Secure placement of a RAS server

[hercules23]

Good day all,

What is the most secure placement of a dial up RAS server ?

IF my network has a Firewall ......is it better for the dial up users to connect to the RAS server, authenticate and connect to LAN (they're already authenticated !)?
Or should the RAS server sit behind or infront of the firewall ?

I am a bit confused.

Any thoughts will be appreciated

Thanks

 

[ridix]

RAS in DMZ/screened subnet, RADIUS for AAA.

If the Access server gets compromised, there is still a firewall to go through. RADIUS keeps the accounts off the RAS server.