Hello Community,
I need your advice for the following NPS/RADIUS environment we are trying to set up for wireless access to our corporate offices.
We have two offices (US and India) connected via a site to site VPN. We use Meraki APs in our environment. So far the Meraki APs (RADIUS client) authenticate the clients to the NPS (RADIUS Server) here in the US office without issues (as we have our Connections
Request polices and Network policies properly configured). On the other hand, the Meraki AP’s for the India office are pointing to the same US RADIUS server for authentication (as they don’t have their own RADIUS Server), they authenticate just fine. The question
though is what is the best way to add a NPS server in India so they authenticate there (rather than US)? Should I just add/configure a new NPS server (with similar C.R.P and Network policies)? Or is there a best practice method when configuring an NPS on the
same Domain but in different sites?
I’ve been doing research and the Remote RADIUS Proxy does not seem to be a good solution as it will forward the traffic between US and India and this is what we are trying to prevent.
Please advise or share some thoughts.
Thank you.
