X
authentication using wireless access points, Windows XP wireless client
computers, and the Windows 2000 Internet Authentication Service.
· "Managing Remote Access on a Per-group Basis Using Windows 2000
Remote Access Policies" article at
http://www.microsoft.com/windows2000/techinfo/administration/management/pgre
mote.asp.
Describes how to use remote access policies to allow or deny connections
based on group membership.
· Online Seminar on Windows 2000 Networking Infrastructure at
http://www.microsoft.com/Seminar/Includes/Seminar.asp?Url=/Seminar/1033/2000
0919TNQ201-04/Portal.xml.
Describes Windows 2000 networking infrastructure components including IAS
and remote access policies.
Deployment Scenarios using IAS
The following Windows 2000 Deployment Lab Resource Kit scenarios describe
the configuration of Windows 2000-based remote access and VPN servers as
RADIUS clients to an IAS server in an Active Directory domain:
· Connecting a Branch Office Using L2TP at
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/sce
narios/route03_connectingbranchofficeusingl2tp.asp.
· Connecting Remote Users Across the Internet Using PPTP at
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/sce
narios/ras03_connectremoteusersacrossinternetusingpptp.asp.
· Connecting Remote Users Across the Internet Using L2TP at
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/sce
narios/ras04_connectingremoteusersacrossinternetusingl2tp.asp.
· Creating a Business Partner Extranet Connection at
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/sce
narios/route04_creatingbusinesspartnerextranetconnection.asp.
· Connecting Dial-up Remote Access Users to an Intranet at
http://www.microsoft.com/windows2000/techinfo/reskit/deploymentscenarios/sce
narios/ras02_connectingdial-upremoteaccessuserstointranet.asp.
Additional Documentation on Wireless and Certificates
In addition to documentation on IAS, it might be helpful to review the
following documents on wireless technologies in Windows XP and certificate
infrastructure in Windows 2000.
Windows XP Wireless LAN documentation
Wireless LAN technology and Windows XP support is described in the
following:
· "Wireless LAN Technologies and Windows XP" white paper at
http://www.microsoft.com/windowsxp/pro/techinfo/planning/wirelesslan/default
.asp.
· "Enabling IEEE 802.11 Networks with Windows "Whistler"" white
paper at http://www.microsoft.com/hwdev/wireless/IEEE802Net.htm.
Windows 2000 Certificate Infrastructure
Windows 2000 certificate infrastructure is described in the following:
· "An Introduction to the Windows 2000 Public Key Infrastructure"
white paper at
http://www.microsoft.com/windows2000/techinfo/howitworks/security/pkiintro.a
sp.
· "Cryptography and PKI Basics" white paper at
http://www.microsoft.com/windows2000/techinfo/howitworks/security/cryptpki.a
sp.
· "Microsoft Windows 2000 Public Key Infrastructure" white paper at
http://www.microsoft.com/windows2000/techinfo/planning/security/pki.asp.
· "Windows 2000 Certificate Services" white paper at
http://www.microsoft.com/windows2000/techinfo/howitworks/security/windows200
0csoverview.asp.
· Step-by-Step Guides for Security Services at
http://www.microsoft.com/windows2000/techinfo/planning/walkthroughs/default.
asp#section7.
· "Planning your Public Key Infrastructure", Chapter 12 of the
Windows 2000 Server Resource Kit Deployment Planning Guide at
http://www.microsoft.com/windows2000/techinfo/reskit/dpg/default.asp.
"gustavo" <gue...@coto.com.ar> wrote in message
news:#mjbNQKsBHA.1864@tkmsftngp07...