1

How Dial-Up Network Access Works

Dial-up clients make a temporary connection

to a remote access server by using a
telecommunications provider

Remote Access
Server
Domain
Controller

Dial-up Client

1 Dial-up
Dial-up client
the
the RA
client calls
RA server
server
calls
3 RA
RA server
server authenticates
authenticates
and authorizes
authorizes the
the client

2 RA
RA server
answers
answers the
the call
call 4 RA server
data
data
server transfers
transfers

2
Components of a Dial-Up Connection

Remote
Remote Access
Access LAN
LAN and
and Remote
Remote Access
Access
Server
Server Protocols
Protocols

WAN
WAN Options:
Options:
Telephone,
Telephone, ISDN,
ISDN,
Domain X.25,
X.25, or ATM
ATM Dial-Up
Dial-Up Client
Client
Controller
Authentication
Authentication

DHCP
Server Address
Address and
and Name
Name Server Allocation
Allocation

3
How a VPN Connection Works

A VPN extends a private network across

shared or public networks, such as the
Internet

VPN Server
Domain
Controller

VPN Client

1 VPN client
client calls
VPN server
server
calls the
the
3 VPN
VPN server
server authenticates
authenticates
and authorizes
authorizes the client
client

2 VPN server
server
answers
answers the
the call
call 4 VPN server
data
data
server transfers
transfers

4
Components of a VPN Connection

VPN
VPN Tunnel
Tunnel
Tunneling Protocols
Protocols
VPN
VPN Server
Server Tunneled
Tunneled Data
Data

VPN Client
Client
Domain
Controller Transit
Transit Network
Network
Authentication
Authentication

DHCP
Server Address
Address and
and Name
Name Server
Server Allocation
Allocation

5
Standard Authentication Protocols

Protocol Security Use when

A client & server cannot negotiate

PAP Low
using more secure validation
A Shiva client calls in to a server
SPAP Medium running Windows, or a Windows XP
client calls in to a Shiva server
You have clients not running Microsoft
CHAP High
operating systems
You have clients running Windows NT
MS-CHAP High Workstation 4.0 or later, or Microsoft
Windows 95 or later
You have dial-up clients running
Windows 2000 or later, or VPN clients
MS-CHAP v2 High
running Windows NT 4.0 or Windows
98 or later