Windows Forum

Ask something
Discussion Locked

PPTP: RADIUS or Windows Authentication?

0 helpful
3 replies

by patrick.bisaillon

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

G'day everyone

When configuring PPTP VPN service via RRAS on Microsoft Windows 2000 server you have the option to use Windows OR RADIUS authentication. First, I know what RADIUS is but I am confused about which one I should pick and why? Which isthe most secure?

Here is how I see it. With Windows Authentication, when a remote user contact the PPTP server he provides his domain user ID, password and domain name and then RRAS goes to a DC and validates the access. If I choose RADIUS, it istransparent for the user but behind the scene there is a middle man, right? RADIUS receives the login credentials and validates against a DC. From my point of view, this sounds like a proxy service, am I right? RADIUS adds a step in the equation, but does it worth it? Please clarify.

Best regards
Patrick.

3 replies

by dwdino

Close,

Radius is used to authenticate to a different box. It is a protocol which allows disperate systems to run authentication for one another.

For instance, we have a Perl dial in server. A simple box with 8 modems. I have the option with the perl to setup user accounts locally on the Perl, or use RADIUS to pass authentication to my W2K DC (which we do).

Therefore, if you have all your user accounts on your W2K platform, choose Windows Authentication. If your user accounts are stored on Linux, Unix, Novell or something other than a microsoft product, use RADIUS to forward that information to your other systems.

I understand there is a means for using RADIUS between MS OSs, but have yet to find a situation or explanation for this.

This discussion is closed to new replies.