03 Configuring NPS For VPN Connection

Network Policy Server (nps) allows you to create and enforce organization-wide network access policies for client health, connection request authentication, and connection request authorization. In addition, you can use nps as a Remote Authentication Dial-In User Service (RADIUS) proxy to forward connection requests to a server running nps or other RADIUS servers that you configure in remote RADIUS server groups.

nps allows you to centrally configure and manage network access authentication, authorization, and client health policies with the following three features:

• RADIUS server . nps performs centralized authentication, authorization, and accounting for wireless, authenticating switch, remote access dial-up and virtual private network (vpn) connections. When you use nps as a RADIUS server, you configure network access servers, such as wireless access points and vpn servers, as RADIUS clients in nps. You also configure network policies that nps uses to authorize connection requests, and you can configure RADIUS accounting so that nps logs accounting information to log files on the local hard disk or in a Microsoft SQL Server database. For more information, see RADIUS Server.

• RADIUS proxy . When you use nps as a RADIUS proxy, you configure connection request policies that tell the nps server which connection requests to forward to other RADIUS servers and to which RADIUS servers you want to forward connection requests. You can also configure nps to forward accounting data to be logged by one or more computers in a remote RADIUS server group. For more information, see RADIUS Proxy.

• Network Access Protection (NAP) policy server . When you configure nps as a NAP policy server, nps evaluates statements of health (SoH) sent by NAP-capable client computers that want to connect to the network. nps also acts as a RADIUS server when configured with NAP, performing authentication and authorization for connection requests. You can configure NAP policies and settings in nps, including system health validators (SHVs), health policy, and remediation server groups that allow client computers to update their configuration to become compliant with your organization's network policy. For more information