Information Technology Reference
In-Depth Information
Service-Type
Tunnel-Type
User-Name
Client-IP-Address
NAS-Port-Type
7.
Click Add to select a profile condition. For each condition that you add, you will be
prompted to configure the appropriate information for that condition. For example, if
you select Day-And-Time-Restrictions, you'll be prompted to configure the days and
times to which this policy should apply.
8.
Click Next when you've finished configuring connection policy conditions.
9.
On the Profile screen, click Edit Profile to modify any additional settings that should
apply to this policy.
10.
Click OK when you've configured the connection request profile.
11.
Click Next to continue.
12.
Click Finish to create the new policy.
13.
If there are multiple policies configured for the IAS server, right-click the policy and
select Move Up or Move Down as necessary to place it in the correct processing order.
How It Works
In IAS, connection request policies contain a set of conditions and profile settings that deter-
mine how incoming RADIUS messages are handled by the IAS server. As with remote access
policies, you can create multiple connection request policies so that certain RADIUS requests
are processed locally, such as when IAS is being used as a RADIUS server, and other requests
are forwarded to another RADIUS server. The latter configuration utilizes IAS as a
RADIUS proxy
.
You can determine whether an incoming connection should be handled locally or forwarded
to a remote server based on the time of day and day of the week, the realm name being used in
the request, the IP address of the requesting client, and any number of other conditions. Allowing
a single IAS server to serve in both a local and proxy capacity allows you to deploy IAS to fit a
number of RADIUS scenarios.
See Also
Recipe 6-10 for configuring RADIUS server groups
Microsoft TechNet: “Connection Request Policies” (
http://www.microsoft.com/
technet/prodtechnol/windowsserver2003/library/ServerHelp/
32ac0173-a684-452c-af39-6fb903114103.mspx
)
Microsoft TechNet: “Processing a Connection Request” (
http://www.microsoft.com/
technet/prodtechnol/windowsserver2003/library/ServerHelp/
e7ada3db-db30-4bf2-8efb-f128c18d47dd.mspx
)
