Chapter 25 - Planning, Implementing, Maintaining Routing and Remote Access

Abstract

The chapter explores planning, configuring, and maintaining of routing and remote access. There are two basic ways to control remote access to any network. One can configure individual user accounts to allow or disallow remote access, or configure one or more remote access policies to control access based on users, groups, times of day, and other criteria. Windows Server 2003 includes a number of security features for remote access, including some new features that were not available in Windows 2000. When planning the types of remote access to allow, one should consider how they meet the needs of one's organization and the needs of the users, the expense and administrative effort involved in implementing each one, and their relative levels of security. Although using a virtual private network (VPN) for remote access does not require any special hardware beyond an Internet connection for clients and the Routing and Remote Access (RRAS) server, there are still a number of choices one must make when planning a VPN strategy. These include the VPN protocols one will support, the need for machine certificates, IP filtering, and remote access policies.