Configuring a Client-to-Site VPN using RADIUS (NPS) Server Authentication in Windows Server 2022

In this video, I provide a demonstration of the deployment of a Client-to-Site (C2S) Virtual Private Network (VPN), which uses RADIUS server authentication using Windows Server 2022's Network Policy and Access Server (NPS) server role in an Active Directory environment.

============================================================
Time Stamps
00:00 Video Introduction
00:52 Network Topology Overview
01:54 RADIUS Terminology
03:27 Lab Setup
04:04 Network Policy and Access Server Role Installation
05:30 Registration of the NPS Server with Active Directory
06:12 Verification of NPS Registration
07:10 Creation of AD Users and VPN Security Group
10:01 Verification of User Network Access Permissions
11:32 NPS (RADIUS) Server Configuration
16:05 RADIUS Properties Review
16:57 RRAS Server Role Installation
18:17 RRAS and VPN Configuration
19:14 RADIUS Client Configuration
21:43 VPN Static Address Pool Configuration
23:05 Windows 10 Client VPN Configuration
27:40 VPN Verification
29:10 Changing PPTP to L2TP with IPSec
============================================================

Helpful Links

Built-in VPN Authentication Options (Windows 10 and Windows 11)

Default Encryption Settings for Microsoft L2TP/IPSec VPN Client

#vpn #server2019 #server2019 #server2022 #nps #activedirectory

[Dreamer-MS]

this is insane for how detailed this video is. Leading you through step by step, very clean instructions.

[lstanford]

Had to watch it again to perform another setup. Troy, your channel is my go to for troubleshooting. Big fan here!

[ganeshs]

Had no prevous knowledge. Watched the video twice and understood it completely. Respect Legend.

[lstanford]

"And away we go" Troy, your channel is GREAT man! Thank you so much for your explanations.

[bknow]

Love your videos! Super informational. One tip/ask, can you add some troubleshooting tips for reference? I was able to run through the lab pretty easily, but I ran into an issue from my home lab to the cloud. But thanks again, your work really is easy to follow!

[lstanford]

Another amazing video Troy. Thank you for the info, as always.

[zaidsabi]

Thank you so much Mr. Troy Berg for that so informative demonstration and explanation, it helped me a lot in my intern report

[T.M.S-xm]

what a detailed and Brillant presentation. Thank you for sharing.

[cruxwire]

He configures it like he was part of the programmers of this system. I must say that astonishing.

[michaelpietrzak]

Great content! Love the channel. Excellent video.

[haticegokduman]

THANKS a lot for this perfect and helpful video from Germany🌸

[MICRelaxation]

Well done, this is an excellent video that is very informative. Thank you.

[lstanford]

You'll probably see me on here multiple times, I can never remember all the steps, so I have to keep rewatching. Thumbs up though.

[khosrowjalali]

That was a really informative and well-explained Video, Thank you for taking the time to put this Video together.

Edit: I have Followed this Video to the Dot and I cannot achieve a VPN connection from my Client. :-(

[frederikvanhoo]

Thanks for this great lesson! I had already background info, but learned a lot of new info! When will the next video about the other scenario 802.1X Wireless or Wired Connections come online? Will there be in the video information about best cases for using certificates accross multiple sites of one domain? That would be great! Now I'm going to see your video of Deploying A Multi-Tier PKI.

[josephogodja]

Very well explained. Thank you so much.

[vincentgrayson]

Hi Troy,

Great video. I configured my Radius and RRAS on the same server. Users can connect to the VPN, however, as soon as they connect, they lose their internet connection. Any ideas?

[zprhansen]

I'm trying to setup a vpn connection through unifi usg. I followed this video, which I think is very well done and on point. But know I need to setup/config unifi usg vpn also setup vpn on my macbook pro. So far I haven't been successful.

[adamli]

I tried to configure all VPN Server environments on only one windows server, but the connection was not successful. A domain name may still be needed.

[samliang]

mine did not work, can you explain how your 172 address if from, is it another netwrok adaptor you added or wat?