Project

General

Profile

Configuring IAS » History » Version 3

Luke Murphey, 05/09/2012 07:23 PM

1 3 Luke Murphey
{{>toc}}
2 3 Luke Murphey
3 1 Luke Murphey
h1. Configuring IAS
4 1 Luke Murphey
5 1 Luke Murphey
h2. Install IAS
6 1 Luke Murphey
7 1 Luke Murphey
See "TechNet":http://technet.microsoft.com/en-us/library/cc781690(v=ws.10).aspx for instructions on how to install IAS
8 1 Luke Murphey
9 1 Luke Murphey
h2. Open the IAS MMC Snap-In
10 1 Luke Murphey
11 2 Luke Murphey
Start the "mmc"
12 1 Luke Murphey
13 2 Luke Murphey
!Open_mmc_snap_in.png!
14 2 Luke Murphey
15 1 Luke Murphey
h2. Add a new RADIUS Client
16 1 Luke Murphey
17 1 Luke Murphey
Right-click the "RADIUS Clients" and select "New Radius Client"
18 1 Luke Murphey
19 2 Luke Murphey
!Select_radius_client.png!
20 2 Luke Murphey
21 1 Luke Murphey
Populate the friendly name and the IP address
22 1 Luke Murphey
23 2 Luke Murphey
!New_radius_client.png!
24 2 Luke Murphey
25 1 Luke Murphey
Define a shared secret and set the "Client-Vendor" to "RADIUS Standard"
26 1 Luke Murphey
27 2 Luke Murphey
28 1 Luke Murphey
h2. Add a new Remote Access Policy
29 1 Luke Murphey
30 1 Luke Murphey
Right-click "Remote Access Policies" to create a new policy
31 1 Luke Murphey
32 2 Luke Murphey
!Set_remote_access_policy.png!
33 2 Luke Murphey
34 1 Luke Murphey
Select "Set up a custom policy" and assign a name
35 1 Luke Murphey
36 2 Luke Murphey
!Name_remote_access_policy.png!
37 2 Luke Murphey
38 1 Luke Murphey
Add a new policy condition with a name "Client-IP-Address", set the value to the IP address of your Splunk installation
39 1 Luke Murphey
40 2 Luke Murphey
!Set_remote_access_policy_attribute.png!
41 2 Luke Murphey
42 1 Luke Murphey
Select "Grant remote access permission" on the permissions page
43 1 Luke Murphey
44 2 Luke Murphey
!Set_remote_access_policy_grant_permission.png!
45 2 Luke Murphey
46 1 Luke Murphey
h2. Configure the Encryption Settings
47 1 Luke Murphey
48 1 Luke Murphey
Right-click the policy you created and select "Properties"
49 1 Luke Murphey
50 2 Luke Murphey
!Open_policy.png!
51 2 Luke Murphey
52 1 Luke Murphey
Click the "Edit Profile" and select the "Authentication" tab; check "Encrypted authentication (CHAP)" and "Unencrypted authentication (PAP, SPAP)"
53 2 Luke Murphey
54 2 Luke Murphey
!Edit_policy_authentication.png!