Configuration of network policy and access services (NPS/RADIUS server)

The RADIUS server for the 802.1x WLAN authentication is configured in the Network Policy Servers (NPS) menu.

  1. Go to Server Manager -> Network Policies and Access Services (NPS) -> NPS (local).

  2. Select a configuration scenario.

  3. Click on the Configure 802.1X link to open the scenario assistant.

  4. In the first step, select Type of 802.1x Connections Secure Wireless Connections and assign a Name e. g. WLAN_Authentication .

  5. In the second step of the assistant, all access points are configured as RADIUS client. At login of a WLAN client, the access points send authentication requests to the RADIUS server (network policies and access services, NPS). When creating the RADIUS clients (access points), their IP address and a password are assigned to protect the RADIUS authentication.

  6. Next, the EAP type (Extensible Authentication Protocol) is selected for authentication of the WLAN client. In this workshop EAP-PEAP is used. In the EAP-PEAP option configuration dialog box, the server certificate for identification to the WLAN client must be selected.

  7. In the next step, WLAN access can be restricted to individual user groups. In this workshop, we're allowing access to members of the WLANuser group.

  8. Before closing, the assistant displays a summary and the configuration of the Network Policy Server (NPS) is created.