How to Set the Framed IP Address Attribute in Windows 2000 Internet Authentication Service (279101)

MORE INFORMATION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

Most attributes in Microsoft Internet Authentication Service (IAS) can be set by editing the appropriate Remote Access Policy. However, the Framed IP address attribute cannot be set directly in IAS. When you look at the list of Remote Authentication Dial-in User Service (RADIUS) attributes that are available, Framed IP address is not present.

Setting the IP Address attribute in Windows 2000 IAS

• To set the Framed IP address attribute to 255.255.255.255 or 0xFFFFFFFF, follow these steps:
  
  
  1. Right-click the appropriate Remote Access Policy, and then click Properties.
  2. Click Edit Profile, click the Internet Protocol tab, and then click to select the Client may request an IP address check box.
• To set the Framed IP address to 255.255.255.254 or 0xFFFFFFFE, follow these steps:
  
  
  1. Right-click the appropriate Remote Access Policy, and then click Properties.
  2. Click Edit Profile, click the Internet Protocol tab, and then click to select the Server must supply an IP address check box.
• To set the Framed IP address setting to a specific IP address value:
  
  
  1. Right-click the user and click Properties.
  2. Click the Dial-in tab, and then click to select the Assign a Static IP address check box.
  3. Type the appropriate IP address.

NOTE: The Static IP address setting that is located in the User Properties overrides any setting in the Remote Access Policy. This setting can only be set for local users on a standalone server that is running Windows 2000 IAS. If the server is an Active Directory-integrated domain, the domain must be in Native mode.

When you click to select the Server settings define policy check box on the Internet Protocol tab, you configure the setting to use the Network Access server's (NAS) default setting for the IP Address Assignment Policy. Check the vendor documentation for your NAS device to learn how to implement this configuration. The Server settings define policy option is most useful when you are using IAS in an outsourced dial-in scenario where the server that is running IAS should not assign the IP Address Policy.

If you are using a server that is running Windows 2000 Routing and Remote Access Service (RRAS) as your remote access server, the server's default IP Address Assignment Policy is set to Do not allow client to choose its own IP Address. The server uses Dynamic Host Configuration Protocol (DHCP) or IP Address Pool (as configured).

To change the default behavior for Windows 2000 Routing and Remote Access Service (RRAS), follow these steps on the RRAS server:

1. Start Registry Editor.
2. Locate and click the following registry key:

   HKEY_LOCAL_MACINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\Ip

3. On the Edit menu, click New, and then add the following value:

   Value name: AllowClientIpAddresses
   Data type: REG_DWORD
   Range: 0
   Default value: 1 0

Description:
This setting enables dial-up clients to request a connection to a particular RRAS server by specifying its IP address.

Value Meaning:
0 Clients cannot request a particular server.
1 Clients can request a particular server.

NOTE: In Windows 2000, this entry is not added to the registry. In Windows NT 4.0 and earlier, this entry is located in the following registry subkey:

The Client may request an IP address option in the Routing and Remote Access Policy takes precedence over the value of this registry setting.