Information Technology Reference
In-Depth Information
How It Works
Before you can configure an IAS server as a RADIUS proxy, you need to specify the remote
RADIUS servers to which connection requests should be forwarded. The wizard allows you to
quickly configure a remote server group that adheres to the most typical RADIUS server config-
uration; that is, a primary RADIUS server with an additional server acting as a backup to provide
service continuity in case the primary server fails. Using this option will configure both servers
using all default values for items such as the UDP ports that are used for authentication and
authorization traffic, as well as the priority and weight of each server.
When submitting traffic to a remote server group, RADIUS will use the priority setting of
each group member to determine which server to use. A server with a lower priority number
will be used before a server with a higher priority number. The weight of each group member
will assist in load balancing, determining how often a particular server will be used if two
servers have the same priority. By default, a server group in the typical configuration will have
a primary server with a priority of 1 and a weight of 50, and a backup server with a priority of 2
and a weight of 50. If the default group configuration is not sufficient for your needs, you can
manually configure all aspects of the group.
Remember that the Standard Edition of Windows Server 2003 allows for a maximum of
two
remote RADIUS server groups. If you need to configure more groups, you'll need to move
to the Enterprise or Datacenter Edition of Windows Server 2003, which allows for unlimited
server groups.
See Also
Microsoft TechNet: “Remote RADIUS Server Groups” (
http://www.microsoft.com/
technet/prodtechnol/windowsserver2003/library/ServerHelp/
cccd7ee3-aeaa-4fb7-a7ba-cf808e2e9980.mspx
)
Microsoft TechNet: “Configure the Authentication and Accounting Settings of a Group
Member” (
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/
library/ServerHelp/f36d46f8-22bf-4fc4-8348-834babf82386.mspx
)
Microsoft TechNet: “Configure the Load Balancing Properties of a Group Member”
(
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/
ServerHelp/1b40a8a1-54f0-461f-a8df-ca4b40901dfb.mspx
)
6-11. Adding RADIUS Attributes to a Remote Access Policy
Problem
You want to add RADIUS-specific attributes to an existing remote access policy.
Solution
1.
Open the IAS MMC snap-in.
2.
Select the Remote Access Policies node in the left pane.
3.
Right-click the policy that you want to modify and select Properties.
