Security

Hi,

 

We use WPA2 with AES and authentication is PEAP, microsot NPS as RADIUS and certificate is installed in RADIUS, connection terminates in RADIUS server. Could somone explain the difference in having connection terminates in controller vs a configuration where connection terminatesin RADIUS server, which is better and easy.

 

 

Thanks

 

You should use NPS. Termination is easier in smaller deployments but offers less flexibility.

Thank you, could you explain more about flexibility, advantage in controller termination.

 

 

Termination can allow the controller to handle the EAP portion of the authentication for situations where a standard compliant radius server isn't available. I believe you can use this in a situation where perhaps you wanted to do LDAP based auth and still need something to handle EAP. As it's already been said, there is really no advantage when you have NPS already running.

Many times EAP termination requires you to install a supplicant on the client. Most environments use a RADIUS server like NPS/IAS or ClearPass