Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




82 posts

Master Geek

Trusted

#147142 10-Jun-2014 13:14
Send private message

Hello, a company has a number of branches around the country that all have their own Active directory domain controllers on their own networks.
If it were to implement wifi at each branch ,using 802.1x radius authentication what would be the best way to go about that?

i.e would you set up a separate NPS/Radius server at each branch to authenticate locally at each branch, or would you try and centralise 802.1x authentication by having all remote branch clients authenticate against a single centrally located NPS/Radius server ?
If you took the second option, then the remote wife users would be authenticating across the WAN. I don't know if that is considered good practice or not ?
Then again it would seem very messy to have each remote branch implement their own NPS/Radius setup ?

Having never done this before I am interested in what the best strategy would be.


Thanks for any advice.


Create new topic
2552 posts

Uber Geek


  #1062561 10-Jun-2014 13:21
Send private message

Are the DCs all part of the same domain, or forest, or are they all standalone? If they're not standalone , you presumably have VPN tunnels between the sites? In the interests of not having the wifi rely on a WAN link, I would probably run NPS at each site, but there's no real reason (other than reliability / bandwidth / latency) that you couldn't do it via a VPN tunnel to a central NPS/RADIUS.

463 posts

Ultimate Geek


  #1062578 10-Jun-2014 13:49
Send private message

I would lean towards 2x centrally managed Radius servers, acting as primary and backup.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel introduces 10th Gen Intel Core H-series for mobile devices
Posted 2-Apr-2020 21:09


COVID-19: new charitable initiative to fund remote monitoring for at-risk patients
Posted 2-Apr-2020 11:07


Huawei introduces the P40 Series of Android-based smartphones
Posted 31-Mar-2020 17:03


Samsung Galaxy Z Flip now available for pre-order in New Zealand
Posted 31-Mar-2020 16:39


New online learning platform for kids stuck at home during COVID-19 lockdown
Posted 26-Mar-2020 21:35


New 5G Nokia smartphone unveiled as portfolio expands
Posted 26-Mar-2020 17:11


D-Link ANZ launches wireless AC1200 4G LTE router
Posted 26-Mar-2020 16:32


Ring introduces two new video doorbells and new pre-roll technology
Posted 17-Mar-2020 16:59


OPPO uncovers flagship Find X2 Pro smartphone
Posted 17-Mar-2020 16:54


D-Link COVR-2202 mesh Wi-Fi system now protected by McAfee
Posted 17-Mar-2020 16:00


Spark Sport opens its platform up to all New Zealanders at no charge
Posted 17-Mar-2020 10:04


Spark launches 5G Starter Fund
Posted 8-Mar-2020 19:19


TRENDnet launches high-performance WiFi Mesh Router System
Posted 5-Mar-2020 08:48


Sony boosts full-frame lens line-up with introduction of FE 20mm F1.8 G large-aperture ultra-wide-angle prime Lens
Posted 5-Mar-2020 08:44


Vector and Spark teamed up on smart metering initiative
Posted 5-Mar-2020 08:42



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.