Deploying Internet Connection Services for RAS on an Internet Service

After all your Internet Connection Services for RAS applications are installed, youÆre ready to configure them. Depending on how youÆre going to use Internet Connection Services for RAS, you might configure the applications differently. This section uses an example configuration to describe how to deploy Internet Connection Services for RAS on your Internet service.

The example configuration is a common scenario in which an ISP and a corporation have deployed Internet Connection Services for RAS to build secure remote access to a corporate private network using the Internet. In this configuration, the ISP is responsible for deploying Connection Point Services and Internet Authentication Services on their network. They are also responsible for installing Connection Manager Administration Kit and building a custom dialer for the corporate customer, with automatic support for PPTP and a customized look and feel.

The following list describes the steps an ISP must go through to deploy Internet Connection Services for RAS applications with a corporation:

Identify all RADIUS attributes used by the corporation.
Identify usage patterns for prefixes and suffixes in the corporate realm name.
Install a RADIUS proxy. Provide the UDP port number and IP address (or DNS name and password) to the corporation.
Install Windows NT 4.0 Option Pack, including Internet Connection Services for RAS.
Start Internet Authentication Service and set authentication service properties.
Register Network Access Server (NAS) clients.
Create new RADIUS profiles or use existing RADIUS profiles.
On your server computer, start the Phone Book Administrator tool and enter corporate access numbers.
Build a custom phone book for the corporation.
Start Connection Manager Administration Kit Wizard.
Create a custom dialer with support for PPTP, if necessary.
Develop a strategy for distributing the custom dialer to your corporate customer.

Note

The Commercial edition of Internet Authentication Services includes proxy capability.