question about authenticating a users on different forest domain.

hi all

i have network setup below :

if want to authenticate users adatum.com on vpn1, should do?

first of all, configured nps1 nps server , vpn client server .. computers internet able connect 192.168.1.10 ,

then

i configured nps2, vpn , radius client

i tried create network connection policy on nps1 , in condition part didn't know ... please show me in steps what  need , why these ...

my purpose learning

many thanks.

regards

hi,

according description, understanding want authenticate users adatum.com on vpn1.

assume these 2 forests connected forest trust(accessing resources across forests
: https://technet.microsoft.com/en-us/library/cc772808(v=ws.10).aspx). 

configured nps1 radius proxy server, forward authentication request(credentials belongs adatum.com) nps2. below link mentioned:
https://technet.microsoft.com/en-us/library/dd197447(v=ws.10).aspx

if want nps1 act both radius server(processing connection requests locally), , radius proxy(forwarding connection requests remote radius server group), add new policy using following procedure , verify default connection request policy last policy processed. 

reference connection request policies details:
https://msdn.microsoft.com/en-us/library/cc753603.aspx

best regards,
eve wang

---

please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.

Windows Server  >  Network Infrastructure Servers