Configure the Authentication Provider

Updated: April 30, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

After the Routing and Remote Access and Demand-Dial Interface wizards complete, Windows authentication and Windows accounting are selected by default. You can change these defaults from Windows authentication and Windows accounting to Remote Authentication Dial-In User Service (RADIUS) authentication and RADIUS accounting, or you can choose separate providers for authentication and accounting. For a deployment that supports only a site-to-site connection, use Windows authentication and Windows accounting. However, you can change these defaults if the same answering router will support both the site-to-site connection and remote access users, and you want to use RADIUS as either the authentication provider or the accounting provider.

Use the following procedures to accomplish these tasks:

  • Configure the authentication provider on the answering router

  • Configure the accounting provider on the answering router

Configure the authentication provider on the answering router

Configure either Windows authentication or RADIUS authentication. If you select RADIUS authentication, add the answering router as a RADIUS client on the Network Policy Server (NPS) server. For information about how to add the answering router as a RADIUS client, see Network Policy Server Operations Guide.

To use Windows Authentication

  1. Open the Routing and Remote Access MMC snap-in.

  2. Right-click the server name for which you want to configure authentication, and then click Properties.

  3. On the Security tab, in Authentication provider, click Windows Authentication.

To use RADIUS Authentication

  1. Open the Routing and Remote Access MMC snap-in.

  2. Right-click the server name for which you want to configure RADIUS authentication, and then click Properties.

  3. On the Security tab, in Authentication provider, click RADIUS Authentication, and then click Configure.

  4. In the RADIUS Authentication dialog box, click Add.

  5. In the Add RADIUS Server dialog box, configure the settings for your RADIUS authentication server, and then click OK.

Configure the accounting provider on the answering router

Configure either Windows accounting or RADIUS accounting. If you select RADIUS accounting, add the answering router as a RADIUS client on the NPS server. For information about how to add the answering router as a RADIUS client, see Network Policy Server Operations Guide.

To use Windows Accounting

  1. Open the Routing and Remote Access MMC snap-in.

  2. Right-click the server name for which you want to configure Windows Accounting, and then click Properties.

  3. On the Security tab, in Accounting provider, click Windows Accounting, and then click OK.

To use RADIUS Accounting

  1. Open the Routing and Remote Access MMC snap-in.

  2. Right-click the server name for which you want to configure RADIUS accounting, and then click Properties.

  3. On the Security tab, in Accounting provider, click RADIUS Accounting, and then click Configure.

  4. In the RADIUS Accounting dialog box, click Add.

  5. In the Add RADIUS Server dialog box, configure the settings for your RADIUS accounting server, and then click OK.

See Also

Concepts

Choose the Authentication Provider