Step 2: Server placement

The certificate authority and the IAS server will connect to your wired network in the same way that you would attach any other server. Just make sure that you don't make these servers domain controllers.

The VPN server will be a member of your domain and one of the VPN server's NICs will attach to your wired network. As I mentioned earlier, the VPN server's other NIC will connect to your wireless network. There is just one catch though: It is a huge security risk to attach the VPN server directly to the wireless network. You need to have a firewall in front of the VPN server. Many wireless access points have a built-in firewall that you can use. If your access point doesn't have a built-in firewall, then you could use Microsoft's ISA Server or a hardware-based firewall. You can see a sample diagram in Figure A.

This is how the servers should be placed on your network.

How to create a VPN for your wireless network

 Home: Introduction
 Step 1: Server requirements
 Step 2: Server placement
 Step 3: Setting up the certificate authority
 Step 4: Configuring the authentication server
 Step 5: Configuring the VPN server
 Step 6: Configuring wireless clients

ABOUT THE AUTHOR:

Brien M. Posey, MCSE, is a Microsoft Most Valuable Professional for his work with Windows 2000 Server and IIS. He has served as CIO for a nationwide chain of hospitals and was once in charge of IT security for Fort Knox. As a freelance technical writer, he has written for Microsoft, TechTarget, CNET, ZDNet, MSD2D, Relevant Technologies and other technology companies. You can visit his personal Web site at www.brienposey.com. Copyright 2005 TechTarget

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Virtual Private Networks What's new and improved in IPsec in Windows Server 2008 Is a GPO blocking my VPN security scan? How can I use Group Policy to manage proxy servers? VPN security: Testing, troubleshooting and deploying Penetration testing: Five tips in five minutes VPN quick tips Pen testing your VPN The hacker handbook: Eleven tips in eleven minutes Cisco patches flaws in multiple products Extranet security ISA Server How to use Windows SBS to manage Internet security Running Web Applications in ISA Server: Interactive Discussion Penetration testing for Windows systems ISA Server and RADIUS 'It's soup' for Windows R2 and ISA Server 2004 SP2 Updates to ISA Server imminent Microsoft security tools vs. third party What do I need in order to block and filter certain Web sites? Free analyzer tool checks ISA Server health Step-by-Step Guide: How to create a VPN for your wireless network Microsoft Windows Network Security Are tougher NACs needed in your shop? Setting your Windows security assessment expectations, step by step Restricting user permissions in folders Windows XP folder permissions management NTFS permissions control: Who will watch the watcher? Top Windows server hardening tips of 2006 Safe and secure Windows logging practices Eliminate zero-day threats with virtual server technology Permitting Ping: ICMP Exceptions Stop unauthorized access

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary ISA Server  (SearchWindowsSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary