Step by Step Radius Windows

7/23/2019 Step by Step Radius Windows

1/55

Step by Step : Installing and Configuringa Network Policy Server in WindowsServer 2012 2July 15, 2014

Network Policy Server! w"at is NPS all about#

NPS enables you to create and enforce organization-wide network access oliciesfor client !ealt!, connection re"uest aut!entication, and connection re"uestaut!orization#

$ou also can use NPS as a %&'()S ro*y to forward connection re"uests to NPS orot!er %&'()S ser+ers t!at you configure in re ote %&'()S ser+er grou s#

$ou can use NPS to i le ent network-access aut!entication, aut!orization, and client!ealt! olicies wit! any co bination of t!e following functions.

$ %&I'S server

$ %&I'S pro(y

$ N%P policy server

/ore infor ation lease log in to . !tt . sdn# icrosoft#co en-us library cc 2 12#as *

3!is will be a +ery long ste to go t!roug!, so lease take your ti e and ake sure you!a+e a working do ain lab for you to install configure NPS

6!at you will find in y ost today will be straig!t forward rocess to de loy configure NPS, t!ere was any t!ings you can do wit! NPS## so lease s end so eti e browsing to /icrosoft tec!net for ore details infor ation

7ets get started by installing NPS role and t!is NPS role later will be use to su ort%&'()S

1 8 9n t!e 'o ain ser+er :9S(-&''S01;, o en Ser+er /anager, click %dd roles andfeatures
http://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspx


2/55

2 8 Ne*t, on t!e Select installation type interface! click ole)based or feature basedinstallation , and t!en click Ne*t to roceed


3/55

8 9n t!e Select destination server interface , click Ne*t


4/55

4 8 9n t!e Select ser+er roles interface, select t!e Network Policy and %ccess Servicesc!eck bo* and t!en click Ne*t

5 8 9n t!e Select features interface,


5/55

= 8 Ne*t, on t!e Network Policy and %ccess Services age, click Ne*t


6/55

8 Ne*t, on t!e Select role ser+ices interface, click Network Policy Server c!eck bo*,and t!en click Ne*t

> 8 9n t!e Confir* installation selections interface, click (nstall


7/55

8 Ne*t, +erify t!at our installation was successful , and t!en click ?lose


8/55

10 8 Ne*t, on t!e Ser+er /anager, click 3ools and t!en click Network Policy Server+

11 8 (n Network Policy /anager interface, in t!e na+igation ane, rig"t)click NPS,-ocal. , and t!en click egister server in %ctive &irectory


9/55

12 8 (n t!e Network Policy Ser+er essage bo*,


10/55

1 8 (n t!e subse"uent Network Policy Ser+er interface, click /

14 8 Ne*t, lets continue wit! configuring NPS e*plates (n t!e Network PolicySer+er console, rig"t)click S"ared Secrets! and t"en click New


11/55

15 8 Ne*t, in t!e New %&I'S S"ared Secret e*plate interface , in t!e 3e latena e bo*, ty e 9S( Security :you can fill in any na e you refer;, t!en in t!e S"ared

secret and Confir* s"ared secret bo*es, ty e your referred assword and t!en click9@


12/55

1= 8 Ne*t, rig"t)click %&I'S Clients , and t!en click New


13/55

1 8 Ne*t, in t!e New %&I'S Client interface , in t!e Ariendly na e bo*, ty e 9S(- NPS, t!en you need to key in t!e (P &ddress of t!e NPS Ser+er, w!ic! in y case1 2314303104, click 5erify to confir t!e (P &ddress, t!en click %esol+e so t!at it willidentify t!e correct (P &ddress, click 9@ to roceed

1> 8 Ne*t, in t!e New %&'()S ?lient interface, under S!ared Secret, in t!e Select ane(isting S"ared Secrets te*plate area , click 9S( Security, and t!en click 9@#


14/55

1 8 Ne*t, lets configure %&'()S accounting for logging ur oses


15/55

20 8 (n t!e %ccounting Configuration introduction 6izard, click Ne*t

21 8 9n t!e Select &ccounting 9 tions interface, click -og to a te(t file on t"e localco*puter , and t!en click Ne*t


16/55

22 8 9n t!e Configure -ocal 6ile -ogging interface , click Ne*t


17/55

2 8 9n t!e Su**ary interface, click Ne*t

24 8 9n t!e Conclusion interface, click ?lose


18/55

25 8 Ne*t, we need to configure and test our %&'()S ?lient## (n t!e Network PolicySer+er console, e* and %&'()S ?lients and Ser+ers, t!en rig"t)click %&I'S

Clients , and t!en click New


19/55

2= 8 (n t!e New %&'()S ?lient interface, lease clear t"e 7nable t"is %&I'Sclient c"eck bo( , t!en you can click Select an e(isting te*plate c"eck bo( ##verify

t!at your e*isting te late listed in t!e list t!en click 9@


20/55

6e !a+e done installing configuring NPS in our do ain ser+er w!ic! 9S(-&''S01ser+er, now itBs ti e for us to configure %outing and %e ote &ccess in %&'()S ?lient

:9S(-NPS ser+er;

2 8 9n t!e 9S(-NPS Ser+er, o en Ser+er /anager, click &dd %oles and features


21/55

2> 8 9n t!e Cefore you begin interface, click Ne*t


22/55

2 8 9n t!e Select installation ty e interface, click Ne*t

0 8 9n t!e Select destination ser+er, click Ne*t to roceed


23/55

1 8 9n t!e Select ser+er roles interface, click e*ote %ccess bo* and click Ne*t


24/55

2 8 9n t!e Select features interface, click Ne*t

8 Ne*t, on t!e e*ote %ccess interface, click Ne*t


25/55

4 8 9n t!e Select role ser+ices, ake sure you click &irect%ccess and 5PN , %S. c!eck bo*, and t!en click Ne*t


26/55

5 8 9n t!e Web Server ole ,IIS. interface, roceed wit! Ne*t


27/55

= 8 9n t!e Select role services interface, roceed wit! Ne*t

8 9n t!e Confir* installation selections interface, click (nstall


28/55

> 8 9n t!e Installation progress interface, click close


29/55

8 Ne*t, o en Ser+er /anager click 3ools and click outing ans e*ote %ccess

40 8 Ne*t, in t!e %outing and %e ote &ccess console, rig"t)click NPS ,-ocal. , andt!en click Configure and 7nable outing and e*ote %ccess


30/55

41 8 9n t!e %outing and %e ote &ccess Ser+er 6izard interface, click Ne(t


31/55

42 8 9n t!e ?onfiguration interface, ake sure you click e*ote access ,dial up or5PN.

4 8 9N t!e %e ote &ccess interface, click 5PN c!eck bo*


32/55

44 8 Ne*t, in t!e DPN ?onnection interface, click t!e network interface na*ed7t"ernet 8 , but ake sure you clear t!e Enable security on t!e selected interface by

setting u static acket filters c!eck bo*, and t!en click Ne*t


33/55

45 8 9n t!e (P &ddress &ssign ent interface, select 6ro* a specified range ofaddresses , and t!en click Ne*t


34/55

4= 8 9n t!e %ddress ange %ssign*ent interface, click New


35/55

4 8 9n t!e New IPv9 %ddress ange interface, in t!e Start (P address, ty e1 2#1=#0#201, t!en in t!e End (P address, ty e 1 2#1=#0#220, +erify t!at 20 (P addresseswere assigned for re ote clients, and t!en click Ne*t

4> 8 9n t!e %ddress ange %ssign*ent interface, click Ne*t


36/55

4 8 9n t!e anaging ultiple e*ote %ccess Servers interface, click ;es! set upt"is server to work wit" a %&I'S server , and t!en click Ne*t


37/55

50 8 9n t!e %&I'S Server Selection interface, in t!e Pri ary %&'()S ser+er bo*,ty e &''S01 (n t!e S!ared secret bo*, ty e your assword and t!en click Ne*t


38/55

51 8 (n t!e %outing and %e ote &ccess Ser+er Setu 6izard, click 6inis"


39/55

52 8 (n t!e outing and e*ote %ccess dialog bo*, click 9@

5 8 Ne*t, switc! to t!e /SI)%&&S01 do*ain server so t!at we can configure aNetwork Policy for %&I'S in t!e Network Policy Ser+er console, e* andPolicies , and t!en click Network Policies , in t!e details ane, rig!t-click t!e olicy att!e to and botto of t!e list, and t!en click &isable


40/55

54 8 Ne*t, rig!t click Network Policies! and t"en click New


41/55

55 8 (n t!e New Network Polic y 6izard, in t!e Policy na e bo*, ty e 9S( DPNPolicy, and t!en in t!e 3y e of network access ser+er list, click e*ote %ccessServer,5PN)&ial up. , and t!en click Ne*t

5= 8 Ne*t, on t!e Specify Conditions age, click %dd , t!en in t!e Select conditiondialog bo*, click N%S Port ype , and t!en click %dd


42/55

5 8 (n t!e N&S Port 3y e dialog bo*, select t!e 5irtual ,5PN. c!eck bo*, and t!enclick 9@


43/55

5> 8 Ne*t, on t!e Specify Conditions interface, click Ne*t


44/55

5 8 Ne*t on t!e Specify %ccess Per*ission interface, click &ccess granted, and t!enclick Ne*t

=0 8 9n t!e Configure %ut"entication et"ods interface, click Ne*t


45/55

=1 8 9n t!e Configure Constraints interface, click Ne*t


46/55

=2 8 9n t!e Configure Settings interface, click Ne*t

= 8 9n t!e ?o leting New Network Policy interface, click 6inis"


47/55

=4 8 Ne*t, on t!e Network Policy Ser+er console, verify your setting


48/55

=5 8 Now lets test our %&I'S configuration wit" Windows #1 client and log in as &d inistrator, t!en o en Network and S!aring ?entercontrol anel, in t!e Network and S!aring ?enter, click Set u a new connection onnetwork

== 8 9n t!e ?!oose a connection o tion interface, click Connect to a workplac e, andt!en click Ne*t


49/55

= 8 9n t!e Fow do you want to connect interface, click 'se *y Internet connection,5PN.


50/55

=> 8 ?lick I=ll set up an Internet connection later


51/55

= 8 9n t!e ype t"e Internet address to connect to interface, in t!e (nternet address bo*, ty e 1 231430310>, in t!e 'estination na e bo*, ty e /SI 5PN , t!en select t!e%llow ot"er people to use t"is connection c"eck bo( , and t!en click ?reate

0 8 (n t!e Network &nd S!aring ?enter window, rig"t)click t"e /SI5PN connection! and t"en click Properties


52/55

1 8 9n t!e 9S( DPN Pro erties, click t!e Security tab and t!en in t!e 3y e of DPNlist, click Point to Point unneling Protocol ,PP P.! t"en under %ut"entication!

click %llow t"ese protocols! and t"en click /


53/55

2 8 Ne*t, rig!t-click t!e 9S( DPN connection, and t!en click Connect?&isconnect


54/55

8 Ne*t, in Network sign-in, in t!e )ser na e bo*, ty e osiGad inistrator and assword and t!en click 9@

4 8 7astly, wait few second for t!e DPN connection to be establis"ed # Ensure t!atyour connection is successful


55/55

Documents

Step by Step Radius Windows