NPS Configuration [MS-NPS]

Launch Network Policy Server

1. In Server Manager click "Tools"
2. Select Network Policy Server

Create a RADIUS Client

1. Expand "Radius Clients and Servers"

 2. Right Click "Radius Clients" and select "New" from the menu

3. Enter a Friendly name, e.g, "RRAS"

4. Enter the RRAS’s IP in the IP address filed, e.g. "127.0.0.1", if on the same machine,

5. Enter the Shared secret password

6. Click "OK"

Create a Remote RADIUS Server Group

1. Right Click "Remote RADIUS Server Group" and select "New" from the menu

2. Enter a group name e.g. "DualShield MFA"

Enter the name or IP address of the DualShield Radius Server 

1. Select "Authentication/Accounting" tab on the Radius Clients Context Menu, enter the Shared secret password
   
   
   
   
2. Select "Load Balancing" tab, allocate the weight and click "OK"

Create a Connection Request Policy

1. Create the connection request policies, e.g. "DualShield Radius Connection Policy"
2. Change type of network access server to "Remote Access Server (VPN-Dial up)" and click "Next"
   
   
   
   
3. Add a new condition "Day and Time Restrictions" and select "Permitted" to allow certain time of connection and press "OK" and "Next"
   
   
   
   
4. Select "Forward requests to the following remote RADIUS server group for authentication" and select the newly server group "DualShield Radius Server Group"
   
   
   
   
5. Click "Next" and "Finish"

Create a Network Policy

1. Create Network Policies, e.g. "DualShield Radius Network Policy"
2. Change type of network access server to "Remote Access Server (VPN-Dial up)" and click "Next"
   
   
   
   
3. Add a new condition "Day and Time Restrictions" and select "Permitted" to allow certain time of connection and press "OK" and "Next"
   
   
   
   
4. Specify Access Permission and click "Next"
   
   
   
   
5. Select the authentication methods
   
   
   
   
6. Click "Next" and "Finish"