Message Authentication

Question

Looking to enable RequireMsgAuth and/or limitProxyState configuration is in Disable mode on my NPS but cannot find where.

Answer 1

Hello,

Thank you for posting in Q&A forum.

Configure sending the Message-Authenticator attribute in all Access-Request packets on the server

This configuration enables the NPS Proxy to start sending the Message-Authenticator attribute in all Access-Request packets. To enable this configuration, use one of the following methods.

Method 1: Use the NPS Microsoft Management Console (MMC)

To use the NPS MMC, follow these steps:

Open the NPS user interface (UI) on the server.

Open the remote Radius Server Groups.

Select Radius Server.

Go to Authentication/Accounting.

Click to select the The request must contain the Message-Authenticator attribute checkbox.

Method 2: Use the netsh command

To use netsh, run the following command:

netsh nps set remoteserver remoteservergroup = <server group name> address = <server address> requireauthattrib = yes

For more information, see Remote RADIUS Server Group Commands.

I hope the information above is helpful.

Best regards

Zunhui

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.