NPS Network Authentication
NPS Network Authentication
A Network Policy Server (NPS) can be used as a Remote Authentication Dial-In User Service (RADIUS) server to authenticate clients attempting to access network resources through dial-up network access servers, Virtual Private Network (VPN) servers, or wireless access points (WAPs). The authentication, authorization, and accounting (AAA) procedure for the NPS follows these steps:
- The client sends a connection request to the access server.
- The access server creates an Access-Request message, which it sends to the NPS server.
- The NPS server receives the Access-Request message and determines which response is required. If additional authentication is needed, the NPS server sends an Access-Challenge message to the access server, which then creates an updated Access-Request message and sends it to the NPS server.
- The NPS server checks the user credentials in the Access-Request message and obtains the user account's dial-in properties from the domain controller via a secure connection.
- The NPS server uses the user account's dial-in properties and network policies to authorize the connection request. If authorization is a success, the NPS server sends an Access-Accept message to the access server. If authorization fails, the NPS server sends an Access-Reject message to the access server.
- When the access server receives an Access-Accept message, it opens a connection with the client and sends an Accounting-Request message to the NPS server.
- Finally, the NPS server sends an Accounting-Response message to the access server.