How to Setup RADIUS in Azure using Windows NPS Server for Wireless Authentication with AD

Описание: #RADIUS #NPS #WirelessAuthentication

Setup and Install RADIUS Server running Windows NPS Server on Windows Server 2019 or Windows Server 2016. Setup for Wireless authentication using Active Directory (AD). This deploys in Azure running on a Windows VM.

Connect your wireless access points (AP) as RADIUS clients and allow users to SSO - Authenticate with Active Directory.

This RADIUS server uses NPS to perform centralized authentication, authorization, and accounting for wireless, authenticating switches, remote access dial-up or virtual private network (VPN) connections. When you use NPS as a RADIUS server, you configure network access servers, such as wireless access points or VPN servers, as RADIUS clients in NPS. You also configure network policies that NPS uses to authorize connection requests, and you can configure RADIUS accounting so that NPS logs accounting information.

NPS uses an Active Directory Domain Services (AD DS) domain or the local Security Accounts Manager (SAM) user accounts database to authenticate user credentials for connection attempts.

Deploy RADIUS on Windows Server 2019 in Azure
https://azuremarketplace.microsoft.co...

Deploy RADIUS NPS Server on Windows Server 2016 in Azure
https://azuremarketplace.microsoft.co...

Follow our step by step tutorial for more configuration steps:
https://cloudinfrastructureservices.c...

Windows RADIUS Server Features:
Supports WPA2-Enterprise (preferred) or WPA-Enterprise, and either AES (preferred) or TKIP encryption cipher, depending on which versions are supported by your wireless client computer network adapters.
Active Directory or local security accounts manager for authentication
Allow or deny connections to specific wireless networks that you specify by network type and Service Set Identifier (SSID)
Allow or deny connections to infrastructure networks
Allow or deny connections based on AD group membership
Machine certificate authentication using trusted certs
Built-in support for IEEE 802.1X Authenticated Wireless Access with PEAP-MS-CHAP v2
Accounting logging
Unlimited number of RADIUS clients (APs) and remote RADIUS server groups
Configure RADIUS clients (APs) by specifying an IP address range.
Single sign-on solution
RADIUS standard specified by the Internet Engineering Task Force (IETF) in RFCs 2865 and 2866