Overview

Introduction

Welcome to the Manage User Authentication with RADIUS Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

  • Exercise 1. Install and Configure NPS and RRAS
  • Exercise 2. Prepare VPN Server and Client
  • Exercise 3. Interpret NPS Logs

After completing this lab, you will be able to:

  • Add Network Policy Server feature
  • Configure Network Policy Server
  • Modify Network Policy Server log type and frequency
  • Address Windows Server 2019 NPS bug
  • Add PLABSA01 to domain
  • Prepare the VPN Interface
  • Install VPN and Routing features
  • Initialize Routing and Remote Access
  • Modify the VPN ports properties
  • Grant VPN dial-in permission
  • Create a VPN client connection
  • Test VPN connectivity
  • Install IAS reader
  • Examine NPS logs

Exam Objectives

The following exam objective is covered in this lab:

  • 6.4 Compare and contrast authentication, authorization, accounting, and non-repudiation concepts.

Lab Duration

It will take approximately 1 hour to complete this lab.

Exercise 1 - Install and Configure NPS and RRAS

Remote Authentication Dial-in User Service (RADIUS) is a networking protocol that enables dial-up or VPN servers to communicate with a centralized server to authenticate remote user logons. RADIUS authorizes users’ access to the network resources and logs the number of minutes for billing purposes and network statistics.

In this lab, you will learn how to install and configure a Network Policy Server on PLABDM01. You will set up PLABSA01 as the RADIUS client and VPN server, then prepare a Windows 10 client as a VPN server. Later on, you will analyze the content of a RADIUS accounting log using a third party NPS reader.

Learning Outcomes

After completing this exercise, you will be able to:

  • Add Network Policy Server feature
  • Configure Network Policy Server
  • Modify Network Policy Server log type and frequency
  • Address Windows Server 2019 NPS bug
  • Add PLABSA01 to domain
  • Prepare the VPN Interface
  • Install VPN and Routing features
  • Initialize Routing and Remote Access

Exercise 2 - Prepare VPN Server and Client

After setting up the prerequisites on PLABDM01 (the Network Policy Server) and PLABSA01 (the VPN server), you will now prepare the necessary configuration on the VPN server and a Windows 10 dial-in client to ensure successful connectivity.

Learning Outcomes

After completing this exercise, you will be able to:

  • Modify the VPN ports properties
  • Grant VPN dial-in permission
  • Create a VPN client connection
  • Test VPN connectivity

Exercise 3 - Interpret NPS Logs

Network Policy Server (NPS) generates log files that record the session between the RADIUS server and client. This log file is essential to troubleshoot connection issues and collect the necessary data for billing and network statistics.

Learning Outcomes

After completing this exercise, you will be able to:

  • Install IAS reader
  • Examine NPS logs

Comprehensive Learning

See the full benefits of our immersive learning experience with interactive courses and guided career paths.