Re: Radius server in a DMZ, how to authenticate AD users ?

I must stress the fact that domain membership of the IAS server will be a requirement - the firewall considerations part of TechNet concerns a firewall between RADIUS clients (wireless APs and controllers) and IAS.

There's no need to host IAS on DMZ.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

<jwgoerlich@xxxxxxxxx> wrote in message news:1181685904.977575.66630@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
You can make the Radius/IAS server a domain member on a DMZ. See if
these two articles help:

Windows Server 2003 Technical Library > Planning for IAS as a RADIUS
Server
IAS as a RADIUS server security considerations
http://technet2.microsoft.com/windowsserver/en/library/bfa1451a-6f53-4792-98a0-00d10977fd2c1033.mspx?mfr=true

Securing IAS: IAS and firewalls
http://technet2.microsoft.com/windowsserver/en/library/bfa1451a-6f53-4792-98a0-00d10977fd2c1033.mspx?mfr=true

Regards,

J Wolfgang Goerlich

On Jun 12, 4:35 am, Pascal <pasca...@xxxxxxxxxxxxxxxxxx> wrote:
Hello,

we have a wifi project and we would like to authenticate Active
Directory users.

Is there a way to add the Radius server in a DMZ without being member
of the AD domain and authenticate the wifi users ?

Do you know basic secure infrastructure for such a situation ?

Thank you

--
Pascal



Thank you for your answers.

But is it really secure to join the radius to the domain ?

--
Pascal


.

Relevant Pages