Copyright: Saturday, January 04, 2003 15:50:44


Provides a space for you to type a descriptive name for the RADIUS client you are setting up.


Lists RADIUS client protocols. Select the protocol that the RADIUS client will use.


Specifies whether to configure this RADIUS client.


Specifies a descriptive name for this RADIUS client.


Provides a space for you to type the IP address, IP address prefix, or DNS domain name for the RADIUS client you are setting up. IP addresses are expressed in dotted decimal notation.

IP address prefixes are expressed in network length prefix notation, w.x.y.z/p, where w.x.y.z is the dotted decimal notation of the address prefix and p is the prefix length (the number of high order bits that define the network prefix). This is also known as Classless Inter-Domain Routing (CIDR) notation. An example of network length prefix notation is 192.168.21.0/24.

To convert from subnet mask notation to network prefix length notation, p is the number of high order bits in the subnet mask that are set to 1.


Click to verify the client DNS domain name that you have specified.


Specifies the vendor of the RADIUS client. This field is optional. You need to specify the vendor only if you are using remote access policies that control access based on the Client-Vendor attribute.

If the RADIUS client is a network access server (NAS), select the name of the NAS manufacturer from the list. If you are using Routing and Remote Access as your network access server, click Microsoft.

If the RADIUS client is a RADIUS proxy server, or if the vendor is not in the list, click RADIUS standard.


Specifies whether the RADIUS client must send a signature attribute in an Access-Request packet for PAP, CHAP, or MS-CHAP authentication. If you plan to use EAP authentication, IAS always requires that the client send digital signatures.

If this check box is selected and the client does not send a signature attribute in an Access-Request packet, the authentication attempt is discarded. Refer to the documentation for your NAS or RADIUS proxy to ensure that it supports digital signatures.


Provides a space for you to type the shared secret you want to use with this client.

A shared secret is a text string that serves as a special password between an IAS server and its RADIUS clients. Each IAS server must have a shared secret for each RADIUS client (a network access server [NAS] or other RADIUS server that forwards RADIUS requests to it).

There are a few rules you must follow to successfully set up a shared secret:

The shared secret must be exactly the same at both servers.

Secrets are case-sensitive.

Secrets can use any standard alphanumeric and special characters.

For more information about shared secrets, see Shared secrets in Help.


Provides a space for you to type the shared secret to confirm its use.


Provides a space for you to specify a descriptive name for this instance of IAS. If you are running multiple instances of IAS on your network, you can provide descriptive names to differentiate between them.


Specifies whether IAS writes to the system event log every time the NAS sends a rejected or discarded authentication request (sometimes referred to as a malformed packet). This option is useful for troubleshooting.

For more information, see Event logging for IAS in Help.


Specifies whether IAS documents successful authentication attempts in the system event log. This option is useful for troubleshooting.

For more information, see Event logging for IAS in Help.


Provides a space for you to specify the port or ports that you want IAS to use for authentication requests. By default IAS uses ports 1812 (the reserved port described in RFC 2865 "Remote Authentication Dial In User Service [RADIUS]") and 1645.

Many network access servers use port 1645 by default for authentication requests. Regardless of the port or ports that you use, ensure that both IAS and your NAS are configured to use a common port.


Provides a space for you to specify the port or ports that you want IAS to use for accounting requests. By default IAS uses ports 1813  (the port recommended in RFC 2866 "RADIUS Accounting") and 1646.

Many network access servers use port 1646 by default for accounting requests. Regardless of the port or ports that you use, ensure that both IAS and your NAS are configured to use a common port.


Provides a space for you to type the DNS name for the RADIUS client you are configuring.


Click to resolve the DNS name you have provided.


Lists the names of computers that match the address you have provided. If the name of the computer you want to use as the RADIUS client is in the list, click the name, and then click Use This IP.


Specifies that you want to configure IAS on this computer.


Specifies that you want to configure IAS on another computer.


Provides a space for you to type the name of the computer that is running the instance of IAS that you want to configure and monitor.


Adds a new realm replacement rule to the list.


Provides a space for you to type the realm identifier that you want IAS to replace in user names. This can be a prefix (for example, Microsoft\), or a suffix (for example, @microsoft.com).

Be specific about the realm identifier you want IAS to replace. If the text of the realm identifier you type here is part of a user name and not part of a realm, IAS will still replace it.

IAS performs a simple replacement. It will not remove a realm prefix from the beginning of the user name and attach a realm suffix to the end.


Click to edit the selected rule.


Moves the rule higher in the list.


Moves the rule lower in the list.


Provides a space for you to type the text with which you want to replace the realm identifier.


Click to remove the selected rule.


Lists the rules that determine how realm identifiers are replaced.


Specifies that the name of the computer you have selected in Search Results is the one you want to use for the RADIUS client.