Radius authentication
We have a Windows 2000 VPN for remote users. We authenticate them with Radius to our NT 4.0 primary domain controller and assign 192.168.X.X addresses through Dynamic Host Configuration Protocol (DHCP). It is not in production for two reasons.
- Remote users connect to their ISP, use the VPN adapter, and are given a full complement of DHCP-provided information, including the addresses of our DNS servers. The problem is that the clients keep flapping between the internal DNS server and the ISP-provided DNS server. This makes the mail server available, unavailable and available again. Successive pings to the DNS name of the mail server return the external address, then the internal, then the external, and so on.
- We also have problems passing the subnet mask to dial-up clients.
Turning off the use of the ISP-provided DNS server on the dial-up clients will force VPN-connected sessions to use your internal DNS servers. This may require a separate connection setup configured with the IP address of your VPN gateway so the client can find the VPN server without using DNS.
The subnet mask trouble may be related to the DNS flapping between two network adapters, but see if there are conflicts in your dial-up DHCP server configuration and interface settings.
» posted by ITworld staff
Network World
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
jfruh
Apple syncing patent can't come soon enough
pasmith
New Twitter features borrow from 3rd party clients
Esther Schindler
Open Source Changes the Software Acquisition Process
mikelgan
How to set up continuous podcast play on the new iTunes
David Strom
Five important Windows 7 mobility features
sjvn
Guard your Wi-Fi for your own sake
Sandra Henry-Stocker
Grepping on Whole Words
Sidekick: The Good News & the Bad News
Either way you look at it Microsoft Data Center management did not follow standards or best practices in this failure. In which case it makes me wonder more about the outsourcing of corporate data much less personal data.
- mburton325
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.
