Any with Success? - Radius for 2 domains - trying to consolidate SSIDs

k_berrien — Fri, 03 May 2019 00:53:35 GMT

I'd love to consolidate 2 SSID's with a NPS radius server behind each, on separate domains. I do have a 1 way trust on domain A to B.

Is anyone running such a configuration with success? At this point I haven't looked into it in depth, but I suspect with the 1 way trust I could get 1 NPS to query data from both domains - but I'm concerned about any "domain/user" issues, or duplicate names. We do both user & machine ID auth on both radius connections. Perhaps a creative use of the RADIUS Proxy?

Since I can imagine ways in which it might work, and things that might not.. I thought I'd toss a quick - anyone doing this successfully - query out first.

thanks!

Re: Any with Success? - Radius for 2 domains - trying to consolidate SSIDs

k_berrien — Fri, 10 May 2019 22:34:40 GMT

To answer my own question for the benefit of anyone interested, or suggested improvement(s):

The Aerohive Radius Proxy appears to be basically designed to remove the need for CAL licenses for IAS/NPS servers prior to Win 2012 - that was ruled out.

NPS ( as stand alone proxy only, or combined with proxy & auth rules ) can be configured to proxy radius requests by using matching rules in the "Connection Request Policies". By matching rules to values in the User Name field I can redirect any radius request to the proper domain NPS server(s).

topic Re: Any with Success? - Radius for 2 domains - trying to consolidate SSIDs in Aerohive Migrated Content

Any with Success? - Radius for 2 domains - trying to consolidate SSIDs

Re: Any with Success? - Radius for 2 domains - trying to consolidate SSIDs