0% found this document useful (0 votes)
41 views

Network Policy Server

Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
41 views

Network Policy Server

Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 6

Network Policy

Server
What is NPS ?
Windows Network Policy Server is a subset feature of the Windows Server software.
Network Policy Server (NPS) allows you to create and enforce organization-wide network access
policies for connection request authentication and authorization.
Network Policy Server to give IT organizations the ability to authenticate client devices through
various network access points—i.e. WiFi, VPN, 802.1x switches, etc.
If an NPS server is placed within an Active Directory domain, it can seamlessly integrate and
ultimately authenticate network access via AD.
Essentially, the logical flow is that a user accesses a WiFi access point or VPN and submits their
username and password, which is forwarded on to the Microsoft NPS server via the RADIUS
protocol.
The NPS server will then check the credentials against Active Directory, determining whether the
user should be allowed access or not.
This approach allows IT admins to seamlessly integrate their non-Windows-based network access
equipment to authenticate with AD
RADIUS
RADIUS – Remote Authentication Dial-in User Service
RADIUS is a authentication and access control protocol used by network and computing systems
The user or machine sends a request to a Network Access Server (NAS) to gain access to a
network resource.
This request includes access credentials of the user such as Username, Password and other details
The RADIUS server checks that the information is correct using an authentication protocol (ex: PAP,
CHAP, EAP).
The RADIUS server returns with one of three responses: Access Reject, Access Challenge, or
Access Accept. Each of these responses can be passed to the user in a return webpage.
Once the user is authenticated, the RADIUS server will check that the user is authorized for the
specific network service.
Using NPS as RADIUS
When you use NPS as a RADIUS server, you configure network access servers, such
as wireless access points and VPN servers, as RADIUS clients in NPS.
You also configure network policies that NPS uses to authorize connection requests
you can configure RADIUS accounting so that NPS logs accounting information to log
files on the local hard disk or in a Microsoft SQL Server database.
RADIUS proxy - When you use NPS as a RADIUS proxy, you configure connection
request policies that tell the NPS which connection requests to forward to other
RADIUS servers and to which RADIUS servers you want to forward connection
requests.
You can also configure NPS to forward accounting data to be logged by one or more
computers in a remote RADIUS server group.
RADIUS accounting - You can configure NPS to log events to a local log file or to a
local or remote instance of Microsoft SQL Server
NPS as a RADIUS server
NPS as a RADIUS proxy

You might also like