Configure Windows Server 2019 for Ubiquiti UniFi RADIUS Authentication

This video covers the installation of the NPS, CA and Remote Access Server roles on a Microsoft Windows 2019 Server. We then configure those roles to support RADIUS authentication within Ubiquiti's UniFi platform.

####################################################################
FOLLOW ME:
---------------------------------------------------

VIDEO EQUIPMENT (Affiliate Links):
---------------------------------------------------

BUSINESS INQUIERIES:
---------------------------------------------------

[stijngov]

Super tutorial!
If I can add a little note here.
During the creation of your GPO you added the AD group to the GPO, which is good. Authenticated users was still in there and it actually overrules your AD group because the GPO will automatically be applied to any authenticated user/computer in that OU. In order to prevent this and only apply the GPO to any computer within the AD group, you have to go to the "Delegate" tab in your GPO => Click "Advanced" (bottom right) => Click "Authenticated users" => Deselect "Apply Group Policy"

[ManuelBerfelde]

Nice tutorial but you should check your ports. 1812 is used for auth, 1813 is accounting. 1645 and 1646 are old ports (pre RFC standardization) which should not be used/needed.

[virtvirt]

This is how all tech videos should be done! 5/5. Keep up the good work. Thank you, Alex!

[sethkilley]

This video was very good, but there are a few things that I had to change. No, you don't need the Remote Access Server role installed. It won't keep it from working, but it's not related either. In the video, PEAP is chosen for authentication on the NPS role. If you choose this, users will be prompted for username / password. Instead, you want Smart Card or other certificate. I'm not sure how it worked in the demo unless Smart Card or other certificate was also in the list at a higher priority?? As others have shared, the ports are wrong for UniFi controller to connect to the NPS Server. Authentication is on port 1812 & 1645. Accounting is 1813 & 1646. Otherwise, great explainer and got me up and running on RADIUS. Thanks!

[kenthenry]

I haven't had time to test this but I've built out a few RADIUS controlled wifi networks, but my first with Unifi this week. I'm used to only adding the controller of a wifi system to the RADIUS clients but I think that's what I was missing when my config wasn't working. This a great tutorial from start to finish. Thanks for taking the time to demonstrate and share this.

[francoisdarmon]

First video showing that USG is not mandatory when configuring UniFi APs with RADIUS server. Very helpful.

[vanvuite]

Having less knowledge on networking, your tutorial gives me more understanding of where I need to click and look for my System Administration tasks. Thanks mate

[kittyyyyyyyy]

Than kyou, this went over a lot of prerequisites that a lot of other guides fail to mention

[genxguy]

Thanks for this. I'm going to be setting the same up at home and since I haven't installed in radius for 15 odd years it's a good refresh.

[clark_crisp]

Alex, thank you for this video! My first watch through I overconfidently skipped the part at 5:04 and spent the next hour troubleshooting the RADIUS config. Thanks for highlighting all steps.

[SHRIVES]

Fantastic video - was having trouble getting this configured for a while. Super clear and easy to follow, thanks so much for saving me from any more headaches! :D

[blindside]

I knew this was possible just couldn't figure it out! Thank you so much for taking the time and making this video super easy to follow along. I hope you keep it up. Best wishes!

[LarsBemelmans]

Hi Alexander, this video helped me a lot configuring RADIUS with Unifi network for our enterprise. Thank you for the instruction. Grts Lars

[bradgrothaus]

Worked perfectly! Saved me hours of work! Thank you for doing this Alex

[clerk]

Very useful video, extremely useful to prevent personal devices connecting to the WiFi eating bandwidth.

[jaemelo]

Well done mate! Straight forward & to the point. Keep up the good work!

[robinkufner]

Thanks for the great video. Works like a champ. In the video you didn't configure the Remote Access role. Why do we need to install it anyways? Does the Radius need any services of this role?

[franke]

You sir .... are a legend. Take that W bro.

[RadosławSar]

great video thanks to him I just configured authorization via RADIUS I have one question - can I configure a WIFI network for guests without a Unifi gateway?

[mstarace]

This was wonderful and easy to follow. Thank you!