220 likes | 503 Views
Remote Access Services. Intro to Remote Access Services. Routing and Remote Access Services (RRAS) Enable routing and remote access through virtual private networking and dialup networking Virtual private network (VPN)
E N D
Intro to Remote Access Services • Routing and Remote Access Services (RRAS) • Enable routing and remote access through virtual private networking and dialup networking • Virtual private network (VPN) • Tunnel through a larger network that is restricted to designated member clients only • Dial-up networking • Using a telecommunications line and a modem to dial into a network or specific computers on a network
Introduction to Remote Access • RRAS • Turns server into a dial-up Remote Access Services (RAS) server capable of handling hundreds of simultaneous connections
Implementing a Virtual Private Network • VPN • Uses LAN and tunneling protocols • Encapsulates data as it is sent across a public network • Benefits of using a VPN • Users can connect through a local ISP to the local network • Ensures that any data sent across a public network is secure • Encrypted tunnel
Using Remote Access Protocols • Function of the remote access protocol • Encapsulate a packet • TCP/IP is the most commonly used transport protocol • Encapsulated in a remote access protocol for transport over a WAN • Other legacy transport protocols • IPX for legacy NetWare networks • NetBEUI for legacy Microsoft networks • Not supported by Windows Server 2008
Using Remote Access Protocols (cont’d.) • Serial Line Internet Protocol (SLIP) • Originally designed for UNIX environments • Provides point-to-point communications using TCP/IP • Compressed Serial Line Internet Protocol (CSLIP) • Newer version of SLIP • Compresses header information in each packet • SLIP and CSLIP do not support • Network connection authentication
Using Remote Access Protocols (cont’d.) • SLIP and CSLIP do not support (cont’d.) • Automatic negotiation of the network connection through multiple network connection layers at the same time • Point-to-Point Protocol (PPP) • Has more capability than SLIP • Remote access protocols • Point-to-Point Tunneling Protocol • Layer Two Tunneling Protocol • Secure Socket Tunneling Protocol
Using Remote Access Protocols (cont’d.) • Point-to-Point Tunneling Protocol (PPTP) • Offers PPP-based authentication techniques • Encrypts data carried by PPTP through using Microsoft Point-to-Point Encryption • Microsoft Point-to-Point Encryption (MPPE) • Starting-to-ending-point encryption technique that uses special encryption keys varying in length from 40 to 128 bits
Using Remote Access Protocols (cont’d.) • Layer Two Tunneling Protocol (L2TP) • Works similarly to PPTP • IP Security (IPsec) • IP-based secure communications and encryption standards created through the Internet Engineering Task Force (IETF) • Secure Socket Tunneling Protocol (SSTP) • Employs PPP authentication techniques • Encapsulates data packet in the Hypertext Transfer Protocol (HTTP)
Using Remote Access Protocols (cont’d.) • Secure Sockets Layer (SSL) • Data encryption technique employed between a server and a client • PPP, PPTP, and L2TP are available in: • Windows 2000, Windows XP, Windows Vista, Windows 7 • Windows 2000 Server, Windows Server 2003, Windows Server 2008 • SSTP is available in: • Windows Server 2008, Windows Vista, Windows 7
Connecting Through Terminal Services • Terminal server • Enables clients to run services and software applications on Windows Server 2008 instead of at the client • Enables thin clients to perform most CPU-intensive operations on the server • Centralize control of how programs are used • Install different role services for specific purposes: • TS Web Access • TS Gateway
Connecting Through Terminal Services (cont’d.) • RemoteApp • New feature • Enables a client to run an application without loading a remote desktop on the client computer • TS Gateway • Provides a secure way to use Terminal Services over the Internet
Installing Terminal Services • Install TS Licensing role service • Manage terminal server user licenses obtained from Microsoft • Licenses can be purchased either per user account or by client device • Network Level Authentication (NLA) • Enables authentication to take place before the Terminal Services connection is established • Thwarts would-be attackers • Create groups of user accounts in advance • Add these groups during installation
Managing Terminal Services • Terminal Services Manager • Monitor the number of users connected to the terminal server • Add additional terminal servers to monitor • Determine if a user session is active • Determine which programs are running in a user’s session • Disconnect a user’s session or log off a user • Reset a connection that is having trouble • Send a message to a user
Configuring Licensing • Activate Terminal Services licensing server • Configure licensing using TS Licensing Manager
Accessing a Terminal Server from a Client • Remote Desktop Connection (RDC) • Client already installed in Windows 7, Windows Vista, Windows Server 2008, and Windows XP
Installing Applications on a Terminal Server • Might need to reinstall some applications that were installed before Terminal Services role • Use Control Panel to uninstall them • Reinstall applications • In Control Panel Home view, click Programs • Click Install Application on Terminal Server
Summary • Routing and Remote Access Services includes • Virtual private network (VPN) and dial-up services • Remote access protocols include: • SLIP, CSLIP, PPP, PPTP, L2TP, and SSTP • Use Server Manager to install the Network Policy and Access Services role • VPN has many properties that can be configured • Configure a remote access policy to govern how a VPN server is accessed
Summary (cont’d.) • When you configure dial-up remote access • Also configure a DHCP Relay Agent, Multi-link (if used), and a remote access policy for security • Use Server Manager to install the Terminal Services role • Configure Terminal Services client access licenses