Project

General

Profile

Configuring IAS » History » Version 2

Luke Murphey, 03/03/2012 08:15 AM

1 1 Luke Murphey
h1. Configuring IAS
2 1 Luke Murphey
3 1 Luke Murphey
h2. Install IAS
4 1 Luke Murphey
5 1 Luke Murphey
See "TechNet":http://technet.microsoft.com/en-us/library/cc781690(v=ws.10).aspx for instructions on how to install IAS
6 1 Luke Murphey
7 1 Luke Murphey
h2. Open the IAS MMC Snap-In
8 1 Luke Murphey
9 2 Luke Murphey
Start the "mmc"
10 1 Luke Murphey
11 2 Luke Murphey
!Open_mmc_snap_in.png!
12 2 Luke Murphey
13 1 Luke Murphey
h2. Add a new RADIUS Client
14 1 Luke Murphey
15 1 Luke Murphey
Right-click the "RADIUS Clients" and select "New Radius Client"
16 1 Luke Murphey
17 2 Luke Murphey
!Select_radius_client.png!
18 2 Luke Murphey
19 1 Luke Murphey
Populate the friendly name and the IP address
20 1 Luke Murphey
21 2 Luke Murphey
!New_radius_client.png!
22 2 Luke Murphey
23 1 Luke Murphey
Define a shared secret and set the "Client-Vendor" to "RADIUS Standard"
24 1 Luke Murphey
25 2 Luke Murphey
26 1 Luke Murphey
h2. Add a new Remote Access Policy
27 1 Luke Murphey
28 1 Luke Murphey
Right-click "Remote Access Policies" to create a new policy
29 1 Luke Murphey
30 2 Luke Murphey
!Set_remote_access_policy.png!
31 2 Luke Murphey
32 1 Luke Murphey
Select "Set up a custom policy" and assign a name
33 1 Luke Murphey
34 2 Luke Murphey
!Name_remote_access_policy.png!
35 2 Luke Murphey
36 1 Luke Murphey
Add a new policy condition with a name "Client-IP-Address", set the value to the IP address of your Splunk installation
37 1 Luke Murphey
38 2 Luke Murphey
!Set_remote_access_policy_attribute.png!
39 2 Luke Murphey
40 1 Luke Murphey
Select "Grant remote access permission" on the permissions page
41 1 Luke Murphey
42 2 Luke Murphey
!Set_remote_access_policy_grant_permission.png!
43 2 Luke Murphey
44 1 Luke Murphey
h2. Configure the Encryption Settings
45 1 Luke Murphey
46 1 Luke Murphey
Right-click the policy you created and select "Properties"
47 1 Luke Murphey
48 2 Luke Murphey
!Open_policy.png!
49 2 Luke Murphey
50 1 Luke Murphey
Click the "Edit Profile" and select the "Authentication" tab; check "Encrypted authentication (CHAP)" and "Unencrypted authentication (PAP, SPAP)"
51 2 Luke Murphey
52 2 Luke Murphey
!Edit_policy_authentication.png!