tailieunhanh - Configuring Windows 7 (Training Kit) - Part 57

Configuring Windows 7 (Training Kit) - Part 57. This training kit is designed for IT professionals who operate in enterprise enviroments that use Windows 7 as a desktop operating system. You should have at least one year of experience in the IT field, as well as experience implementing and administering any Windows client operating system in a networked environment. | VPN Authentication Protocols Windows 7 supports different authentication protocols for both dial-up and VPN connections. There are two broad categories of authentication protocol password-based authentication protocols and certificate-based authentication protocols. Certificate-based authentication protocols require the deployment of a PKI solution such as Active Directory Certificate Services. When you use a certificate-based authentication protocol it is necessary to deploy certificates tied to user accounts computer accounts or both types of account. The properties of these protocols are as follows PAP Password Authentication Protocol This protocol uses unencrypted passwords for authentication. This protocol is not enabled by default for Windows 7 VPN connections and is not supported by remote access servers running Windows Server 2008. You would enable this protocol only to connect to an older third-party VPN server that does not support other more secure protocols. CHAP Challenge Authentication Protocol This is a password-based authentication protocol. Although remote access servers running Windows Server 2008 do not support this protocol it is enabled by default for Windows 7 VPN connections and it allows you to connect to third-party VPN servers that do not support other more secure protocols. MS-CHAPv2 Microsoft Challenge Handshake Authentication Protocol version 2 MS-CHAPv2 is a password-based authentication protocol. You can configure a VPN connection that uses this protocol to use the credentials of the currently logged on user for authentication. PEAP PEAP-TLS Protected Extensible Authentication Protocol with Transport Layer Security This is a certificate-based authentication protocol where users authenticate using certificates. Requires the installation of a computer certificate on the VPN server. EAP-MS-CHAPv2 PEAP-MS-CHAPv2 The most secure password-based authentication protocols available to VPN clients running Windows 7 requires the installation of