Page History

The RD Gateway uses NPS to send the RADIUS request to DualShield RADIUS server. To configure NPS, first you change the timeout settings to prevent the RD Gateway from timing out before the two-factor authentication has completed. Then, you update NPS to send RADIUS authentications to your DualShield RADIUS Server. Use the following procedure to configure NPS: 

Modify the timeout policy

1. In NPS, open the the RADIUS Clients Client and Server menu Servers menu in the left column panel, and select select "Remote RADIUS Server Groups".
2. Select the "TS GATEWAY SERVER GROUP" in the middle panel. 
   
   Image Added
   
   
3. Right click the "Properties" in "TS GATEWAY SERVER GROUP", and click "Add".
4. Go to the Load Balancing tab.
5.  
   
   Image Added
   
   
6. In "Address"  tab, add the DualShield RADIUS Server's address.
   
   Image Added
   
   
7. In "Authentication/Accounting" tab, create a shared secret key. 
   
   Image Added
   
   
8. Change both the Number Change both the Number of seconds without response before request is considered dropped and the Number dropped and the Number of seconds between requests when server is identified as unavailable to unavailable to between 30 and 60 seconds. 
   (If you find that the server still times out during authentication, you can come back here and increase the number of seconds.)
   
9. Go to the Authentication/Account tab and check that the RADIUS ports specified match the ports that the DualShield RADIUS server is listening on. 

Configure NPS to use DualShield RADIUS Server

This process is basically the same as NPS Configuration in RRAS integration as shown below (replace references to RRAS with RDG):

...

...

1. Image Added