rras, dhcp question

I have several users connecting to rras by way of MS vpn. rras uses dhcp to
assign ip addresses. I was wondering if it is possible to assign one range of
ips to one group and another range in the same subnet to another group.

For example,
Group A gets 192.168.0.150 - 192.168.0.199
Group B gets 192.168.0.200 - 192.168.0.254

I would like to do this without ISA. If I cannot do this straight through
rras and DHCP, could I use IAS (again, not ISA)?

All servers are Windows 2003. Computers are 2000 Pro or XP Pro.

Thank you,

--
Eddy - MCSE


Eddy - MCSE

Hello,

Thanks for posting!

From your post I understand that you want to assign an arrange of IPs at a
group basis in VPN connection.

Based on my research RRAS server cannot achieve the goal. Additionaly, IAS
also cannot do the work. IAS is the Windows implementation of a Remote
Authentication Dial-In User Service (RADIUS) server in Windows 2000 Server
and a RADIUS server and proxy in Windows Server 2003.

As a workaround, you may assign a static IP address at a user basis. You
may refer to the following method.

Checked under user properties under dial in checked Enable Access and also
added the static ip there.

Hope the information helps.

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

================================================== ===

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| Thread-Topic: rras, dhcp question
| thread-index: AcY3WDh66ntoi9HgRmCSFk5PPslXpg==
| X-WBNR-Posting-Host: 67.87.221.111
| From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| Subject: rras, dhcp question
| Date: Tue, 21 Feb 2006 18:32:27 -0800
| Lines: 17
| Message-ID: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.networking
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA02.phx.gbl!TK2MSFTNGXA
03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:35904
| X-Tomcat-NG: microsoft.public.windows.server.networking
|
| I have several users connecting to rras by way of MS vpn. rras uses dhcp
to
| assign ip addresses. I was wondering if it is possible to assign one
range of
| ips to one group and another range in the same subnet to another group.
|
| For example,
| Group A gets 192.168.0.150 - 192.168.0.199
| Group B gets 192.168.0.200 - 192.168.0.254
|
| I would like to do this without ISA. If I cannot do this straight through
| rras and DHCP, could I use IAS (again, not ISA)?
|
| All servers are Windows 2003. Computers are 2000 Pro or XP Pro.
|
| Thank you,
|
| --
| Eddy - MCSE
|

Can you use IAS to limit Internet access to only certain groups (by assigning
a fake proxy)?

Thank you for your help,
--
Eddy - MCSE


"Jason Tan (MSFT)" wrote:

> Hello,
>
> Thanks for posting!
>
> From your post I understand that you want to assign an arrange of IPs at a
> group basis in VPN connection.
>
> Based on my research RRAS server cannot achieve the goal. Additionaly, IAS
> also cannot do the work. IAS is the Windows implementation of a Remote
> Authentication Dial-In User Service (RADIUS) server in Windows 2000 Server
> and a RADIUS server and proxy in Windows Server 2003.
>
> As a workaround, you may assign a static IP address at a user basis. You
> may refer to the following method.
>
> Checked under user properties under dial in checked Enable Access and also
> added the static ip there.
>
> Hope the information helps.
>
> Best Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
> --------------------
> | Thread-Topic: rras, dhcp question
> | thread-index: AcY3WDh66ntoi9HgRmCSFk5PPslXpg==
> | X-WBNR-Posting-Host: 67.87.221.111
> | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
> | Subject: rras, dhcp question
> | Date: Tue, 21 Feb 2006 18:32:27 -0800
> | Lines: 17
> | Message-ID: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windows.server.networking
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA02.phx.gbl!TK2MSFTNGXA
> 03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.networking:35904
> | X-Tomcat-NG: microsoft.public.windows.server.networking
> |
> | I have several users connecting to rras by way of MS vpn. rras uses dhcp
> to
> | assign ip addresses. I was wondering if it is possible to assign one
> range of
> | ips to one group and another range in the same subnet to another group.
> |
> | For example,
> | Group A gets 192.168.0.150 - 192.168.0.199
> | Group B gets 192.168.0.200 - 192.168.0.254
> |
> | I would like to do this without ISA. If I cannot do this straight through
> | rras and DHCP, could I use IAS (again, not ISA)?
> |
> | All servers are Windows 2003. Computers are 2000 Pro or XP Pro.
> |
> | Thank you,
> |
> | --
> | Eddy - MCSE
> |
>
>

Hello,

Thanks for your reply!

I suggest you use Remote Access Policy in RRAS to control remote users. You
may refer to the following article:

254169 Managing User Access on a Remote Access Server in a Workgroup
http://support.microsoft.com/default...b;EN-US;254169

254316 Create a Remote Access Server for a Windows 2000-Based Server in a
Workgroup
http://support.microsoft.com/default...b;EN-US;254316

Hope the information helps.

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

================================================== ===

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| Thread-Topic: rras, dhcp question
| thread-index: AcY3w2IdYr/6gBAJQoGQuRtQGCd/yA==
| X-WBNR-Posting-Host: 68.165.252.66
| From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| References: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
<(E-Mail Removed)>
| Subject: RE: rras, dhcp question
| Date: Wed, 22 Feb 2006 07:19:33 -0800
| Lines: 97
| Message-ID: <B524A893-8A39-4758-B7E1-(E-Mail Removed)>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.networking
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:35923
| X-Tomcat-NG: microsoft.public.windows.server.networking
|
| Can you use IAS to limit Internet access to only certain groups (by
assigning
| a fake proxy)?
|
| Thank you for your help,
| --
| Eddy - MCSE
|
|
| "Jason Tan (MSFT)" wrote:
|
| > Hello,
| >
| > Thanks for posting!
| >
| > From your post I understand that you want to assign an arrange of IPs
at a
| > group basis in VPN connection.
| >
| > Based on my research RRAS server cannot achieve the goal. Additionaly,
IAS
| > also cannot do the work. IAS is the Windows implementation of a Remote
| > Authentication Dial-In User Service (RADIUS) server in Windows 2000
Server
| > and a RADIUS server and proxy in Windows Server 2003.
| >
| > As a workaround, you may assign a static IP address at a user basis.
You
| > may refer to the following method.
| >
| > Checked under user properties under dial in checked Enable Access and
also
| > added the static ip there.
| >
| > Hope the information helps.
| >
| > Best Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > ================================================== ===
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > ================================================== ===
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: rras, dhcp question
| > | thread-index: AcY3WDh66ntoi9HgRmCSFk5PPslXpg==
| > | X-WBNR-Posting-Host: 67.87.221.111
| > | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| > | Subject: rras, dhcp question
| > | Date: Tue, 21 Feb 2006 18:32:27 -0800
| > | Lines: 17
| > | Message-ID: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.networking
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path:
| >
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA02.phx.gbl!TK2MSFTNGXA
| > 03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.windows.server.networking:35904
| > | X-Tomcat-NG: microsoft.public.windows.server.networking
| > |
| > | I have several users connecting to rras by way of MS vpn. rras uses
dhcp
| > to
| > | assign ip addresses. I was wondering if it is possible to assign one
| > range of
| > | ips to one group and another range in the same subnet to another
group.
| > |
| > | For example,
| > | Group A gets 192.168.0.150 - 192.168.0.199
| > | Group B gets 192.168.0.200 - 192.168.0.254
| > |
| > | I would like to do this without ISA. If I cannot do this straight
through
| > | rras and DHCP, could I use IAS (again, not ISA)?
| > |
| > | All servers are Windows 2003. Computers are 2000 Pro or XP Pro.
| > |
| > | Thank you,
| > |
| > | --
| > | Eddy - MCSE
| > |
| >
| >
|

I appologize, but I don't see how I can restrict Internet access in RRAS.
Perhaps I am not being clear as to my goals. I want to allow users to connect
by way of VPN. I then want to restrict some of the users from going on the
Internet. I know I can go one by one to their dial-up properties in AD and
assign a static IP, then use the firewall to block http for those IP address,
but I would like to do this by group instead of individually. Assigning a
fake proxy is fine to prevent local connections to the internet, but since
VPN is a dial-up feature, it is not controlled the same way. I am not very
familiar with IAS, but thought the new proxy feature in the 2003 version
might help me accomplish my goals.
Thank you,
--
Eddy - MCSE


"Jason Tan (MSFT)" wrote:

> Hello,
>
> Thanks for your reply!
>
> I suggest you use Remote Access Policy in RRAS to control remote users. You
> may refer to the following article:
>
> 254169 Managing User Access on a Remote Access Server in a Workgroup
> http://support.microsoft.com/default...b;EN-US;254169
>
> 254316 Create a Remote Access Server for a Windows 2000-Based Server in a
> Workgroup
> http://support.microsoft.com/default...b;EN-US;254316
>
> Hope the information helps.
>
> Best Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
> --------------------
> | Thread-Topic: rras, dhcp question
> | thread-index: AcY3w2IdYr/6gBAJQoGQuRtQGCd/yA==
> | X-WBNR-Posting-Host: 68.165.252.66
> | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
> | References: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
> <(E-Mail Removed)>
> | Subject: RE: rras, dhcp question
> | Date: Wed, 22 Feb 2006 07:19:33 -0800
> | Lines: 97
> | Message-ID: <B524A893-8A39-4758-B7E1-(E-Mail Removed)>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windows.server.networking
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.networking:35923
> | X-Tomcat-NG: microsoft.public.windows.server.networking
> |
> | Can you use IAS to limit Internet access to only certain groups (by
> assigning
> | a fake proxy)?
> |
> | Thank you for your help,
> | --
> | Eddy - MCSE
> |
> |
> | "Jason Tan (MSFT)" wrote:
> |
> | > Hello,
> | >
> | > Thanks for posting!
> | >
> | > From your post I understand that you want to assign an arrange of IPs
> at a
> | > group basis in VPN connection.
> | >
> | > Based on my research RRAS server cannot achieve the goal. Additionaly,
> IAS
> | > also cannot do the work. IAS is the Windows implementation of a Remote
> | > Authentication Dial-In User Service (RADIUS) server in Windows 2000
> Server
> | > and a RADIUS server and proxy in Windows Server 2003.
> | >
> | > As a workaround, you may assign a static IP address at a user basis.
> You
> | > may refer to the following method.
> | >
> | > Checked under user properties under dial in checked Enable Access and
> also
> | > added the static ip there.
> | >
> | > Hope the information helps.
> | >
> | > Best Regards,
> | >
> | > Jason Tan
> | >
> | > Microsoft Online Partner Support
> | > Get Secure! - www.microsoft.com/security
> | >
> | > ================================================== ===
> | >
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | >
> | > ================================================== ===
> | > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> | >
> | >
> | >
> | >
> | > --------------------
> | > | Thread-Topic: rras, dhcp question
> | > | thread-index: AcY3WDh66ntoi9HgRmCSFk5PPslXpg==
> | > | X-WBNR-Posting-Host: 67.87.221.111
> | > | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
> | > | Subject: rras, dhcp question
> | > | Date: Tue, 21 Feb 2006 18:32:27 -0800
> | > | Lines: 17
> | > | Message-ID: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
> | > | MIME-Version: 1.0
> | > | Content-Type: text/plain;
> | > | charset="Utf-8"
> | > | Content-Transfer-Encoding: 7bit
> | > | X-Newsreader: Microsoft CDO for Windows 2000
> | > | Content-Class: urn:content-classes:message
> | > | Importance: normal
> | > | Priority: normal
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | > | Newsgroups: microsoft.public.windows.server.networking
> | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | > | Path:
> | >
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA02.phx.gbl!TK2MSFTNGXA
> | > 03.phx.gbl
> | > | Xref: TK2MSFTNGXA01.phx.gbl
> | > microsoft.public.windows.server.networking:35904
> | > | X-Tomcat-NG: microsoft.public.windows.server.networking
> | > |
> | > | I have several users connecting to rras by way of MS vpn. rras uses
> dhcp
> | > to
> | > | assign ip addresses. I was wondering if it is possible to assign one
> | > range of
> | > | ips to one group and another range in the same subnet to another
> group.
> | > |
> | > | For example,
> | > | Group A gets 192.168.0.150 - 192.168.0.199
> | > | Group B gets 192.168.0.200 - 192.168.0.254
> | > |
> | > | I would like to do this without ISA. If I cannot do this straight
> through
> | > | rras and DHCP, could I use IAS (again, not ISA)?
> | > |
> | > | All servers are Windows 2003. Computers are 2000 Pro or XP Pro.
> | > |
> | > | Thank you,
> | > |
> | > | --
> | > | Eddy - MCSE
> | > |
> | >
> | >
> |
>
>

Hello,

More information for your reference:

Section: To prepare remote access policies to grant dial-in authorization
by group

Step-by-Step Guide to Configuring a Dial-Up Remote Access Server
http://www.microsoft.com/technet/pro.../technologies/
directory/activedirectory/stepbystep/rrascnfg.mspx

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

================================================== ===

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| Thread-Topic: rras, dhcp question
| thread-index: AcY4fJDs/8JToD+BRQmGZ8y2SnlniQ==
| X-WBNR-Posting-Host: 68.165.252.66
| From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| References: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
<(E-Mail Removed)>
<B524A893-8A39-4758-B7E1-(E-Mail Removed)>
<iLk8$(E-Mail Removed)>
| Subject: RE: rras, dhcp question
| Date: Thu, 23 Feb 2006 05:25:08 -0800
| Lines: 189
| Message-ID: <6776A059-0301-43A8-9894-(E-Mail Removed)>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.networking
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.networking:35961
| X-Tomcat-NG: microsoft.public.windows.server.networking
|
| I appologize, but I don't see how I can restrict Internet access in RRAS.
| Perhaps I am not being clear as to my goals. I want to allow users to
connect
| by way of VPN. I then want to restrict some of the users from going on
the
| Internet. I know I can go one by one to their dial-up properties in AD
and
| assign a static IP, then use the firewall to block http for those IP
address,
| but I would like to do this by group instead of individually. Assigning a
| fake proxy is fine to prevent local connections to the internet, but
since
| VPN is a dial-up feature, it is not controlled the same way. I am not
very
| familiar with IAS, but thought the new proxy feature in the 2003 version
| might help me accomplish my goals.
| Thank you,
| --
| Eddy - MCSE
|
|
| "Jason Tan (MSFT)" wrote:
|
| > Hello,
| >
| > Thanks for your reply!
| >
| > I suggest you use Remote Access Policy in RRAS to control remote users.
You
| > may refer to the following article:
| >
| > 254169 Managing User Access on a Remote Access Server in a Workgroup
| > http://support.microsoft.com/default...b;EN-US;254169
| >
| > 254316 Create a Remote Access Server for a Windows 2000-Based Server in
a
| > Workgroup
| > http://support.microsoft.com/default...b;EN-US;254316
| >
| > Hope the information helps.
| >
| > Best Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > ================================================== ===
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > ================================================== ===
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| > --------------------
| > | Thread-Topic: rras, dhcp question
| > | thread-index: AcY3w2IdYr/6gBAJQoGQuRtQGCd/yA==
| > | X-WBNR-Posting-Host: 68.165.252.66
| > | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| > | References: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
| > <(E-Mail Removed)>
| > | Subject: RE: rras, dhcp question
| > | Date: Wed, 22 Feb 2006 07:19:33 -0800
| > | Lines: 97
| > | Message-ID: <B524A893-8A39-4758-B7E1-(E-Mail Removed)>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.networking
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.windows.server.networking:35923
| > | X-Tomcat-NG: microsoft.public.windows.server.networking
| > |
| > | Can you use IAS to limit Internet access to only certain groups (by
| > assigning
| > | a fake proxy)?
| > |
| > | Thank you for your help,
| > | --
| > | Eddy - MCSE
| > |
| > |
| > | "Jason Tan (MSFT)" wrote:
| > |
| > | > Hello,
| > | >
| > | > Thanks for posting!
| > | >
| > | > From your post I understand that you want to assign an arrange of
IPs
| > at a
| > | > group basis in VPN connection.
| > | >
| > | > Based on my research RRAS server cannot achieve the goal.
Additionaly,
| > IAS
| > | > also cannot do the work. IAS is the Windows implementation of a
Remote
| > | > Authentication Dial-In User Service (RADIUS) server in Windows 2000
| > Server
| > | > and a RADIUS server and proxy in Windows Server 2003.
| > | >
| > | > As a workaround, you may assign a static IP address at a user
basis.
| > You
| > | > may refer to the following method.
| > | >
| > | > Checked under user properties under dial in checked Enable Access
and
| > also
| > | > added the static ip there.
| > | >
| > | > Hope the information helps.
| > | >
| > | > Best Regards,
| > | >
| > | > Jason Tan
| > | >
| > | > Microsoft Online Partner Support
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > ================================================== ===
| > | >
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | >
| > | > ================================================== ===
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | Thread-Topic: rras, dhcp question
| > | > | thread-index: AcY3WDh66ntoi9HgRmCSFk5PPslXpg==
| > | > | X-WBNR-Posting-Host: 67.87.221.111
| > | > | From: "=?Utf-8?B?RWRkeSAtIE1DU0U=?=" <(E-Mail Removed)>
| > | > | Subject: rras, dhcp question
| > | > | Date: Tue, 21 Feb 2006 18:32:27 -0800
| > | > | Lines: 17
| > | > | Message-ID: <12EA278A-2F39-450B-A9F9-(E-Mail Removed)>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windows.server.networking
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path:
| > | >
| >
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA02.phx.gbl!TK2MSFTNGXA
| > | > 03.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | > microsoft.public.windows.server.networking:35904
| > | > | X-Tomcat-NG: microsoft.public.windows.server.networking
| > | > |
| > | > | I have several users connecting to rras by way of MS vpn. rras
uses
| > dhcp
| > | > to
| > | > | assign ip addresses. I was wondering if it is possible to assign
one
| > | > range of
| > | > | ips to one group and another range in the same subnet to another
| > group.
| > | > |
| > | > | For example,
| > | > | Group A gets 192.168.0.150 - 192.168.0.199
| > | > | Group B gets 192.168.0.200 - 192.168.0.254
| > | > |
| > | > | I would like to do this without ISA. If I cannot do this straight
| > through
| > | > | rras and DHCP, could I use IAS (again, not ISA)?
| > | > |
| > | > | All servers are Windows 2003. Computers are 2000 Pro or XP Pro.
| > | > |
| > | > | Thank you,
| > | > |
| > | > | --
| > | > | Eddy - MCSE
| > | > |
| > | >
| > | >
| > |
| >
| >
|