Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




81 posts

Master Geek

Trusted

Topic # 147142 10-Jun-2014 13:14
Send private message

Hello, a company has a number of branches around the country that all have their own Active directory domain controllers on their own networks.
If it were to implement wifi at each branch ,using 802.1x radius authentication what would be the best way to go about that?

i.e would you set up a separate NPS/Radius server at each branch to authenticate locally at each branch, or would you try and centralise 802.1x authentication by having all remote branch clients authenticate against a single centrally located NPS/Radius server ?
If you took the second option, then the remote wife users would be authenticating across the WAN. I don't know if that is considered good practice or not ?
Then again it would seem very messy to have each remote branch implement their own NPS/Radius setup ?

Having never done this before I am interested in what the best strategy would be.


Thanks for any advice.


Create new topic
2499 posts

Uber Geek
+1 received by user: 927

Subscriber

  Reply # 1062561 10-Jun-2014 13:21
Send private message

Are the DCs all part of the same domain, or forest, or are they all standalone? If they're not standalone , you presumably have VPN tunnels between the sites? In the interests of not having the wifi rely on a WAN link, I would probably run NPS at each site, but there's no real reason (other than reliability / bandwidth / latency) that you couldn't do it via a VPN tunnel to a central NPS/RADIUS.




Windows 7 x64 // i5-3570K // 16GB DDR3-1600 // GTX660Ti 2GB // Samsung 830 120GB SSD // OCZ Agility4 120GB SSD // Samsung U28D590D @ 3840x2160 & Asus PB278Q @ 2560x1440
Samsung Galaxy S5 SM-G900I w/Spark

438 posts

Ultimate Geek
+1 received by user: 123

Subscriber

  Reply # 1062578 10-Jun-2014 13:49
Send private message

I would lean towards 2x centrally managed Radius servers, acting as primary and backup.

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Zealand hits peak broadband data
Posted 18-Jan-2018 12:21


Amazon Echo devices coming to New Zealand early February 2018
Posted 18-Jan-2018 10:53


$3.74 million for new electric vehicles in New Zealand
Posted 17-Jan-2018 11:27


Nova 2i: Value, not excitement from Huawei
Posted 17-Jan-2018 09:02


Less news in Facebook News Feed revamp
Posted 15-Jan-2018 13:15


Australian Government contract awarded to Datacom Connect
Posted 11-Jan-2018 08:37


Why New Zealand needs a chief technology officer
Posted 6-Jan-2018 13:59


Amazon release Silk Browser and Firefox for Fire TV
Posted 21-Dec-2017 13:42


New Chief Technology Officer role created
Posted 19-Dec-2017 22:18


All I want for Christmas is a new EV
Posted 19-Dec-2017 19:54


How clever is this: AI will create 2.3 million jobs by 2020
Posted 19-Dec-2017 19:52


NOW to deploy SD-WAN to regional councils
Posted 19-Dec-2017 19:46


Mobile market competition issues ComCom should watch
Posted 18-Dec-2017 10:52


New Zealand government to create digital advisory group
Posted 16-Dec-2017 08:47


Australia datum changes means whole country moving 1.8 metres north-east
Posted 16-Dec-2017 08:39



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.