VPN / RADIUS question

[LR]

I have a small network which I maintain...I've set up the following -

- 1 Windows 2003 Domain Controller (1 DC)
- 1 Server as a File Server / VPN Server (Windows 2003 RRAS)

The VPN and everything works fine - it authenticates to AD (the DC).

From the things I've read, you need a RADIUS (IAS) server in order for the
VPN Server to authenticate VPN users against the Domain Controller for the
domain.

Now, I never installed RADIUS in this simple environment, but my File Server
/ VPN server still authenticate domain users against the Domain Controller.

Why is my solution working and authenticating domain users when I do not
have a RADIUS per documentations and reading materials I've read.

Can someone please elaborate on this more...thank you.

 

[Bill Grant]

No, that isn't so. You only need RADIUS if the RRAS device is not Windows.
If the RRAS device is a Windows server, the authentication to AD is handled
by Windows. The RRAS server becomes a member of the IAS and RAS server
group, and authentication is done against the AD database. You set the RRAS
server to use Windows authentication, not RADIUS.