Best practice in setting up NPS

Question

Best practice in setting up NPS

Faye Marie Brucal 121

Just wanted to know is it best practice to install RADIUS authentication server (NPS) to each DHCP server that you have on your environment? To minimize or load balance the authentication request

1 answer

Your answer

Answer 1

Wesley Li-MSFT 4,576 Microsoft External Staff

Hello

Yes, it is considered a good practice to install Network Policy Server (NPS) as a RADIUS server on all of your domain controllers to effectively balance the load of traffic. Here are some best practices for deploying and managing NPS:

Install NPS on Domain Controllers: To effectively balance the load of traffic, install NPS as a RADIUS server on all of your domain controllers.

Configure NPS Proxies: Configure two or more NPS proxies to forward the authentication requests between the access servers and the RADIUS servers.

Configure Access Servers: Configure your access servers to use the NPS proxies as RADIUS servers.

Use Individual Certificates: Provide an individual certificate to each RADIUS server. You can assign a unique name in each certificate (RADIUS server’s host name, for example), or use a generic common name in all RADIUS certificates.

Faye Marie Brucal 121 Reputation points

2023-11-01T09:32:29.8133333+00:00

Hello @Wesley Li-MSFT Thanks for the response. Do you know how clients select which authentication server will be used? Even if all domain controllers have NPS setup, do I still need to use a proxy? Also, is there a way to test on the NPS server if the authentication or the load balance is working? Thank you and apologies for the questions.

Share via

Best practice in setting up NPS

1 answer

Your answer