Now, there's a couple of different ways to do this.
First, you can do this through the graphical user interface,
G‑U‑I, their GUI,
or you can do this at the PowerShell at the command line using PowerShell.
I'm going to do this using PowerShell because it is really, really simple.
It is literally just one line, and it installs the role, and you're good to go.
If you like to point, click, and shift through GUIs,
knock yourself out, but it is really, really simple to do using PowerShell.
The command that you will run is Install WindowsFeature,
or Install‑WindowsFeature.
The role is called npas.
And then we'll also use the ‑IncludeManagementTools parameter
to obviously include our management tools.
Hit Enter, and you're off to the races.
Now through the magic of video editing, I sped that process up a little bit,
but it doesn't really take long, probably less than a minute,
20 or 30 seconds sometimes depending on the resources.
But ultimately, we have our role installed.
So let's open the Network Policy and Access Management console.
And we can actually do that right from here by just typing in nps.msc.
But just so that everybody knows, if you click on the Start menu,
you will also find it here in the administrative tools.
And probably not a bad idea to pin that to the task bar,
so I'm going to do that now.
All right,
so let's prepare our NPS server. And before we start
creating the actual policies themselves,
we first have to tell RADIUS, or NPS, to accept
authentication requests from our VPN server.
And to do that,
we're going to expand the RADIUS Clients and Servers, and then we're
going to right‑click RADIUS Clients and choose New. And then we'll give
this a friendly name, and I'm just going to use the server's name, but
you can use whatever you like here.
And in this field, you can put in the IP address or the DNS name.
If you're going to use the DNS name, I suggest using the FQDN.
I'm just going to use the server's IPv4 address though.
And the next thing we need to do is define a shared secret.
So there's a shared secret, or password if you will,
that's going to be used by the VPN server to tell the RADIUS server, hey,
I'm an authorized client. You know me. You can
accept my authentication requests.
You can define your own password here.
I prefer just to select the Generate button,
click Generate, and have it create a really stupidly
complex password for me. Choice is up to you.
If you're going to go this route,
go ahead and copy this and save this off to a file
because we're going to need it later. When we configure the VPN server