deploying virtual private networks with microsoft windows server 2003 phần 5

người sử dụng máy tính phải yêu cầu một chứng chỉ người dùng từ giấy chứng nhận quyền (CA) trên mạng nội bộ công ty. Nếu công ty có triển khai Active Directory trên , người dùng có thể được tự động cấu hình có giấy chứng nhận khi đăng nhập vào tem sys bằng cách sử dụng tự động ghi danh CA tính năng mới của | 160 PART II VPN Deployment 4. When the service has stopped right-click VPN1 point to All Tasks and click Start. This step ensures both that the remote access policies have been refreshed from DC1 and that the RAS and IAS Servers certificate on VPN1 auto-enrolled through Group Policy after Routing And Remote Access was already started will be accessible. To create the Example profile with Connection Manager Administration Kit 1. Click Start point to Administrative Tools and click Connection Manager Administration Kit. 2. On the Welcome To The Connection Manager Administration Kit Wizard page click Next. 3. On the Service Profile Selection page ensure that New Profile is selected and then click Next. 4. On the Service And File Names page type VPN Access to in the Service Name text box and type Example in the File Name text box as shown in Figure 7-26 and then click Next. Figure 7-26. Creating the CM profile. 5. On the Realm Name page click Next. 6. On the Merging Profile Information page click Next. 7. On the VPN Support page select the Phone Book From This Profile check box. In VPN Server Name Or IP Address click Always Use The Same VPN Server type as shown in Figure 7-27 and click Next. Chapter 7 Using Connection Manager for Quarantine Control and Certificate Provisioning 161 Figure 7-27. CMAK VPN Support dialog box. 8. On the VPN Entries page select the default entry and click Edit. 9. Click the Security tab. In the Security Settings drop-down list click Use Advanced Security Settings as shown in the following figure and then click Configure. Figure 7-28. Security settings. 162 PART II VPN Deployment 10. Under Authentication Methods clear the Microsoft CHAP MS-CHAP check box. In VPN Strategy click Try Layer Two Tunneling Protocol First as shown in Figure 7-29 . Click OK twice to return to the VPN Entries page and then click Next. Figure 7-29. Advanced Security Settings 11. On the Phone Book page clear the Automatically Download Phone Book .