Hi!

We're currently testing IAS on a W2K3 machine. Till now our cisco 2XXX is
the RAS for our dialing - in users. - We're working on it to change the user
administration and authentication to be done by our domain controllers.

In our test lab we've a running scenario which lets the user dial in and the
user is authenticated against the active directory. - That works fine.

Now we've to implement a mechanism - based on a policy (a special AD group)
- that the user is prompted to specify his dialback number so that the RAS
can call him back.

I think it can be don the the cisco AV pairs which can be returned ... but
that's only what I think. - Is that right?

If yes / or not how can this be configured?


Many thanks in advance


Juan



PS: If my question is displayed a two times, just ignore the first one. - My
link was down and I wasn't sure if I've posted or not.

[ Post a follow-up to this message ]

"examnotes" <Juan@discussions.microsoft.com> wrote in
news:9DC95DA6-0869-4A5E-A22E-8BBC5F3DC78B@microsoft.com:

> Hi!
>
> We're currently testing IAS on a W2K3 machine. Till now our cisco 2XXX
> is the RAS for our dialing - in users. - We're working on it to change
> the user administration and authentication to be done by our domain
> controllers.
>
> In our test lab we've a running scenario which lets the user dial in
> and the user is authenticated against the active directory. - That
> works fine.
>
> Now we've to implement a mechanism - based on a policy (a special AD
> group) - that the user is prompted to specify his dialback number so
> that the RAS can call him back.
>
> I think it can be don the the cisco AV pairs which can be returned ...
> but that's only what I think. - Is that right?
>
> If yes / or not how can this be configured?
>
>
> Many thanks in advance
>
>
> Juan
>
>
>
> PS: If my question is displayed a two times, just ignore the first
> one. - My link was down and I wasn't sure if I've posted or not.
>
>

Hi Juan --

To configure IAS remote access policy to allow callback for the group you
created, set the Service-Type condition of the remote access policy to
"Callback Nas Prompt." There are other callback options visible in the UI,
too, perhaps with some experimentation you can find the one that works best
for you. To configure this in the UI, open the remote access policy. click
Edit Profile, and then click the Advanced tab. You can add the Service-Type
attribute if it is not there, or you can select it (if it is there) and
click Edit to change the attribute value.

Keep in mind that the NAS has to support callback and you must be able to
configure it to perform callback functions as you desire.

For example, a Routing and Remote Access dial-up server can be configured
to allow the caller to specify the number to which he wants the NAS to call
him using the "Set by caller" option, or you can configure the server to
always call back to a specific number. For more info on the RRAS features,
see the Help topic "Caller ID and callback." For more info on remote access
policies, see the Help topic "Elements of a remote access policy."


--
James McIllece, Microsoft

Please do not send email directly to this alias.  This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.

[ Post a follow-up to this message ]