Contents
Remote Access Setup Contents

What Is the Remote Access Service?

The Remote Access Service lets workstations at remote sites access network servers transparently, as though they were physically connected to the network. Remote Access connections can be established over public telephone lines, X.25 networks, or ISDN networks.

What Remote Access Setup Does

The Remote Access Setup program lets you install the Remote Access drivers, select ports for Remote Access to use, and select how each port will be used (for dialing out, receiving calls, or both). If you choose to receive calls, you may choose to give callers access to the entire network or restrict access to the Remote Access server.


Remote Access Setup Help

This dialog box lists ports configured for the Remote Access Service and the device attached to each port.

Click this	To do this
Add	Make a port available to Remote Access Service.
Remove	Make a port unavailable to Remote Access Service.
Configure	Change the Remote Access settings for the port, such as the attached device or the intended usage (dialing out only, receiving calls only, or both).
Clone	Copy the same modem setup from one port to another.
Network	Configure RAS server-wide settings. Set network access to entire network or RAS computer only. Select and configure network protocols the RAS server will support. Select network protocols the computer will use for dial out (client) connections. Set authentication and data encryption options.
Disable automatic restoration of network connections at logon	Clear this check box to restore your previous network connections when you log on to your computer.  This box is checked by default if Remote Access is the only network port on the system. Restoring connection over a remote link can be especially time consuming.
Continue	Proceed to the next step in Setup when you have finished with this dialog.
Cancel	Leave the Setup program.


Add Port Help

To add a port for the Remote Access Service, select a port from the list box, and click OK.

Ports not in the list cannot be installed with Remote Access Setup. You must install them before running Remote Access Setup, using the manufacturer's installation program. For further information, see the manufacturer's documentation.


RAS Server NetBEUI Configuration

Choose the level of access you want to grant all users who dial in to this computer using the NetBEUI protocol.

Allow remote NetBEUI clients to access

Entire network	Grants users permission to access resources on the network.
This computer only	Grants users permission to access only the resources on this computer.


Configure Port Help

Specify and configure the device attached to the port selected, and if the port will be used as a client (dial out), as a server (receive calls), or both.

To configure a port

1.	Click the detect button to have RAS setup detect the modem connected to the selected port. If detect fails, or you know the exact modem, select the device attached to the port. Only supported modems will be listed.

2.	When the attached device is selected, click Settings to configure modem settings for the device attached to the port.

3.	In the Port Usage field choose how the port is to be used: Dial out only, Receive calls only, or both. The Remote Access Service must be started before calls can be received on a port.

4.	Click OK when you are finished configuring the port.


Modem Settings Help

These options apply when the port is being used for receiving calls. For dialing out, set these parameters for each entry using the Remote Access Phone Book.

Setting	Function
Enable modem speaker	Turns on phone sounds when dialing in.
Enable hardware flow control	Enables RTS/CTS handshaking between the modem and computer. This feature increases the speed and reliability of operations because the receiver can stop data flow if it falls too far behind. When hardware flow control is not enabled, you run the risk of an overrun error.
Enable error control	Enables error checking on blocks of data through cyclic redundancy checks (CRCs). Modem error control increases efficiency by eliminating start and stop bits.
Enable modem compression	Compresses the modem-to-modem data stream, reducing the number of bytes transmitted and therefore reduces the transmission time. The reduction achieved depends on the amount of redundancy in the transmitted data.


Dial-in, Dial-out, Administrator's Utility Help
This screen sets up a client, a server, and the Administrator's utility.

1.	Choose one or more of the three options to add to your Windows NT setup.

To help make this decision, the screen shows the number of bytes required for each option. At the bottom, it records the total number of bytes required by your selections and reports the available disk space.

2.	Once you have made your selection, click Continue.


User Permission Help

To maintain security, Remote Access permissions are not assigned by default. You must explicitly grant permission to users. After the Remote Access Service is installed and your computer is restarted, you can grant user permissions.

To grant user permissions

1.	Start the Remote Access Administrator's utility.

2.	From the Users menu, choose Permissions.

The Remote Access Permissions screen appears.

To get information about setting permissions, click the Help button on the screen.


ISDN Settings Help

Change any default ISDN settings you need to, and click OK.

Line type

Sets the type of ISDN connection. The choices are in order from the highest quality (64K Digital) to the lowest (56K Voice).

Negotiate line type

Starts at the selected line type and negotiates to a lower quality line type, depending on the line's condition.

Enable hardware compression

Compresses data before transmitting it, thereby enhancing data throughput.

Note  Not all ISDN cards offer hardware compression. If this feature is turned on and your card doesn't offer compression, your data throughput will not improve. If you don't know whether your card has compression, check with the card's manufacturer.

You can select a line type and disable line type negotiation, depending on your ISDN tariff rates and the capability of the ISDN line between remote workstations and your Remote Access server.

For example:

If you have only Voice grade lines in your area, you can select a line type of 56K Voice and disable line type negotiation. This configuration speeds up the connection process.

In your area, if the 64K Digital connections are more affordable than 56K connections, you can select 64K Digital and disable line type negotiation. This configuration saves you from incurring higher costs without your knowledge by preventing your ISDN card from occasionally negotiating a line type of 56K Voice.

Note  You may need to consider the tariff rates at remote client sites before you choose a specific line type with negotiation turned off. If you are not sure of the cost for remote workstations, you should configure the Remote Access server to allow line type negotiation, and ask individual remote workstations to determine whether to negotiate the line type or not.


Network Configuration

Select and configure the protocols to use on the LAN. Network protocol configuration applies to all RAS operations for all RAS-enabled ports.

The RAS computer may access a LAN as a client or as a server. You must select the LAN protocols RAS will use in each role. A RAS computers role is determined when you specify how RAS-enabled ports will be used.

Dial out Protocols

Select the protocols to use when dialing out to a remote access server. If you do not select a protocol in the Dial Out Protocols box, you will be unable to select that protocol later when you configure a phone book entry for dialing out.

If no ports are configured for dial out, The Dial Out Protocols box will be dimmed.

Server Settings

Select the protocols the RAS computer can use for servicing remote clients. Select the Require Encrypted Authentication check box to require encrypted passwords from all clients.

You must also configure parameters for each protocol the RAS server will support. See Help in each configuration dialog box for more information.

If no ports are configured to receive calls, the Server Settings box will not appear in the Network Configuration dialog box.

Encryption Settings

Allow Any Authentication Including Clear Text permits connection using any authentication requested by the client (MS-CHAP, MD5-CHAP, SPAP, PAP). This option is useful if you have RAS clients using different client software.

Require Encrypted Authentication permits connection using any authentication requested by the client except PAP.

Require Microsoft Encrypted Authentication permits connection using MS-CHAP authentication only. Require Data Encryption means all data sent over the wire is encrypted. Windows NT RAS provides data encryption using the RSA Data Security Incorporated RC4 algorithm.


RAS Server TCP/IP Configuration
TCP/IP Configuration

Use this dialog to choose the level of access for RAS TCP/IP clients and to specify the IP addresses for assignment to RAS clients.

Allow remote TCP/IP clients to access

Entire network	Grants users permission to access resources on the network.
This computer only	Grants users permission to access only the resources on this computer.
Use DHCP to assign remote TCP/IP client addresses

RAS servers can obtain IP addresses for remote clients from a dynamic host configuration protocol (DHCP) server. DHCP servers provide static and dynamic IP address allocation on a large network. You should select this option if a DHCP server is available. See TCPIP.HLP for more information about DHCP (TCP/IP must be installed).

Use static address pool

If a DHCP server is not available, a range of IP addresses can be given to a Remote Access server for assignment to clients. The range must be valid for the subnet the Remote Access server is in. Type the beginning and ending addresses of the range in the appropriate box. You must assign at least two IP addresses--one address is for a remote client and one address is assigned to the network adapter on the RAS server

You can exclude addresses within the range given to the Remote Access server by completing the From and To addresses then clicking Add. Remove excluded ranges by selecting the range to exclude and clicking Remove.

Allow remote clients to request a predetermined IP address

RAS servers can allow clients to request a specific address. Clients specify the address by entry in Remote Access.


RAS Server IPX Configuration
IPX Configuration

Use this dialog to choose the level of access for RAS IPX clients and to specify an IPX network number assignment method for RAS clients.

The Remote Access server provides clients connecting to an IPX network with an IPX network number and must act as their SAP agent. Use this dialog box to specify how the Remote Access server provides IPX net numbers to clients and whether the RAS server should also provide access to the network (act as an IPX router for RAS clients only).

Allow remote IPX clients to access

Entire network	Grants users permission to access resources on the network.
This computer only	Grants users permission to access only the resources on this computer.
Allocate network numbers automatically

An IPX network number not currently in use is determined by the RAS server and assigned to the RAS client.

Allocate network numbers

Ranges of IPX network numbers can be given to a Remote Access server for assignment to clients. Allocated IPX address pools are useful if you want to identify RAS clients on the network by number.

Provide the beginning network number in the From box. RAS automatically determines the number of available ports and calculates the end number.

Assign same network number to all IPX clients

Select this box to assign the same network number to all IPX clients. This will reduce the size of RIP announcements on the network. If this box is selected, only one network number is added to your routing table for all active RAS clients. If this box is not selected, a network number is added to your routing table for each active RAS client.


Detect Modem

RAS detected more than one modem.  Please select the correct modem from the list.