Share via


RAS Client

Applies To: Windows Server 2008 R2

You can create dial-up and broadband remote access connections to reach remote computers. With the Point-to-Point Tunneling Protocol (PPTP), Layer Two Tunneling Protocol (L2TP), or Secure Socket Tunneling Protocol (SSTP), which are automatically installed on your computer, you can securely access resources on a network by connecting to a remote access server through the Internet or other network. The use of both private and public networks to create a network connection is called a virtual private network (VPN).

VPN connections are created with the Connect to a Workplace wizard or through a RAS dialer profile using the Connection Manager Administration Kit (CMAK). The profile is distributed by administrators to remote access users who install it on their computers.

Aspects

The following is a list of all aspects that are part of this managed entity:

Name Description

RAS Connection Establishment

Remote access involves the establishment of a dial-up or broadband connection with a remote access server. A dial-up client that connects to a server running Routing and Remote Access can be any PPP client. The client must have installed a modem, an analog telephone line or other wide area network (WAN) connection, and remote access software. Virtual private networking (VPN) clients that connect to Routing and Remote Access must be able to send TCP/IP packets to the remote access server over the Internet. Therefore, either a network adapter or modem with an analog telephone line or other WAN connection to the Internet is required.

RAS Connection Termination

Remote access involves establishing a dial-up or broadband connection with a remote access server. A dial-up client that connects to a server running Routing and Remote Access can be any PPP client. The client must have installed a modem, an analog telephone line or other wide area network (WAN) connection, and remote access software. Virtual private networking (VPN) clients that connect to Routing and Remote Access must be able to send TCP/IP packets to the remote access server over the Internet. Therefore, either a network adapter or modem with an analog telephone line or other WAN connection to the Internet is required.

VPN NAP Enforcement Client Configuration

A Network Access Protection (NAP) enforcement client is responsible for requesting access to a network, communicating a client computer's health status to the NAP server that is authorizing the network access, and communicating the connection status of the client computer to other components of the NAP client architecture. A NAP-capable client is a computer that has the NAP components installed and can verify its health state by sending a statement of health (SoH) to NPS.

The remote access enforcement client enforces health policies when a client computer attempts to gain access to the network through a virtual private network (VPN) connection.

Routing and Remote Access Service Infrastructure