RRAS and IAS

[kccane03]

What's the difference? I want to setup a VPN to my companies network. I
want some of the users to be able to authenitcate, get email, and map
drives. I have a cisco PIX 525 firewall right now. I was thinking of
setting up a Windows 2000 Server with Routing and Remote Access Service on
it. Will this work fine?

 

[Bill Grant]

RRAS allows the server to act as a remote access server, and allows RAS
and/or VPN connections to be made to it. The clients are authenticated by
the Windows accounts database, either the SAM of the RRAS machine itself or
by Active Directory if you are running AD.

IAS allows a Windows server to act as a RADIUS server to authenticate
clients connecting to a non-Windows remote access device.

So it you are running a Windows setup with AD, remote clients can
connect to a RRAS server and be authenticated by AD. This is handled by AD
and does not require installing IAS. IAS is only required if your remote
access service is not a Windows device, but you want the clients to be
authenticated by the Windows accounts system. The RAS device will forward
authentication requests to the IAS server.