TABLE OF CONTENTS Design security for remote access users.
Design a remote access strategy.
Identify security host requirements.
Identify the authentication and accounting provider.
Specify the remote access method.
Design an IP address assignment strategy.
Specify DHCP integration with DNS infrastructure.
Specify DHCP interoperability with client types.
Design remote access policies.
Specify logging and auditing settings.
Specify the authentication method for remote access.
A further consideration when designing an Active Directory network infrastructure is that of remote access and the management of IP addresses. The methods used to gain remote access into the organization's network and the users and locations used for remote access can impact the implementation of Active Directory and must therefore be carefully considered. Additionally, since Dynamic Host Control Protocol (DHCP) is widely used as a way of managing IP addresses (through scopes), this topic must also be included in any design and implementation plans.
The chapter starts with a discussion of remote access, the available methods, and the locations from which remote access must be provided. Furthermore, the available authentication methods need to be assessed in light of the fact that multiple clients may need to gain remote access.
Moving on to the RAS implementation itself, we discuss the implications of an RAS deployment with respect to Active Directory, the policies that are available for users as well as machines, the chosen authentication strategy and how it is to be implemented, and accounting strategies.The final RAS topic discussed is auditing an often overlooked but nevertheless...
