More Related Content
What's hot (19)
Viewers also liked (12)
Similar to Vpn authenticate via radius srv (20)
More from Hate To Love (20)
Vpn authenticate via radius srv
- 1. Ph畉n II: Tri畛n khai VPN x叩c th畛c d畛a vo Radius server Trong ph畉n tr動畛c m狸nh 達 gi畛i thi畛u v畛i c叩c b畉n v畛 Tri畛n Khai VPN s畛 d畛ng Routing and Remote Access c畛a Windows Server 2003 Enterprise. 畛 ti畉p n畛i bi vi畉t trong lo畉t bi vi畉t VPN ton t畉p th狸 m狸nh s畉 gi畛i thi畛u v畛i c叩c b畉n Ph畉n II: Tri畛n khai VPN x叩c th畛c d畛a vo Radius server, v畛i m畛c 鱈ch b畉o m畉t Active Directory (VNP Server kh担ng c畉n join domain m v畉n c坦 th畛 x叩c th畛c 動畛c user s畛 d畛ng VPN). I. M担 h狸nh: II. Chu畉n b畛: 1 m叩y s畛 d畛ng h畛 i畛u hnh Windows Server 2k3 ho畉c 2k8, n但ng c畉p l棚n Domain Controller v畛i domain l: networking.vn IP: 192.168.1.2 SM: 255.255.255.0 DG: 192.168.1.1 DNS: 192.168.1.2 1 m叩y s畛 d畛ng HDH Windows Srv 2k3 ho畉c 2k8 kh担ng join domain lm VNP Server. Card LAN IP: 192.168.1.1 SM: 255.255.255.0 DG: Kh担ng DNS: Kh担ng Card NET IP: 10.1.1.28 SM: 255.255.255.0 DG: 10.1.1.1 DNS: 208.67.222.222
- 2. 1 m叩y s畛 d畛ng HDH workstation (Windows Vista ho畉c XP). IP: 10.1.1.200 SM: 255.255.255.0 DG: 10.1.1.1 DNS: 208.67.222.222 III. C畉u h狸nh 1. Tr棚n m叩y Domain (Radius Server) T畉o group name: VPN T畉o user: networking pass: anhyeunang@123 Ducnv pass: anhyeunang@123 Start Control Panel Add or Remove Program Add/Remove windows components Ch畛n Networking Services Ch畛n Details Sau 坦 check vo d畛ch v畛 Internet Authenticate Service
- 3. Ti畉p 畉n ch畛n Ok Next Finish Sau khi ci 畉t xong d畛ch v畛 IAS, ch炭ng ta s畉 i c畉u h狸nh d畛ch v畛 坦 畛 bi畉n m叩y t鱈nh AD c畛a ch炭ng ta thnh RADIUS Server. Truy c畉p vo c畛a s畛 RUN ias.msc 畛 g畛i ra giao di畛n c畉u h狸nh Internet Authentication Service. Ban 畉u ch炭ng ta ph畉i ng k箪 Radius Server v畛i AD.
- 4. ng k箪 xong ch炭ng ta s畉 t畉o Radius Client nh動 sau: Cung c畉p t棚n m ch炭ng ta mu畛n t畉o v 畛a ch畛 IP Adapter k畉t n畛i v畛i Radius Server c畛a Radius Client. C坦 th畛 click Verify xem c坦 炭ng IP nh動 v畉y kh担ng?
- 5. Next Nh畉p vo Shared secret Key share 畛 k畉t n畛i b畉o m畉t Radius Srv v Client Finish. B動畛c ti畉p theo ch炭ng ta s畉 t畉o m畛i m畛t ch鱈nh s叩ch truy c畉p t畛 xa. Ch畛n Set up a custom policy v c担ng c畉p t棚n Policy VPN authenticate Next.
- 6. Sau 坦 ch畛n Add windows Groups Add group VPN m ch炭ng ta 達 t畉o tr棚n Radius Srv.
- 7. T畉i c畛a s畛 Permissions ch炭ng ta s畛 d畛ng tr湛y ch畛n: Grant remote access permission. Sau khi Next t畛i ch炭ng ta ch畛n Edit profile
- 8. Chuy畛n sang Tab Authentication check vo t湛y ch畛n Unencrypted authentication(PAP,SPAP). Ok Next Finish v畉y l k畉t th炭c qu叩 tr狸nh ci 畉t v c畉u h狸nh tr棚n RADIUS Server.
- 9. 2. Tr棚n m叩y VPN Server (Radius Client) Start Administrative Tools Routing and Remote Access. Enable Routing and Remote Access C畛a s畛 welcome ch畛n Next.
- 10. C畛a s畛 Configuration ch畛n Custom Configuration 畛 ch畛n nh畛ng thu畛c t鱈nh trong Routing and Remote Access Next. Custom Configuration check vo VPN access v Lan routing 畛 cho ph辿p client truy c畉p VPN qua v 畛nh tuy畉n gi畛a 2 card m畉ng LAN v NET Next.
- 11. Hon thnh qu叩 tr狸nh Setup Routing and Remote Access ch畛n Finish. C畛a s畛 y棚u c畉u c畉n ph畉i kh畛i 畛ng l畉i d畛ch v畛 Yes
- 12. Sau 坦 ch炭ng ta s畉 Click ph畉i chu畛t vo Radiusclt ch畛n Properties Chuy畛n sang Tab SecurityAuthentication provider ch畛n RADIUS Authentication Configure
- 13. Trong c畛a s畛 RADIUS Authentication ch畛n Add
- 14. Cung c畉p 畛a ch畛 IP c畛a m叩y RADIUS Server r畛i m畛c Secret nh畉n Change Change Secret ch炭ng ta cung c畉p key gi畛ng nh動 b棚n RADIUS 達 c畉u h狸nh l: anhyeunang@123.
- 15. Check vo Always use message authenticator. Sau 坦 ch畛n Ok trong h畛p tho畉i h畛 th畛ng y棚u c畉u ph畉i kh畛i 畛ng l畉i d畛ch v畛. Chuy畛n qua Tab IP Static address Pool (cung c畉p d畉i 畛a ch畛 畉o cho c叩c client truy c畉p VPN v server)
- 17. Ch畛n Ok v kh畛i 畛ng l畉i d畛ch v畛.
- 18. 3. Tr棚n m叩y Client s畛 d畛ng truy c畉p VPN. Ph畉i chu畛t vo My Place network Properties Create a new connection. Ch畛n Connect to the network at my workplace Next.
- 19. Ch畛n Virtual Private Network connection Next. Cung c畉p Company name: Networking Next.
- 20. Cung c畉p 畛a ch畛 IP card NET c畛a Radius Client Next. Cung c畉p username/password 畛 truy c畉p VPN Connect
- 21. Qu叩 tr狸nh ki畛m tra username/password v register to network. Ch畛ng th畛c xong th狸 s畉 th担ng b叩o tr畉ng th叩i k畉t n畛i thnh c担ng.
- 22. Ch炭ng ta d湛ng c但u l畛nh ipconfig /all 畛 ki畛m tra xem k畉t n畛i VPN v畛i 畛a ch畛 no nh動 b棚n d動畛i. V畉y l hon t畉t 100% c畉u h狸nh k畉t n畛i VPN x叩c th畛c d畛a tr棚n RADIUS Srver.
- 23. Ch炭c c叩c b畉n thnh c担ng.