NPS Radius accounting Class attribute

[caffrey]

I'm attempting to set up Radius for Netsweeper, the NPS server is configured and working fine however

 

Netsweeper needs :-

 

Class – This must contain the filtering group which the respective users should be placed in.

User-Name – User name of the client that is connecting

Framed-IP – The internal IP address of the client should be here

 

Username and Framed-IP are okay but can I log the Class attribute with NPS ? Or am I better off attempting FreeRadius?

[caffrey]

Figured out how to do this,

 

Basically create identical network policies for each one of your filtering groups ~(staff, pupils etc.), change the windows group to match in conditions, then add a standard radius attribute - add class and give it the OU name as the attribute value

 

Seems to pass the value ok in accounting, whether it actually works in practice is another matter

[BillyAB]

Did you ever manage to get this working @caffrey

[caffrey]

Yes eventually, it was a configuration issue on the Netsweeper hosted side of things - the NPS server was configured correctly apart from one setting. The generate-class-attribute has to be set to false on the connection request policy.

 

On the netsweeper side of things, they have to append the username with your site ID e.g. jdoe would need NSW-00000@OVLP99 appending to it in order for the correct group

[BillyAB]

Thanks for getting back.

I assume Schools Broadband do the username amending?

Where do I change the generate-class-attribute in NPS, I'm sure it's in a sensible place, but I can't see that option.

[caffrey]

Yes, SBB had to do the amends

 

Here's a pic of the radius attribute setting

 

[BillyAB]

Thanks.

 

If anyone else stumbles upon this looking for it, I managed to find the Generate-Class-Attribute, it is in Vendor Specific RADIUS attributes, and then when you add it, OK and re-open the properties box it moves into the standard attributes area. Just need to get in touch with SBB to add the @NSW-00XXX