Introduction

In today s business world, users need access to the company network not only when they re on company premises, but from home and when they re on the road, as well. An important part of the network administrator s job is to design and implement a strategy for allowing authorized users to connect to network resources without compromising security. Windows Server 2003 includes technologies and features that make this easier.

This chapter examines the issues and procedures involved in devising a remote access strategy, including planning tasks such as analyzing organizational needs, analyzing user needs, and selecting the remote access types that will be allowed (dial-in, VPN, and/or wireless). We ll discuss design considerations related to dial-in access, such as the allocation of IP addresses, how to determine incoming port needs, and how to select the best administrative model based on your organizational needs and the functional level of your domain.

Next, we ll talk about design considerations related to VPN access. You ll learn how to select the VPN protocols to be allowed, based on client support, PKI requirements, and the need for data integrity and sender authentication. You ll learn how to install machine certificates, how to configure firewall filters, and how to create access policies governing VPN connections.

In the next section, you ll learn about the design considerations that relate to wireless remote access. We ll discuss the use of IAS for wireless connections, and how to configure remote access policies for wireless connections. We ll address the use of multiple WAPs and the advantages...