Right-click NPS (Local) and select Register server in Active Directory.įollow these steps to configure the FortiGate unit.The name of this group must match the name of the Active Directory group your users belong to. In the Attribute Information window, in the text box type a group name.From the Attributes list, select Filter-Id.If you want to use user authentication, skip Steps 23-29. In our example we use group authentication. In the Configure Settings section, click Add.In the Configure Authentication Methods section, clear the User can change password after it has expired check box.In the Enter the object name to select text box, type the group name.In the Specify Conditions section, click Add.In the Policy Name text box, type a name for this policy.Right-click Network Policies and select New.

Select Polices > Connection Request Policies.

You must use the same shared secret key when you configure your RADIUS client and your RADIUS client resource.

This key is used to communicate with the RADIUS server (AuthPoint Gateway). In the Shared secret and Confirm shared secret text boxes, type a shared secret key.In our example, the IP address of the AuthPoint Gateway is 192.168.100.20. In the Address (IP or DNS) text box, type the IP address of the AuthPoint Gateway.In the Friendly name text box, type a name.Right-click RADIUS Clients and select New.Select RADIUS Clients and Servers > RADIUS Clients.The Network Policy Server console appears. On the Windows server, run Server Manager.Continue to the Configure the FortiGate Unit section. If the L2TP VPN client is only used by local AuthPoint users, you do not have to configure Microsoft NPS. If NPS is installed on a different server than Active Directory, you must register NPS in the Active Directory domain and log in as a domain administrator.įor instructions to configure Active Directory Domain Services, see the Microsoft documentation for Active Directory. In our example, Active Directory and NPS are installed on the same server. NPS is required to validate the user credentials from MS-CHAPv2 RADIUS requests against Active Directory.

To enable users synced from Active Directory to successfully authenticate with MS-CHAPv2, you must configure Microsoft Network Policy Server (NPS).

You have installed Network Policy and Access Services, which includes Network Policy Server (NPS).

You have installed and configured Active Directory Domain Services.

You have installed and configured v5.3.1 or higher of the AuthPoint Gateway (see About Gateways).

Windows Server 2016 with Microsoft Network Policy Server (NPS) and Active Directory Domain Servicesīefore you begin these procedures, make sure that:.

The hardware and software used in this guide include:

Fortinet vpn client windows 10