Question : Setting up Radius on a Win2k Server and a Sonicwall 3060 w/ Viewpoint

I am helping a school setup a Sonicwall pro 3060 w/viewpoint software to monitor/track all students.
since the Sonicwall radius feature limits out at around 100 entries and we have more students than that, we would like
to run some kinda Radius on our Win2k Server and have it pull the information from AD?  is this at all possible.

A tech in another dept. told me that Radius was still included in Win2k only it was called something else.

Ps.. im new to this site.  i've been watching it for sometime now.  I've been waiting for a good question to post.

Answer : Setting up Radius on a Win2k Server and a Sonicwall 3060 w/ Viewpoint

hi nextech0, welcome to EE! ;)

> we would like to run some kinda Radius on our Win2k Server and have it pull the information from AD?  is this at all possible.

definitely YES.

> A tech in another dept. told me that Radius was still included in Win2k only it was called something else.

officially, it is Internet Authentication Service (IAS) in W2K, the MS implementation of a RADIUS server.

i believe the following two whitepapers are informative:

Internet Authentication Service for Windows 2000
http://www.microsoft.com/windows2000/techinfo/howitworks/communications/remoteaccess/ias.asp

"To grant the connecting user-appropriate access to the network, IAS authenticates users in Windows 2000 Active Directory™ service domains, Microsoft® Windows NT® 4.0 domains, or the local Security Accounts Manager (SAM) in Windows 2000. IAS supports new features in Active Directory, such as user principal names and universal groups."

RADIUS Protocol Security and Best Practices
http://www.microsoft.com/windows2000/techinfo/administration/radius.asp

"These practices include using strong shared secrets, the Message-Authenticator attribute, cryptographic-quality values for the Request Authenticator, different shared secrets for each RADIUS client/server pair, and IPsec to provide data confidentiality for RADIUS messages"

hope it helps,
bbao