question

PhongXuan-8228 avatar image
0 Votes"
PhongXuan-8228 asked 37791110 commented

NPS as a radius client not support pap

Hello, Im try to setup NPS as Radius Proxy. When i forward to Radius 1 ( Windows Radius) is working. But when i forward to Radius 2, i capture package and is show my radius proxy not send User-Password in request. Its seem like NPS as a radius client using MS CHAP v2 in default and not using PAP( Radius 2 support only PAP). so i cannot authen. How can i change NPS as radius in my case using PAP

windows-server-infrastructure
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

This is a quick note to let you know that I am currently performing research on this issue and will get back to you as soon as possible. I appreciate your patience.
If you have any updates during this process, please feel free to let me know.

0 Votes 0 ·
PhongXuan-8228 avatar image
0 Votes"
PhongXuan-8228 answered

Hello, thanks for supporting me
- Im using Windows Server 2016 for NPS Proxy, Radius 1 server using Windows Server 2016, Radius 2 server is my custom Radius and my custom Radius only work with PAP
- NPS proxy server and RADIUS servers were in the same domain?



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyQi-MSFT avatar image
0 Votes"
SunnyQi-MSFT answered 37791110 commented

Hi,

Welcome to Q&A platform.

Before we go further, I would like to confirm the following information with you.

  1. Could you please help provide more details about your environment for us better understand your issue.

  2. May I know if these NPS proxy server and RADIUS servers were in the same forest or same domain?


Best Regards,
Sunny


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Sunny,

I am facing the same issue - we have NPS and DC in the same forest - and we are using radius authentication with client VPN using PAP - reference article https://documentation.meraki.com/MX/Client_VPN/Configuring_RADIUS_Authentication_with_Client_VPN .

We have exactly the same working setup for one of our client and Radius authentication is working fine using PAP more than a year.
However when we configure the same setup for a different client with 2019 NPS server its failing saying Authentication method are not same.

We double checked authentication method is same on NSP policy as well as on client VPN side as well.

Could you please let me know how i can enable PAP on the 2019 server -- any registry fix need to be done - please share.

Regards Nelson

0 Votes 0 ·