Locate Inbound Rules > Right Click Inbound Rules > Select New Rule….From the RADIUS server search for Advanced in the task bar search menu and select Windows Defender Firewall with Advanced Security.Here we are going to open up the firewall ports that we need for RADIUS to work with the Unifi Controller. Once successful you can close the window. Now click Next all the way through and then Install the Roles and wait until you receive the message that all your roles are installed successfully.Now within Remote Access and Role Services, select DirectAccess and VPN (RAS) and click Next.Under Role Services select Certification Authority and click Next.Once the items are selected and the prerequisites are approved click Next until you reach AD CS / Roles Services.Click Next until you reach Server Roles.Open your Windows Server Manager > Click Manage > Click Add Roles and Features.We will be starting with the newly created Windows Server 2019 and installing the roles we need for radius to work with your Unifi Controller and its Wifi Access Points. Lets get started with installing the required Windows Server Roles! So do not configure these roles on that server. I am a firm believer on keeping AD\DC server clean.
At this point create a Backup or a Virtual Snapshot before moving forward with the tutorial.Install all updates on new Radius server.I called my new virtual server HDN-RADIUS.Stand up a new physical or virtual server with Windows Server 2019.Once done write down the IP addresses alongside their model or unique name. Your Unifi equipment should be assigned static IP addresses outside your DHCP Scope.Your network firewall should be configured to only allow incoming traffic from your Unifi Hosted Controllers IP address to access the Radius ports. You can use a Cloud Hosted Unifi Controller but you will need to open radius ports on your firewalls wan.Internal Unifi Controller, I myself am using a UDM-PRO for that function.This will prevent Tech Support having to change the Wifi password every time an employee is terminated. Why is this useful? Well this allows us to just disable a user account in Active Directory after a termination and the previous employee will no longer have Wifi access. In this tutorial you will be shown how to configure Unifi Controller and Windows Server for RADIUS Wifi access.
0 kommentar(er)
