How to modify the vendor specilic attribute when setting Radius Server in Windows Server 2008 r2 NPS?

Question

question

68165579 asked · Oct 31, 2020 at 05:16 AM

How to modify the vendor specilic attribute when setting Radius Server in Windows Server 2008 r2 NPS?

Hello,

Windows Server 2008 r2 NPS set Radius Server, the Radius client I used is MikroTik product, its Radius attribute: vendor_dictionary, I set the vendor specilic in NPS, As shown in the screenshot below, MikroTik Radius attributes Mikrotik-Wireless-VLANID and Mikrotik-Wireless-VLANIDtype, but NPS sends MT-Wireless-VLAN-ID and MT-Wireless-VLAN-ID-Type, how can I modify the NPS Radius specific Supplier attributes to match Mikrotik products?

Best regards

windows-server-infrastructure

1-0.png (66.6 KiB)

1-1.png (30.0 KiB)

1-2.png (31.3 KiB)

1-3.png (38.8 KiB)

1-4.png (38.7 KiB)

1-5.png (38.4 KiB)

1-6.png (93.5 KiB)

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-11-02T03:05:05.357Z

GloriaGu-MSFT answered · Nov 02, 2020 at 03:05 AM

@68165579 Hi,

Thank you for posting in Q&A!

Please understand that since On January 14, 2020, support for Windows Server 2008 and 2008 R2 ended. So we don't have the server 2008R2 environment to test. But I've done research about the corresponding issue, following are my suggestions, hope it will be helpful to you:

According to another user's RADIUS log with NPS server configured MikroTik-specific attributes, it seems that 'MT-wireless-VLAN-ID' is a normal phenomenon.

According to another instruction of how to setup mikrotik vendor specific attributes in nps, the "Attribute Value" for 'Mikrotik_Wireless_VlanID" is 11, which is different from your configuration. For more details, you can refer to:
https://mum.mikrotik.com/presentations/EU18/presentation_5159_1523293520.pdf

Hope you have a nice day!
Gloria

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://docs.microsoft.com/en-us/answers/articles/67444/email-notifications.html

10.png (9.4 KiB)

9.png (97.7 KiB)

· 2 ·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

68165579 · Nov 18, 2020 at 02:41 AM

Hello,

Later I tested on Windows Server 2012 r2 and Windows Server 2016 Datacenter Evaluation version, this problem still exists, I don’t know which version the official fix this error in? It is recommended to modify the program as shown in the figure below to allow users to customize the values sent by NPS to the Radius client. In this way, the Windows system does not need to build a large number of parameter dictionaries for different Radius clients. Users can add them according to their needs to avoid errors.

Best regards

0 ·

39829-36639-9.png (896.4 KiB)

68165579 · Nov 24, 2020 at 03:48 AM

Hello,

I don't know my feedback, have you received it?

Best regards

0 ·

Answer 2 · 2020-11-02T03:48:32.963Z

68165579 answered · Nov 02, 2020 at 03:48 AM

Hello,

It didn't solve my problem. After reading the example you provided, the configuration is the same as mine, but the server version is different. Thank you for your answer.

Best regards

·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2020-11-16T06:34:21.833Z

68165579 answered · Nov 16, 2020 at 06:34 AM

Hello,

Later I tested on Windows Server 2012 r2 and Windows Server 2016 Datacenter Evaluation version, this problem still exists, I don’t know which version the official fix this error in? It is recommended to modify the program as shown in the figure below to allow users to customize the values sent by NPS to the Radius client. In this way, the Windows system does not need to build a large number of parameter dictionaries for different Radius clients. Users can add them according to their needs to avoid errors.

Best regards

36639-9.png (896.4 KiB)

· 1 ·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GloriaGu-MSFT · Dec 03, 2020 at 06:20 AM

Hi,

Sorry for the late reply! After my discussion with my colleagues, it seems cannot be achieved. It is a microsoft by-design action.

You can post your suggestions on the microsoft feedback website, I want to thank you for your useful suggestion and patience along the way.
295047-general-feedback

0 ·

question