Setting up Active Directory on Windows Server 2012:


A RADIUS server can be configured on Windows Server 2012 using Active Directory and Network Policy Server.

2.1 Installation

  1. Active Directory and Network Policy Server can be installed by going to the Server Manager and in the Dashboard and clicking Add roles and features.

2.2 Configuration

  1. Network Policy Server
  1. Top node "NPS" → Right click → Register server in Active Directory
  2. RADIUS Clients → Right click → New
      1. Friendly name : anything
      2. Address: netLD server IP address
      3. shared secret
      4. OK
    1. Network Policies → Right click → New
      1. Policy name: anything
      2. Next
      3. Conditions → Add → User Groups → Add → Add Groups → Domain Users
      4. Next
      5. Permission, leave defaults (Access Granted)
      6. Next
      7. Authentication Methods → check: Unencrypted authentication
      8. Next
      9. Constraints, leave defaults
      10. Next
      11. Settings → RADIUS Attributes → Standard → Add…
        1. Attribute: Filter-Id → Add…
        2. Attribute Information → Add..
        3. String value: 'role:Administrator'
        4. OK
      1. OK
    1. Close
  1. Next
  2. Finish

 

This configuration allows netLD users to authenticate as a domain user and will grant the user the Administrator role. You can create any number of Network Policies; each one can represent a different group of users with different RADIUS attributes applied. For example, if you have two roles, Administrator and Operator, you can create one Network Policy for each and specify the Filter-Id appropriately for each