Supported low-maintenance RADIUS alternatives to Microsoft NPS for Wi-Fi auth?

[LRSFC_DanJ]

Due to various issues we’re having with RADIUS accounting packets, we’re looking around for alternative RADIUS services we could use to replace Microsoft NPS.

 

As well as being able to do the things NPS does for us currently (authenticating users using PEAP/MSCHAPv2 against AD and checking their group memberships before allowing access) we also need to be able to have some semi-intelligent rules around sending RADIUS accounting packets on to our firewall, including things such as

 

* Delaying sending accounting packets to the firewall until the user has a non-APIPA IP address

 

* Transforming accounting STOP packets to INTERIM packets to combat issues arising when roaming between APs

 

Is there any commercial supplier that provides a paid supported virtual appliance (probably with FreeRADIUS or something on it) that has easy configuration options (e.g. web based) that we can just plonk in to our Hyper-V environment and set up how we want?

 

Also just to clarify, this is just for our BYOD SSID, we don’t have/use eduroam so we wouldn’t need eduroam capability.

Edited October 11, 2023 by LRSFC_DanJ

[slugshead]

https://freeradius.org/

 

That's what we use with Eduroam, you can set it up as complicated or as basic as you want. By that I mean you can set it up as a direct local replacement for your NPS.

 

All config is gone through a config file, no need to go GUI.

Edited October 11, 2023 by slugshead

[LRSFC_DanJ]

https://freeradius.org/

 

That's what we use with Eduroam, you can set it up as complicated or as basic as you want. By that I mean you can set it up as a direct local replacement for your NPS.

 

All config is gone through a config file, no need to go GUI.

 

Ideally we don't want to have to maintain a Linux server or prod through configuration files. Also the organisation you linked seems to change £5000 a year for support, this is a bit much, we were hoping there would be a cheaper solution.