Test windows 2022 NPS server with certificate

Darshan Desai 0 Reputation points
2023-05-26T23:21:20.8566667+00:00

What is process to test NPS server 2022 with CA certificate with cisco switch and what is the configuration for cisco switch end and windows RADIUS 2022 NPS end ?

Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
509 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Khaled El-Sayed Mohamed 1,055 Reputation points
    2023-05-30T09:31:54.5+00:00

    Hi DD

    To test NPS (Network Policy Server) 2022 with a CA certificate using a Cisco switch, you'll need to configure both the Cisco switch and the NPS server. Here's a general outline of the process:

    Configure the Cisco switch:

    • Access the Cisco switch's command-line interface (CLI).
    • Configure the switch to use RADIUS authentication for network access.
    • Define the RADIUS server (NPS server) and specify the shared secret key for communication between the switch and the server.
    • Optionally, configure additional parameters such as timeout values, authentication methods, and VLAN assignment rules.

    Configure the NPS server:

    • Install and configure NPS on a Windows Server 2022 machine.
    • Obtain or generate a CA certificate that will be used for secure communication between the switch and the NPS server.
    • Install the CA certificate on the NPS server.
    • Create a network policy on the NPS server that specifies the conditions, settings, and constraints for network access.
    • Configure the RADIUS client settings to allow communication with the Cisco switch. This includes specifying the shared secret key that matches the one configured on the switch.

    Test the configuration:

    • Connect a client device to the Cisco switch.
    • Attempt to authenticate or access the network using the client device.
    • Verify that the authentication request is sent to the NPS server and that the server responds appropriately.
    • Monitor the logs on both the Cisco switch and the NPS server for any error messages or unexpected behavior.

    It's important to note that the specific configuration details may vary depending on the Cisco switch model and the NPS server setup. You may need to consult the documentation provided by Cisco and Microsoft for detailed instructions and guidelines specific to your environment.

    Here are some general configuration examples:

    Cisco switch configuration (sample commands):

    aaa new-model
aaa authentication login default group radius
aaa authorization exec default group radius
radius-server host <NPS-server-IP> auth-port 1812 acct-port 1813 key <shared-secret-key>

    NPS server configuration (sample steps):

    • Install NPS and configure the server settings.
    • Add the Cisco switch as a RADIUS client and specify the shared secret key.
    • Create a network policy that defines the conditions, authentication methods, and access permissions.
    • Configure certificate settings, including importing the CA certificate.

    Remember to adapt the configuration based on your network requirements, security policies, and specific Cisco switch and NPS server configurations.

    For comprehensive and detailed instructions, please refer to the official documentation provided by Cisco and Microsoft for configuring RADIUS authentication on Cisco switches and NPS servers.

    0 comments