cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Employee
Employee

White Paper - How to configure C2S VPN with AzureAD and 2FA

Hi Folks,

 

Well this is my first post here, figured I would create a quick document for a few of my customers but there has been a wider interest in it as well.

 

  1. Create new public DNS domain
  2. Added domain as a “Custom domain name” in AzureAD
  3. Created 2019 AD domain on prem
  4. Installed NPS onto AD server
  5. ** STOP AND TEST RADIUS **
  6. Installed Azure AD Connect and began AD sync to cloud
  7. Installed “Network Policy Server extension for Azure” on top of NPS
  8. Test

The way I have it setup is the gateway sends a RADIUS request to MS NPS, NPS auths’s against AD, if successful NPS will send it to AzureAD for OTP creation, MS will then send the OTP via SMS or email to the end user.

 

For the full list of White Papers, go here

This is tested with a 750 running latest code as the gateway, SecureClient on the user PC and Capsule VPN on windows10

 

 

 

happy to answer questions or provide more info if needed.

 

 

4 Replies
Highlighted
Admin
Admin

Re: How to configure C2S VPN with AzureAD and 2FA

Tagging @Val_Loukine, we probably need to treat this as a whitepaper.

0 Kudos
Highlighted

Re: How to configure C2S VPN with AzureAD and 2FA

Yes, master, it is a white paper now

0 Kudos
Highlighted

Re: How to configure C2S VPN with AzureAD and 2FA

Hello everyone,

can someone explain me the option on the Radius settings?

 "Ask user for password (will be used to automatically answer the first challenge)".

we are planning to do the same config on SMB devices too and there I dont have this option.

Thanks in advance.

0 Kudos
Highlighted

Re: How to configure C2S VPN with AzureAD and 2FA

Hello everyone,

can someone please explain me this option on the Radius setting.
"Ask user for password (will be used to automatically answer the first challenge)".
Im trying to setup a SMB device and dont have this option.

thanks in advance
0 Kudos