question

68165579 avatar image
0 Votes"
68165579 asked ·

How to modify the vendor specilic attribute when setting Radius Server in Windows Server 2008 r2 NPS?

Hello,

Windows Server 2008 r2 NPS set Radius Server, the Radius client I used is MikroTik product, its Radius attribute: vendor_dictionary, I set the vendor specilic in NPS, As shown in the screenshot below, MikroTik Radius attributes Mikrotik-Wireless-VLANID and Mikrotik-Wireless-VLANIDtype, but NPS sends MT-Wireless-VLAN-ID and MT-Wireless-VLAN-ID-Type, how can I modify the NPS Radius specific Supplier attributes to match Mikrotik products?

Best regards


36359-1-0.png36486-1-1.png36487-1-2.png36488-1-3.png36489-1-4.png36490-1-5.png36496-1-6.png


windows-server-infrastructure
1-0.png (66.6 KiB)
1-1.png (30.0 KiB)
1-2.png (31.3 KiB)
1-3.png (38.8 KiB)
1-4.png (38.7 KiB)
1-5.png (38.4 KiB)
1-6.png (93.5 KiB)
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GloriaGu-MSFT avatar image
0 Votes"
GloriaGu-MSFT answered ·

@68165579 Hi,

Thank you for posting in Q&A!

Please understand that since On January 14, 2020, support for Windows Server 2008 and 2008 R2 ended. So we don't have the server 2008R2 environment to test. But I've done research about the corresponding issue, following are my suggestions, hope it will be helpful to you:

According to another user's RADIUS log with NPS server configured MikroTik-specific attributes, it seems that 'MT-wireless-VLAN-ID' is a normal phenomenon.

36626-10.png


According to another instruction of how to setup mikrotik vendor specific attributes in nps, the "Attribute Value" for 'Mikrotik_Wireless_VlanID" is 11, which is different from your configuration. For more details, you can refer to:
https://mum.mikrotik.com/presentations/EU18/presentation_5159_1523293520.pdf


36639-9.png


Hope you have a nice day!
Gloria

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://docs.microsoft.com/en-us/answers/articles/67444/email-notifications.html




10.png (9.4 KiB)
9.png (97.7 KiB)
· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello,

Later I tested on Windows Server 2012 r2 and Windows Server 2016 Datacenter Evaluation version, this problem still exists, I don’t know which version the official fix this error in? It is recommended to modify the program as shown in the figure below to allow users to customize the values sent by NPS to the Radius client. In this way, the Windows system does not need to build a large number of parameter dictionaries for different Radius clients. Users can add them according to their needs to avoid errors.

Best regards


40484-39829-36639-9.png


0 Votes 0 ·
39829-36639-9.png (896.4 KiB)

Hello,

I don't know my feedback, have you received it?

Best regards

0 Votes 0 ·
68165579 avatar image
0 Votes"
68165579 answered ·

Hello,

It didn't solve my problem. After reading the example you provided, the configuration is the same as mine, but the server version is different. Thank you for your answer.

Best regards

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

68165579 avatar image
0 Votes"
68165579 answered ·

Hello,

Later I tested on Windows Server 2012 r2 and Windows Server 2016 Datacenter Evaluation version, this problem still exists, I don’t know which version the official fix this error in? It is recommended to modify the program as shown in the figure below to allow users to customize the values sent by NPS to the Radius client. In this way, the Windows system does not need to build a large number of parameter dictionaries for different Radius clients. Users can add them according to their needs to avoid errors.

Best regards

39829-36639-9.png



36639-9.png (896.4 KiB)
· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Sorry for the late reply! After my discussion with my colleagues, it seems cannot be achieved. It is a microsoft by-design action.

You can post your suggestions on the microsoft feedback website, I want to thank you for your useful suggestion and patience along the way.
295047-general-feedback


0 Votes 0 ·