Chapter 9 of the 291 book

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

So like the title says I am on chapter 9 of the 291 ms press book... up until now I can't say that it's too hard, there were a couple of DNS sections I had to re-read like zone delegations and stub zones but it wasn't too bad... However the RRAS stuff is a little tricky. I am just curious, how many of you actually do use the RRAS feature of windows server 2003?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Not used much of it myself to be honest but good to know anyways. The only thing i saw in the book recently was the setclassid thing which i had never come across which is pretty nifty.

 

SetclassID for the DHCP scope options? yes I agree, that can come in use... but RRAS, I don't really see the need unless you want a router with AD integration for security reasons I guess.

 

Cool... I do find it interesting that you can do that with Windows Server 2003, but I just never heard of anyone implementing this... I know people just get routers and it does the trick plus having a proxy like ISA adds that extra level of security...

 

Quite a few of our customers use it for two reasons:

- Ease of use, ie the customer uses the same login details as on there PC.
- Cheap and easy to install.

We normally deploy with MSChap v2 and 128BitMPPE Security.

Clients who are a larger size tend to go for SSL VPN devices as you only have to open Port 443 to it only. However, I have to say some of these devices do tend to be slightly flaky.

Other clients who go for a Cisco environment, tend to use Cisco VPN Client using L2TP IPSec.

Depends on the budget and what they are looking to achieve.

Do I like PPTP, yep, you can lash it in and just forward a port, happy days!

 

Cool, it's what I wanted to know! now back to RRAS review.