Multitech RouteFinder RF560VPN User manual

RF560VPN
RF560VPN PPTP with Windows IAS Radius Server
Reference Guide

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 2
How to: Setup Windows 2000 IAS Server to Work with
RF560VPN PPTP Server
Copyright
Copyright © 2002
This publication may not be reproduced, in whole or in part, without prior expressed written permission
from Multi-Tech Systems, Inc. All rights reserved. Multi-Tech Systems, Inc. makes no representations or
warranty with respect to the contents hereof and specifically disclaims any implied warranties of
merchantability or fitness for any particular purpose. Furthermore, Multi-Tech Systems, Inc. reserves the
right to revise this publication and to make changes from time to time in the content hereof without
obligation of Multi-Tech Systems, Inc. to notify any person or organization of such revisions or changes.
Product Number S000311A
Revision Date Description
A 8-19-2003 Initial release
About This Document
This document is broken down into two sections. Section one explains how to configure the RF560VPN
as a secure PPTP server. Section two explains how to setup your IAS server for Windows 2000.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 3
Section 1

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 4
Configuring RF560VPN for PPTP
1. Connect a workstation to one of the RF560VPN’s LAN ports via Ethernet at Site A.
2. Set the workstation IP address to 192.168.2.x subnet.
3. Apply power to the RF560VPN RouteFinder and allow the LEDs to stabilize on the unit.
4. Bring up your web browser on the workstation. At the Web browser’s address line, type the Gateway
address http://192.168.2.1 and press the Enter key.
Note: Make sure your workstation’s IP address is in the same network as the router’s address.
WINIPCFG and IPCONFIG are tools for finding a computer’s default gateway and MAC address. In
Windows 98/Me you can type WINIPCFG. In Windows 2000/NT, you can type IPCONFIG.
5. After typing the IP Address in the Web browser, the RF560VPN main menu displays.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 5
6. On the Main Menu, click the Setup Wizard button. The Password dialog box displays.
7. Type admin (admin is the default user name) in the user name box and leave the password box
empty.
Note: To change your password after logging in, select the Advanced Settings button and
Administrative Settings.
8. Click OK. The Setup Wizard screen displays a step-by-step process that lets you input all of the
basic settings to configure your RF560VPN.
9. Select the Time Zone, and then click the Next button to continue.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 6
10. For Device IP Settings enter the internal LAN IP address and subnet mask that you want assigned
to the LAN ports of the RF560VPN. This is not the IP address from your ISP but the local internal
LAN IP address. The default IP address is 192.168.2.1 and will be used for our example.
Device IP Address: 192.168.2.1.
Device IP Subnet Mask: 255.255.255.0
Click the Next button.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 7
11. For ISP Settings, select Static IP Settings and enter the following information.
a) IP Assigned by your ISP: This is the IP address of the WAN port on the RF560VPN at Site A.
(Ex: 204.26.122.103)
b) IP Subnet Mask: This is the IP address of the subnet mask for the WAN port on the RF560VPN.
(Ex: 255.255.255.0)
c) IP Gateway Address: This is the IP address of the WAN port on the RF560VPN at Site B. (Ex:
204.26.122.50)
Click the Next button.
Note: For this scenario of connecting two RouteFinders back-to-back it is not necessary to enter any
information for the ISP Additional Settings or Modem Settings.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 8
12. Click the button on the left side of the screen for VPN Settings. Use this screen to setup your LAN-
to-Client VPN connection.
13. Select PPTP Settings.
a) Place a checkmark in Enable PPTP Function and create a PPTP IP Pool from 192.168.2.190 to
192.168.2.200.
b) Place a checkmark in NETBIOS Enable and specify a DNS Server as 204.26.122.2 and WINS
Server as 204.26.122.3.
c) Specify User Authentication as MS-CHAP.
d) Specify Encryption Strength as 128 bit.
e) Enable Use RADIUS Authentication.
f) Specify RADIUS Port as 1812.
g) Specify RADIUS Server IP Address as 192.168.2.100
h) Specify Secret password that will match the password for RADIUS Server.
i) Once the VPN PPTP settings are entered, click on the Next button to save these settings.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 9
15. After you have finished making all the changes on the various pages, click Save and Restart to save
the settings and restart the device. After the restart, the device will function according to the saved
settings.
16. During the save and restart process, system messages will let you know that you have successfully
configured the settings for the device and saved the settings. You will see a status bar across the
bottom of your browser showing the progress of the startup process. The RouteFinder home page will
be loaded automatically after restart is completed.
This completes the configuration of the RF560VPN at Site A.

IAS Server Setup in Windows 2000
Multi-Tech Systems, Inc. Reference Guide 10
HOW TO: Configure a Primary Internet Authentication
Service Server on a Domain Controller
This step-by-step article describes how to install and configure Microsoft Internet Authentication Service
(IAS) on a domain controller. This applies to Windows 2000 Server and Advanced Server.
IAS can run as a Remote Authentication Dial-In User Service (RADIUS) server. You can use IAS for
centralized authentication and accounting of multiple Routing and Remote Access Service (RRAS)
servers.
To install IAS:
1. Click Start, point to Settings, and then click Control Panel.
2. Double-click Add/Remove Programs, and then click Add/Remove Windows Components.
3. In the Components list, click the words Networking Services (but do not select or clear its
check box), and then click Details.
4. Click to select the Internet Authentication Service check box, and then click OK.
5. Click Next, and then click Finish.
6. In the Add/Remove Programs dialog box, click Close.
7. To start IAS, click Start, point to Programs, point to Administrative Tools, and then click
Internet Authentication Service.
Enable IAS to Authenticate Users in Active Directory
To register the IAS service in Active Directory:
1. Start the IAS snap-in. To do this, click Start, point to Programs, point to Administrative Tools,
and then click Internet Authentication Service.
2. On the Action menu, click Register Service in Active Directory.
3. Click OK to confirm the IAS registration in the local domain, and then click OK.
Configure IAS Properties
1. Start the IAS snap-in. To do this, click Start, point to Programs, point to Administrative Tools,
and then click Internet Authentication Service.
2. Right-click Internet Authentication Service (Local), and then click Properties.
3. In the Description box, type the friendly name that you want to call this IAS server.
4. Click to clear the Log rejected or discarded authentication requests check box if you do not
want to record these events.
NOTE: You can use this log file to help you to determine if unauthorized individuals are
attempting to be authenticated in the domain.