Deploying Virtual Private Networks with Microsoft Windows Server 2003

Joseph Davies
Elliot Lewis

PUBLISHED BY
Microsoft Press A Division of Microsoft Corporation
One Microsoft Way
Redmond, Washington 98052-6399

Copyright 2004 by Microsoft Corporation

All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher.

Library of Congress Cataloging-in-Publication Data Davies, Joe

Deploying Virtual Private Networks with Microsoft Windows Server 2003 / Joe Davies, Elliot Lewis.
p. cm. Includes index. ISBN 0-7356-1576-4
1. Extranets (Computer networks). 2. Microsoft Windows Server. I. Title.

TK5105.875.E87W45 2003
004.6--dc21 2003042174
Printed and bound in the United States of America.
1 2 3 4 5 6 7 8 9 QWT 8 7 6 5 4 3
Distributed in Canada by H.B. Fenn and Company Ltd.
A CIP catalogue record for this book is available from the British Library.

Microsoft Press books are available through booksellers and distributors worldwide. For further information about international editions, contact your local Microsoft Corporation office or contact Microsoft Press International directly at fax [phone]. Visit our Web site at www.microsoft.com/mspress. Send comments to [e-mail].

Active Directory, ActiveX, Microsoft, Microsoft Press, MSDN, MSN, Outlook, Visual Basic, Windows, the Windows logo, Windows Mobile, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners.

The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred.

Acquisitions Editor
Martin DelRe

Project Editor
Valerie Woolley

Technical Editor
Jim Johnson

About the Authors

Joe Davies

Joe is a program manager on the Networking and Communications team in the Microsoft Windows product group. He is the author of Understanding IPv6 and Deploying Secure 802.11 Wireless Networks with Microsoft Windows and coauthor of Microsoft Windows Server 2003 TCP/IP Protocols and Services Technical Reference.

Elliot Lewis

Elliot is the lead program manager for Secure Network Access on the Networking and Communications Team in the Microsoft Windows product group. His team handles VPN technologies, Internet Authentication Services, RADIUS, and wireless security for all Windows operating systems. He is MCSE, CCDP, CCNP, and CCSE and MCT certified.

Acknowledgments

From the beginning, writing Deploying Virtual Private Networks with Microsoft Windows Server 2003 was a labor of love for me. As the lead program manager for Secure Network Access in Windows Networking, I have seen the VPN features of Window Server 2003 deployed for many customers, and it is a matter of passion for me to make sure that everyone and anyone who wants to use these awesome features has the resources to do so. That’s why, when Microsoft Press came to ask me to write this book, I immediately went to the very best technical author and domain expert I knew to ask him for the privilege to partner on it. Thank goodness, Joseph Davies honored me by accepting my request, and he helped lead the way to making this book a reality. Joe, it has been a privilege—and an honor—to work with the very best. Thank you!

Joe and I also want to thank Susan Ferrell and Douglas Goodwin, who assisted in providing content, and Rany El Housieny, who provided key pieces of the technical information for the CD. You guys are awesome—thanks for helping to bring this book together.

The team at Microsoft Press is simply hands-down the best publishing group I have ever worked with. Jean Trenary and Valerie Woolley were instrumental throughout the writing process. They helped me stay on track and to get the tools I needed to write this book; they crunched the schedules, kept us moving, and hounded me in all the right ways. Completing and publishing the book wouldn’t have been possible without their help! Through tight schedules, changing staff, and all kinds adversity, you two kept this machine moving. Well done—and thank you!

Any author will tell you that the most painful part of writing a book is not creating the chapter content—it’s having the editorial staff tear through the work and bring you back to reality on your writing skills. Jim Johnson was the technical editor for the book, and I want to say that I have never had a better technical editor in any of the writing projects I have done. Jim, you’re the best—thanks for keeping the bar high! Roger LeBlanc was our copyeditor and an excellent technical resource, as well. Roger, thank you for critiquing our work in all the right ways. Al Valvano, Jeff Koch, and Martin DelRe, thank you for your help throughout this project and for making this book a reality.

Most importantly, I want to thank my wife, Meg, and my sons, Zack, Ben, and James, for all your patience and understanding. You sacrificed many months of personal time without me so that I could write this book, and you deserve all the credit for making it happen. I love you very much.

And finally—my father, Mark Lewis, told me recently that it’s one of his great dreams to see his name in print in a published book. My mother, Adrianne Yaffe, is an aspiring author herself, and I’m sure that she will accomplish this feat on her own. But for you, Dad, well, some wishes do come true. (Now, if only the New York Giants could win another Super Bowl for us, J.) I love you both.