Radius Accounting Forwarding - Radius Proxy

-

hello all

setup - multiple nps servers running on network radius service. 52 wireless access points wifi users. introduced dell sonicwall firewall in network gateway device.

requirement - wifi users should able authenticate through radius server wireless access , nps should radius proxy or account forwarding.

issue - have people coming in non domain devices. connected wireless ssid using domain credentials gets verified radius server. gateway not aware of authentication part. web filtering applied @ gateway level firewall needs updated user information on byod. achieve this, trying forward radius accounts firewall.

as of firewall able communicate radius server accounts not forwarded firewall nps. on access points, accounting information forwarded nps server. want nps server forward account information firewall user information can maintained on gateway.

i tried go through radius proxy article did not help. if add gateway's ip instead of nps server in access points accounting information on firewall. firewall has limitation add 15 hosts accounting , have on 50 access points.

so thinking if access points can send accounting information radius server , in turn server can forward firewall or gateway, fix issue. or radius server has accounting information matter of forwarding gateway.

i poor on systems side , hence trying assistance. might silly question many of stuck here , need fix.

please assist.

thank you

amit

hi amitk0703,

as far know design can’t not accomplished, nps server need request authentication ad , determine whether pass wireless client, in process there don’t have option can forward user account third part devices , revice replay.

more information:

nps radius server , proxy

http://technet.microsoft.com/en-us/library/dd197447(v=ws.10).aspx

network policy server

http://msdn.microsoft.com/en-us/library/cc732912.aspx

connection request policies

http://msdn.microsoft.com/en-us/library/cc753603.aspx

i’m glad of you!

please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com




Windows Server  >  Setup Deployment



Comments

Post a Comment

Popular posts from this blog

Indexing Server

-
just quick question - 2008 have indexing server? can't see option - , want setup web based search engine using indexing server catalogs , asp.net....   it availble? does not based on - http://technet2.microsoft.com/windowsserver2008/en/library/82bac070-bee4-452e-a783-3ce31b5e1d0f1033.mspx?mfr=true Windows Server  >  Management
Read more

Schannel Issue

-
hello there, i have windows 2008 r2 machine. , have hosted sharepoint 2010 on it. i have site have published on internet. i don't know whether it's related , getting error unable resolve or come conclusion. it's pretty frequent. my server patched latest updates. log name:      system source:        schannel date:          8/12/2011 3:49:43 pm event id:      36887 task category: none level:         error keywords:      user:          system computer:      mycomp.domain.com description: following fatal alert received: 42.   the above error doesn't provide info . could please me identify issue , possible solution ? there have been lot of posts one. i believe can safely ignored...
Read more

oclist /xml or /?

-
oclist have qualifiers? can behaviour changed, example output xml?   given previous comments andrew m , comments in forums , blogs think answer no, it’s simple app calling underlying api, thought i'd ask can't seem find anything.   why asking question? i'd @ least 2 things oclist (apart nicer looking output [which i'm not going get], dependances listed [dicussed in forum , ruled out], , refrushing add ad componets , telling use dcpromo [which in banner know]): - whether installing component cuase / require reboot (currently believe qwave , printing services require reboot)   - xml output, can't justify team looking see if can commality with full server   fwiw :j   hi,   oclist not have qualifiers or ways change output. when iis came in late, make oclist output longer, unfortunately late make significant changes.   i'll take feedback , add our list next version.   thanks,   andrew   ...
Read more