A key to configuring Cisco RADIUS with Windows Server

You are here:

Home
Cisco Professional eTips
A key to configuring Cisco RADIUS with Windows Server

When configuring Cisco RADIUS to authenticate via Active Directory on Windows Server, it’s important to know what to add as a “condition” vs. a “constraint.” For example, generally when setting the NAS Port Type to VPN, this should be set up as a condition.

Windows Server has network policy constraints and network policy conditions. The difference is that when conditions don’t match a connection request, the Network Policy Server (NPS) looks for other network policies matching the connection request, whereas if there’s no match for a constraint, NPS rejects the connection request.

For a good synopsis on how to do the configuration (using Windows Server 2008 R2 Datacenter), consult the following web page:

http://murison.wordpress.com/2010/11/11/cisco-radius-configuration-with-server-2008-r2/

May 6, 2015