Skip to main content

Install and configure NPS

NPS RADIUS Extension (RADIUS Extension) is an extension module for Microsoft Network Policy Server (NPS, included in Windows Server). Therefore, before you start installing RADIUS Extension, you must install and configure NPS. Otherwise, the extension does not work.

Install NPS​

  1. Open Server Manager.

  2. In the upper right corner, click Manage → Add Roles and Features.

  3. In the Add Roles and Features Wizard, on the Installation Type tab, select Role-based or feature-based installation.

  4. On the Server Selection tab, select the server for the installation.

  5. On the Server Roles tab, select the Network Policy and Access Services role and agree to install the additional components.

  6. Go through the wizard steps up to the Confirm installation selections tab, leaving the default settings.

  7. Click Install.

Configure NPS​

Add a RADIUS client​

  1. Start Network Policy Server.

  2. Expand the RADIUS Clients and Servers section.

  3. Right-click RADIUS Clients and select New.

  4. In the New RADIUS Client window, specify the client settings:

    • In the Friendly name field, enter an arbitrary friendly name.

    • In the Address (IP or DNS) field, enter the address of the client component server.

    • In the Shared Secret section, specify the secret key for the connection.

      Note

      Specify the shared secret that was set when configuring the client component. If the connection on the client side has not been configured yet, specify an arbitrary secret and remember it. This key is required when configuring the client component connection.

  5. Click OK.

Add a network policy​

  1. Start Network Policy Server.

  2. Expand the Policies section.

  3. Right-click Network Policies and select New.

  4. In the Policy name field, specify an arbitrary name and click Next.

  5. In the Specify Conditions window, add the conditions that are checked when clients connect. To do this, click Add... and select a suitable condition. After adding the condition, click Next.

    Note

    The User Groups condition is added as an example. When adding a group, you need to specify the name of the user group from Active Directory.

  6. In the Specify Access Permission window, select Access granted and click Next.

  7. In the Configure Authentication Methods window, select the authentication methods configured on the client and click Next.

    Important

    The authentication methods on the RADIUS server side and on the client side must match, otherwise an authentication error occurs.

    Note

    If you use MS-CHAP (Challenge Handshake Authentication Protocol) authentication, enable the Store password using reversible encryption option in the user account parameters in Active Directory and update the user password.

  8. In the Configure Constraints and Configure Settings windows, leave the default values and click Next.

  9. In the Completing New Network Policy window, check the data and click Finish.