setting up aaa server

[wfbtr]

I have a SOHO and plan to connect two Pix as well as handle VPN Clients. As per the documentation I need to set up an aaa server. I'm wondering what this entails. The only thing I've seen so far is that another node handles it, and the documentation mentions Cisco Secure ACS for Windows. In the main office I have Win2k SBS. Do I need this software or is there another easier solution?

thanks.

 

[bell1996]

you can use any server that runs RADIUS. I use a Win2k Server with IAS using RADIUS. No problems.

 

[wfbtr]

thanks for the response.
I set up IAS. Works perfectly.

 

[bytehd]

wfbtr:
what auth are you using?
md5?
EAP-TLS?
EAP-TTLS?
EAP-SOMETHING-ELSE?

http://www.insyncva.com

 

[wfbtr]

the IAS server only can use PAP and SPAP for client authentication.

 

[bytehd]

Right-Click on Remote Access Policies in IAS Server
Authentication TAB:

W2k IAS AAA TYPES are:
----------------------
MD5-Challenge
PEAP
MS-CHAP v2
MS-CHAP
CHAP
NOTHING (PAP,SPAP)

http://www.insyncva.com