3/29/2017 1:27 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Network Policy Server and Access Role 3/29/2017 1:27 PM Network Policy Server and Access Role Javier Rama del Castillo EMEA GTSC Support Platform Engineer © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Introducción El rol Network Policy and Access Services (NPAS) es una agrupación lógica de las siguientes tecnologías de acceso a la red: Routing and Remote Access – DEMO I - RRAS nos permite implementar servidores VPN, servidores dial-up y múltiples servicios de enrutado multiprotocolo LAN-to-LAN, LAN-to-WAN o NAT. Network Policy Server (NPS) – DEMO II - Es la implementación de Microsoft de servidores y proxies RADIUS. - Con NPS podemos administrar el acceso a la red a través de distintos tipos de servidores tales como APs Wireless, servidores VPN, servidores dial-up o switches 802.1x. - Despliegue de NAP. Health Registration Authority (HRA). - Componente NAP que distribuye “certificados de salud” a los clientes que cumplen las verificaciones de las políticas de salud realizadas por el servidor NPS. Host Credential Authorization Protocol (HCAP). - Permite integrar NAP con Cisco Network Access Control Server.

¿Qué hace esta característica? El servidor NPAS proporciona tecnologías que permiten el despliegue de: Virtual Private Networks (VPNs) Dial-up networking NAT Tecnologías de protección de acceso a la red

¿Quién puede estar interesado? Administradores de red interesados en administrar el acceso a la red de forma centralizada, incluyendo: Autenticación (Verificación de Identidad) Autorización (Verificación de los permisos para acceder a la red) Contabilidad (el seguimiento del estado de la conexión gracias a NPS) Además, todos aquellos administradores de sistemas interesados en crear: VPNs que permitan a los clientes conectarse a la red privada a través de Internet. Traducción de direcciones (NAT) que permitan compartir la conexión a Internet de los equipos de la red privada, así como traducir direcciones de red ente redes públicas y privadas. Asegurar la conexión entre redes privadas y enviar datos privados de manera segura a través de Internet.

¿Que nueva funcionalidad ofrece esta caracteristica? Network Access Protection (NAP) Nuevos comandos de netsh para NPS Nuevo Interfaz gráfico Soporte para IPv6 Integración con Cisco Network Admission Control (NAC) Integración con el Server Manager Políticas de red correspondientes a cada modo de conexión a la red. Posibilidad de importar/exportar configuración NPS (en formato XML) RRAS SSTP Tunneling protocol - Es una nueva forma de túnel VPN. SSTP proporciona un mecanismo para encapsular tráfico PPP por un canal SSL del protocolo HTTPS. - Necesario permitir trafico por el puerto TCP 443. ¿Por qué es importante esta funcionalidad? El tráfico encapsulado con SSTP puede atravesar firewalls que tengan bloqueado el acceso por PPTP o L2TP/IPSec .

¿Que cambia esta funcionalidad? El RRAS ya no existe como rol, ahora es un servicio del rol NPAS. Se han retirado las siguientes tecnologías tanto de Windows Server 2008 como de Vista (Servidor RRAS): Bandwidth Allocation Protocol (BAP). Removed from Windows Vista. Disabled in Windows Server 2008. X.25. Serial Line Interface Protocol (SLIP). SLIP-based connections will automatically be updated to PPP-based connections. Asynchronous Transfer Mode (ATM). IP over IEEE 1394. NWLink IPX/SPX/NetBIOS Compatible Transport Protocol. Services for Macintosh. Open Shortest Path First (OSPF) routing protocol component. El servicio NPS es el antiguo IAS (Internet Authentication Service) de Windows Server 2003.

¿Qué debo preparar para desplegar esta característica? Cuando NPS pertenece a un dominio Active Directory, éste usa la base de datos de AD como su base de datos de cuentas. …

¿Disponible en todas las versiones de Windows 2008? Todas las versiones de Windows Server 2008.

Demo (I) – Routing and Remote Access 3/29/2017 1:27 PM Demo (I) – Routing and Remote Access © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo (II) – RRAS con autenticación NPS 3/29/2017 1:27 PM Demo (II) – RRAS con autenticación NPS © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3/29/2017 1:27 PM © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.