Remote Access Server Configuration Guidelines

By Author: Shirley Green
Total Articles: 129
Comment this article

Follow these guidelines to configure the remote access server:
Use packet filters on the MCSE Exams remote access server to ensure only VPN protocols are accepted on the Internet-facing connection.
Configure both PPTP and L2TP/IPSec VPN protocols in cases where some clients cannot use L2TP/IPSec but you want to secure communications with the highest
security possible. Clients will always try to use L2TP/IPSec unless configured to use PPTP.
Choose most secure authentication protocols:
Do not allow PAP for authentication because it requires a clear-text password.Require smart cards for authentication where possible.
Where EAP is not an option, ensure MS-CHAPv2 is the only protocol selected. (By default, MS-CHAP is also selected.)
Configure VPN server authentication so that MS-CHAPv2, EAP authentication types, or both are the only authentication choices MCSE Certification. Clients that are not configured to use selected server protocols will not be able to connect.
Configure encryption strength to the ...
... strongest option available. This will provide
128-bit MPPE (for PPTP connections) and 3DES IPSec (for L2TP/IPSec) connections.
Use remote access policies:
Use IAS if more than one remote access server is required. This means con?sistent remote access policy application and improved accounting.
Use packet filters on the remote access policy profile settings for the VPN connection to ensure that only traffic originating from remote access clients is accepted. The default remote access policy Connections To Microsoft Routing And Remote Access Server has these packet filters configured.
If an ISP's RADIUS database is used for authentication, use free CompTIA practice tests services to direct authorization choices to internal remote access services. This provides you with control over authorizatio