step by step radius windows
TRANSCRIPT
-
7/23/2019 Step by Step Radius Windows
1/55
Step by Step : Installing and Configuringa Network Policy Server in WindowsServer 2012 2July 15, 2014
Network Policy Server! w"at is NPS all about#
NPS enables you to create and enforce organization-wide network access oliciesfor client !ealt!, connection re"uest aut!entication, and connection re"uestaut!orization#
$ou also can use NPS as a %&'()S ro*y to forward connection re"uests to NPS orot!er %&'()S ser+ers t!at you configure in re ote %&'()S ser+er grou s#
$ou can use NPS to i le ent network-access aut!entication, aut!orization, and client!ealt! olicies wit! any co bination of t!e following functions.
$ %&I'S server
$ %&I'S pro(y
$ N%P policy server
/ore infor ation lease log in to . !tt . sdn# icrosoft#co en-us library cc 2 12#as *
3!is will be a +ery long ste to go t!roug!, so lease take your ti e and ake sure you!a+e a working do ain lab for you to install configure NPS
6!at you will find in y ost today will be straig!t forward rocess to de loy configure NPS, t!ere was any t!ings you can do wit! NPS## so lease s end so eti e browsing to /icrosoft tec!net for ore details infor ation
7ets get started by installing NPS role and t!is NPS role later will be use to su ort%&'()S
1 8 9n t!e 'o ain ser+er :9S(-&''S01;, o en Ser+er /anager, click %dd roles andfeatures
http://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspxhttp://msdn.microsoft.com/en-us/library/cc732912.aspx -
7/23/2019 Step by Step Radius Windows
2/55
2 8 Ne*t, on t!e Select installation type interface! click ole)based or feature basedinstallation , and t!en click Ne*t to roceed
-
7/23/2019 Step by Step Radius Windows
3/55
8 9n t!e Select destination server interface , click Ne*t
-
7/23/2019 Step by Step Radius Windows
4/55
4 8 9n t!e Select ser+er roles interface, select t!e Network Policy and %ccess Servicesc!eck bo* and t!en click Ne*t
5 8 9n t!e Select features interface,
-
7/23/2019 Step by Step Radius Windows
5/55
= 8 Ne*t, on t!e Network Policy and %ccess Services age, click Ne*t
-
7/23/2019 Step by Step Radius Windows
6/55
8 Ne*t, on t!e Select role ser+ices interface, click Network Policy Server c!eck bo*,and t!en click Ne*t
> 8 9n t!e Confir* installation selections interface, click (nstall
-
7/23/2019 Step by Step Radius Windows
7/55
8 Ne*t, +erify t!at our installation was successful , and t!en click ?lose
-
7/23/2019 Step by Step Radius Windows
8/55
10 8 Ne*t, on t!e Ser+er /anager, click 3ools and t!en click Network Policy Server+
11 8 (n Network Policy /anager interface, in t!e na+igation ane, rig"t)click NPS,-ocal. , and t!en click egister server in %ctive &irectory
-
7/23/2019 Step by Step Radius Windows
9/55
12 8 (n t!e Network Policy Ser+er essage bo*,
-
7/23/2019 Step by Step Radius Windows
10/55
1 8 (n t!e subse"uent Network Policy Ser+er interface, click /
14 8 Ne*t, lets continue wit! configuring NPS e*plates (n t!e Network PolicySer+er console, rig"t)click S"ared Secrets! and t"en click New
-
7/23/2019 Step by Step Radius Windows
11/55
15 8 Ne*t, in t!e New %&I'S S"ared Secret e*plate interface , in t!e 3e latena e bo*, ty e 9S( Security :you can fill in any na e you refer;, t!en in t!e S"ared
secret and Confir* s"ared secret bo*es, ty e your referred assword and t!en click9@
-
7/23/2019 Step by Step Radius Windows
12/55
1= 8 Ne*t, rig"t)click %&I'S Clients , and t!en click New
-
7/23/2019 Step by Step Radius Windows
13/55
1 8 Ne*t, in t!e New %&I'S Client interface , in t!e Ariendly na e bo*, ty e 9S(- NPS, t!en you need to key in t!e (P &ddress of t!e NPS Ser+er, w!ic! in y case1 2314303104, click 5erify to confir t!e (P &ddress, t!en click %esol+e so t!at it willidentify t!e correct (P &ddress, click 9@ to roceed
1> 8 Ne*t, in t!e New %&'()S ?lient interface, under S!ared Secret, in t!e Select ane(isting S"ared Secrets te*plate area , click 9S( Security, and t!en click 9@#
-
7/23/2019 Step by Step Radius Windows
14/55
1 8 Ne*t, lets configure %&'()S accounting for logging ur oses
-
7/23/2019 Step by Step Radius Windows
15/55
20 8 (n t!e %ccounting Configuration introduction 6izard, click Ne*t
21 8 9n t!e Select &ccounting 9 tions interface, click -og to a te(t file on t"e localco*puter , and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
16/55
22 8 9n t!e Configure -ocal 6ile -ogging interface , click Ne*t
-
7/23/2019 Step by Step Radius Windows
17/55
2 8 9n t!e Su**ary interface, click Ne*t
24 8 9n t!e Conclusion interface, click ?lose
-
7/23/2019 Step by Step Radius Windows
18/55
25 8 Ne*t, we need to configure and test our %&'()S ?lient## (n t!e Network PolicySer+er console, e* and %&'()S ?lients and Ser+ers, t!en rig"t)click %&I'S
Clients , and t!en click New
-
7/23/2019 Step by Step Radius Windows
19/55
2= 8 (n t!e New %&'()S ?lient interface, lease clear t"e 7nable t"is %&I'Sclient c"eck bo( , t!en you can click Select an e(isting te*plate c"eck bo( ##verify
t!at your e*isting te late listed in t!e list t!en click 9@
-
7/23/2019 Step by Step Radius Windows
20/55
6e !a+e done installing configuring NPS in our do ain ser+er w!ic! 9S(-&''S01ser+er, now itBs ti e for us to configure %outing and %e ote &ccess in %&'()S ?lient
:9S(-NPS ser+er;
2 8 9n t!e 9S(-NPS Ser+er, o en Ser+er /anager, click &dd %oles and features
-
7/23/2019 Step by Step Radius Windows
21/55
2> 8 9n t!e Cefore you begin interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
22/55
2 8 9n t!e Select installation ty e interface, click Ne*t
0 8 9n t!e Select destination ser+er, click Ne*t to roceed
-
7/23/2019 Step by Step Radius Windows
23/55
1 8 9n t!e Select ser+er roles interface, click e*ote %ccess bo* and click Ne*t
-
7/23/2019 Step by Step Radius Windows
24/55
2 8 9n t!e Select features interface, click Ne*t
8 Ne*t, on t!e e*ote %ccess interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
25/55
4 8 9n t!e Select role ser+ices, ake sure you click &irect%ccess and 5PN , %S. c!eck bo*, and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
26/55
5 8 9n t!e Web Server ole ,IIS. interface, roceed wit! Ne*t
-
7/23/2019 Step by Step Radius Windows
27/55
= 8 9n t!e Select role services interface, roceed wit! Ne*t
8 9n t!e Confir* installation selections interface, click (nstall
-
7/23/2019 Step by Step Radius Windows
28/55
> 8 9n t!e Installation progress interface, click close
-
7/23/2019 Step by Step Radius Windows
29/55
8 Ne*t, o en Ser+er /anager click 3ools and click outing ans e*ote %ccess
40 8 Ne*t, in t!e %outing and %e ote &ccess console, rig"t)click NPS ,-ocal. , andt!en click Configure and 7nable outing and e*ote %ccess
-
7/23/2019 Step by Step Radius Windows
30/55
41 8 9n t!e %outing and %e ote &ccess Ser+er 6izard interface, click Ne(t
-
7/23/2019 Step by Step Radius Windows
31/55
42 8 9n t!e ?onfiguration interface, ake sure you click e*ote access ,dial up or5PN.
4 8 9N t!e %e ote &ccess interface, click 5PN c!eck bo*
-
7/23/2019 Step by Step Radius Windows
32/55
44 8 Ne*t, in t!e DPN ?onnection interface, click t!e network interface na*ed7t"ernet 8 , but ake sure you clear t!e Enable security on t!e selected interface by
setting u static acket filters c!eck bo*, and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
33/55
45 8 9n t!e (P &ddress &ssign ent interface, select 6ro* a specified range ofaddresses , and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
34/55
4= 8 9n t!e %ddress ange %ssign*ent interface, click New
-
7/23/2019 Step by Step Radius Windows
35/55
4 8 9n t!e New IPv9 %ddress ange interface, in t!e Start (P address, ty e1 2#1=#0#201, t!en in t!e End (P address, ty e 1 2#1=#0#220, +erify t!at 20 (P addresseswere assigned for re ote clients, and t!en click Ne*t
4> 8 9n t!e %ddress ange %ssign*ent interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
36/55
4 8 9n t!e anaging ultiple e*ote %ccess Servers interface, click ;es! set upt"is server to work wit" a %&I'S server , and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
37/55
50 8 9n t!e %&I'S Server Selection interface, in t!e Pri ary %&'()S ser+er bo*,ty e &''S01 (n t!e S!ared secret bo*, ty e your assword and t!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
38/55
51 8 (n t!e %outing and %e ote &ccess Ser+er Setu 6izard, click 6inis"
-
7/23/2019 Step by Step Radius Windows
39/55
52 8 (n t!e outing and e*ote %ccess dialog bo*, click 9@
5 8 Ne*t, switc! to t!e /SI)%&&S01 do*ain server so t!at we can configure aNetwork Policy for %&I'S in t!e Network Policy Ser+er console, e* andPolicies , and t!en click Network Policies , in t!e details ane, rig!t-click t!e olicy att!e to and botto of t!e list, and t!en click &isable
-
7/23/2019 Step by Step Radius Windows
40/55
54 8 Ne*t, rig!t click Network Policies! and t"en click New
-
7/23/2019 Step by Step Radius Windows
41/55
55 8 (n t!e New Network Polic y 6izard, in t!e Policy na e bo*, ty e 9S( DPNPolicy, and t!en in t!e 3y e of network access ser+er list, click e*ote %ccessServer,5PN)&ial up. , and t!en click Ne*t
5= 8 Ne*t, on t!e Specify Conditions age, click %dd , t!en in t!e Select conditiondialog bo*, click N%S Port ype , and t!en click %dd
-
7/23/2019 Step by Step Radius Windows
42/55
5 8 (n t!e N&S Port 3y e dialog bo*, select t!e 5irtual ,5PN. c!eck bo*, and t!enclick 9@
-
7/23/2019 Step by Step Radius Windows
43/55
5> 8 Ne*t, on t!e Specify Conditions interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
44/55
5 8 Ne*t on t!e Specify %ccess Per*ission interface, click &ccess granted, and t!enclick Ne*t
=0 8 9n t!e Configure %ut"entication et"ods interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
45/55
=1 8 9n t!e Configure Constraints interface, click Ne*t
-
7/23/2019 Step by Step Radius Windows
46/55
=2 8 9n t!e Configure Settings interface, click Ne*t
= 8 9n t!e ?o leting New Network Policy interface, click 6inis"
-
7/23/2019 Step by Step Radius Windows
47/55
=4 8 Ne*t, on t!e Network Policy Ser+er console, verify your setting
-
7/23/2019 Step by Step Radius Windows
48/55
=5 8 Now lets test our %&I'S configuration wit" Windows #1 client and log in as &d inistrator, t!en o en Network and S!aring ?entercontrol anel, in t!e Network and S!aring ?enter, click Set u a new connection onnetwork
== 8 9n t!e ?!oose a connection o tion interface, click Connect to a workplac e, andt!en click Ne*t
-
7/23/2019 Step by Step Radius Windows
49/55
= 8 9n t!e Fow do you want to connect interface, click 'se *y Internet connection,5PN.
-
7/23/2019 Step by Step Radius Windows
50/55
=> 8 ?lick I=ll set up an Internet connection later
-
7/23/2019 Step by Step Radius Windows
51/55
= 8 9n t!e ype t"e Internet address to connect to interface, in t!e (nternet address bo*, ty e 1 231430310>, in t!e 'estination na e bo*, ty e /SI 5PN , t!en select t!e%llow ot"er people to use t"is connection c"eck bo( , and t!en click ?reate
0 8 (n t!e Network &nd S!aring ?enter window, rig"t)click t"e /SI5PN connection! and t"en click Properties
-
7/23/2019 Step by Step Radius Windows
52/55
1 8 9n t!e 9S( DPN Pro erties, click t!e Security tab and t!en in t!e 3y e of DPNlist, click Point to Point unneling Protocol ,PP P.! t"en under %ut"entication!
click %llow t"ese protocols! and t"en click /
-
7/23/2019 Step by Step Radius Windows
53/55
2 8 Ne*t, rig!t-click t!e 9S( DPN connection, and t!en click Connect?&isconnect
-
7/23/2019 Step by Step Radius Windows
54/55
8 Ne*t, in Network sign-in, in t!e )ser na e bo*, ty e osiGad inistrator and assword and t!en click 9@
4 8 7astly, wait few second for t!e DPN connection to be establis"ed # Ensure t!atyour connection is successful
-
7/23/2019 Step by Step Radius Windows
55/55