Considerations for Designing Authentication and Accounting for Remote Network Access Using IAS

This section explains what the Internet Authentication Service (IAS) is, describes how to design remote network 70-297 Exam access by using IAS, and then provides considerations for RADIUS configuration, network locations, and Network Access Quarantine Control.
The IP address of the NAS (the RADIUS client) that sent the message.
The type of media used by the access client; for example, you might choose aysnch (for analog phone lines), ISDN, tunnels, virtual (for VPNs), or IEEE 802.11 wireless or Ethernet (for Ethernet connections such as Ethernet switches).
The type of service that is requested—for example: framed (such as a PPP connection) or login (such as a Telnet connection).
The tunnel type created by the requesting client—for example, PPTP or L2TP. It can be used to specify profile settings, such as authentica?tion method or encryption strengths.
The name of the group to which the user or computer account is attempting to connect.
This page is where dial-in constraints are set. The constraints included are: idle time, connection limit, days and times, specified number, and specific media (async, ISDN, virtual, or 802.11).
This page is used to set the number of ports a multilink connection can use and specifies MCSE exams Bandwidth Allocation Protocol (BAP) policies. (The RRAS server must have multilink and BAP enabled for these to work.)
User Account Dial-in and Remote Access Policies Are Evaluated When Windows authentication is selected (that is, when no IAS server is used) or if the IAS Ignore-User-Dialin-Properties attribute is set to false, the following process is used to evaluate a connection attempt.
The dial-in property page allows specification by the user (the page is set to Allow or Deny) or by Remote Access Policy.
At VPN connection time, a Windows-based VPN client creates a new default route for the connection.
Because the VPN route is the default route, the IP address of the tunnel server can still be reached, other routes configured on the client can still be used, and all other Internet locations are not reachable as long as the client is connected MCITP certification to the VPN server.