Share via


Network Policy Server (NPS): backup/failover?

Question

Tuesday, December 7, 2010 9:27 PM

Hi,

How can I configure a backup/failover NPS radius server?  I do not need anny load balancing, just a server that can take over when the primary NPS server is not reachable.  Our NPS is set up for wireless authentication and encryption using Domain computer certificates.

Thx!

All replies (4)

Wednesday, December 8, 2010 4:23 AM ✅Answered

Hi,

 

Thanks for posting here.

 

I’m not sure if you had read the article below, because there are some good methods in that may help you to achieve the goal:

 

http://technet.microsoft.com/de-de/library/dd197433(WS.10).aspx

 

Configure your network access servers to send connection requests to multiple RADIUS servers. For example, if you have 20 wireless access points and two RADIUS servers, configure each access point to send connection requests to both RADIUS servers. You can load balance and provide failover at each network access server by configuring the access server to send connection requests to multiple RADIUS servers in a specified order of priority. This method of load balancing is usually best for small organizations that do not deploy a large number of RADIUS clients.

 

Use NPS configured as a RADIUS proxy to load balance connection requests between multiple NPS servers or other RADIUS servers. For example, if you have 100 wireless access points, one NPS proxy, and three RADIUS servers, you can configure the access points to send all traffic to the NPS proxy. On the NPS proxy, configure load balancing so that the proxy evenly distributes the connection requests between the three RADIUS servers. This method of load balancing is best for medium and large organizations that have many RADIUS clients and servers.

 

Meanwhile, here are some methods could help you to sync NPS configurations between multi NPS servers:

 

Export an NPS Server Configuration for Import on Another Server

http://technet.microsoft.com/en-us/library/cc732059(WS.10).aspx

 

NPS Server Synchronize

http://poshcode.org/1502

 

If you are running windows server 2008 R2 , please also take look the new NPS template feature:

 

NPS templates in Windows Server 2008 R2

http://blogs.technet.com/b/nap/archive/2009/02/17/nps-templates-in-windows-server-2008-r2.aspx

 

Thanks.

 

Important Note: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.

 

Tiger Li

 

TechNet Subscriber Support in forum

If you have any feedback on our support, please contact [email protected] 

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


Tuesday, December 7, 2010 9:23 PM

Hi,

How can I configure a backup/failover NPS radius server?  I do not need anny load balancing, just a server that can take over when the primary NPS server is not reachable.  Our NPS is set up for wireless authentication and encryption using Domain computer certificates.

Thx!


Friday, December 10, 2010 9:03 AM

Hi,

If there is any update on this issue, please feel free to let us know.

We are looking forward to your reply.

Thanks.

Tiger Li

TechNet Subscriber Support in forum
If you have any feedback on our support, please contact [email protected] 

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


Wednesday, August 15, 2012 10:04 PM | 1 vote

Load balancing is a different issue from fail over.  If you configure your master as proxy with priority with a remote server group and the master crashes, how does it know to send requests to the remote server group??