Friday, April 16, 2010

18.Remote Access Protocols and Services

Remote Access refers to connecting to and accessing the shared resources located on the remote network. All major network and desktop operating systems have built-in support for remote access. There are several different techniques to establish remote access connections. There are also a variety of standards and protocols used for encryption and authentication to provide security for Remote Access Services. In this section, we will take a look at different remote access protocols and services.
(i)Remote Access Service (RAS)
RAS is Microsoft’s implementation of remote access protocols and standards. It is available on all Windows Server operating systems. Microsoft renamed it as Routing and Remote Access Service (RRAS) in Windows 2000 Server and later operating systems. A Remote Access Server is configured to provide connectivity to remote clients that support remote access protocols. This server acts as a gateway for the organization’s internal network. The Remote Access Server authenticates the remote clients before they are allowed access to resources located on other internal servers.

(ii)Serial Line Internet Protocol (SLIP)
SLIP is an older remote access protocol that provides point-to-point connections over TCP/IP using serial connections. It was mainly used on Unix platforms. Security is a main concern with SLIP because all usernames and passwords are transmitted in clear text. It does not support any methods for encryption or secure authentication. Besides this, it does not ensure guaranteed delivery of data because of the absence of any error detection, correction, or packet-sequencing mechanisms. In most major network operating systems, Point-to-Point Protocol (PPP) has replaced SLIP.

(iii) Point-to-Point Protocol (PPP)
PPP is the standard protocol for remote access due to its clear advantages over SLIP and added security features. It is a protocol suite that includes several protocols. It is a cross-platform protocol and works with all major operating system environments, including Windows, Unix/Linux, NetWare, and Mac OS.

PPP allows encryption of remote user credentials during the authentication process. It also allows administrators to select an appropriate LAN protocol for use over the remote connection. Administrators can choose from NetBEUI, NetBIOS, IPX/SPX, AppleTalk, or TCP/IP. PPP supports several protocols for authentication, such as PAP, SPAP, CHAP, MS-CHAP, and EAP. The administrator can configure multiple protocols, depending on the requirements of remote clients.
(iv) PPP Over Ethernet (PPPoE).
PPPoE is a combination of PPP and Ethernet protocols. It encapsulates the PPP information inside an Ethernet frame. This enables multiple users on a local Ethernet network to share the remote connection through a common device. For example, multiple users can share the same Internet connection through the cable modem simultaneously.

Although all users on the Ethernet network share a single physical connection to the remote network, PPPoE allows administrators to configure individual authentication for each user. PPPoE also enables administrators to track connection statistics (such as the connection time) of individual users.

No comments:

Post a Comment