How to configure Windows Server and Unifi Controller for RADIUS WiFi access

[@muhammadowaiskhan4132]

Thank you Patrick, I also want some more details from you and the members please as I need to set up RADIUS for our Wireless Access Points (APs). The challenge I'm facing is RADIUS server is separate machine and I need guidance on how to properly link the AD with the RADIUS server which the requirement is to create on separate machine. Could anyone help me understand the additional steps involved in configuring RADIUS server and how to integrate the AD and RADIUS? I would appreciate a detailed breakdown of the additional configurations needed on both ends. If you have any documents, guidelines, or videos that could walk me through the process, that would be immensely helpful. I’ve been unable to find the right resources so far.

[@ollm.mars2740]

Great video, able to re-authenticate users successfully from normal password to radius-AD domain setup after watching.

[@1982gijoey]

Good stuff can’t wait to try this on Sunday.

[@PatrickDomingues1]

How did it work out for you?

[@mornejordaan1832]

Worked 100% thanks my guy !

[@ikarusnet]

How did you get this to work? I’ve tried many times and it’s not working for me.

[@Foiliagegaming]

This helped me out. I couldnt figure out what I was missing.

[@PatrickDomingues1]

Awesome I'm glad it helped you and thank you for watching.

[@bsem68]

Thanks for this, I looked at other tutorials and they did not specify need to install AD CS. On mobile devices like my iPhone, have to trust the certificate once...not a big deal but just wondering if there is a solution for this?

[@alfadat]

Thank Patrick great tutorial, only missing the part where the users connect to that wifi, what screen they will face after the activation of Radius?

[@HighBeatz82]

Why do I need the Direct Acces Role for a Wifi-Radius?

[@jeroenmolenberghs9539]

Hi! In the beginning of the video you say "Assign a static IP addres to the RADIUS server". At the end you use that static IP adrress in the Unifi environment to connect the Radius profile. Where do I set the static IP address for the RADIUS server?

[@maxmustermann7536]

In the usual Networksettings, like giving an Client a static IP Adress

[@nitroflamegtsyt3964]

This tutorial does not show the users connecting to the network. I usually have difficulties connecting Google ChromeBooks and Apple devices to the wireless network with this configuration method.

[@user-yb1bv9il1n]

@Patrick please do we need to make the laptop join the domain before be able to connect to the wifi using the radius server authentication?

[@PatrickDomingues1]

That would be best. In addition to that you will want to create a GPO that would auto connect to the ssid and import its certificate.

[@TanvirAhmed101]

Great Tutorial, I followed the steps and all worked ok, except on the mobile phone it only works if I set the CA Certificate to None, and gives me prompt to connect unsecured without CA, if I select "Use System Certificate" it asks for Domain name field activates and if I put my local domain name which is AIP.Local it does not work, I don't know what I am missing here. I work with laptop wifi works without any issue and does not ask me for domain name, just user name and password, the laptop was not joined with domain, just a random laptop.

[@vkr.313]

It was a great video very simple approach, can you please guide me how to configure dynamic vlan assignment with unifi APs and NPS Server.

[@rougearlequin]

Well prepared presentation

[@quasarti2609]

Your website is not working. It stucks in a loop at visiting any article.

[@Ole_Friis_Heesgaard]

Nice tutorial What is wrong if I have 2 AP's and they are sending out 2 SSID's on 2 different vlan's, and all client's are getting wrong ip addresses (DHCP) from windows server network (different vlan) than my ssid's is on. This is only happen when using radius, when using WPA2 only, all client's are getting right ip addresses. BR OFH

[@PatrickDomingues1]

I can only speculate since I am not trouble shooting. If your using DHCP from the server do you have the Unifi DHCP disabled for the vlan? Is your subnet mask large which is providing more than 254 ip addresses to dhcp pool?

[@webbeto]

hi, i know it been a while since you made this video but i have a question, what happens if i wont use an active directory, is still possible use radius ? mi goal its to do the server simple as i could i

[@PatrickDomingues1]

Hello, server radius requires active directory. However, you can setup the wifi as wpa2 enterprise and select the default radius profile.

[@dracolosse363]

Now We can't see your tutorial on your site, it's normal?

[@kofikwame6581]

Please can you do a video on unifi hotspot and vouchers

[@PatrickDomingues1]

Yes! I absolutely can. I have been meaning to at least write up an article on it.

[@hacom652]

Hi Patrick, if my network do not use domain, this tutorial support my network? Thank you so much

[@PatrickDomingues1]

No, this tutorial is for windows server and radius and setting up a unifi controller to communicate with it.

[@son-193]

@@PatrickDomingues1 Thank you so much. Sorry but I have a question. I want to AP use DHCP (do not need NPS set IP for Client request) You can help me how to setting on RADIUS server?

[@PatrickDomingues1]

@@son-193 instead of using the IP address you will need to use the FQDN\Hostname of the Access Point. However best practice devices like managed switches, access points should have static IP addresses.

[@Mehmehx]

Great guide! Are users login with AD use/password?

[@PatrickDomingues1]

yup that's correct.

[@norbertopace7580]

Thanks!

[@matungafred]

Thanks for your presentation, Can you send me the file hopefully it help me alot

[@francopearson5787]

i have watched your video 4 times now, and followed step by step, but when users connect to the ssid with their username and password, they just get a message unable to connect.

[@PatrickDomingues1]

Hey Franco, click on the tutorial link and go through the article instead of the video, might be something you're missing and if all that is configured right on the Controller. Also, towards the bottom of the article there is a link for "Windows devices can’t connect to RADIUS 802.1X Wifi". If you are using a Unifi Cloud Host Controller, there are additional steps that this article does not cover.

[@francopearson5787]

@@PatrickDomingues1 Hi Patrick, thanks for the reply. I will have a look at the guide and link.

[@ramisyumakaev6716]

@@PatrickDomingues1 hello. I didn't succeed either. I did everything according to your instructions. what link are you talking about? I didn't find this link (a link for "Windows devices can’t connect to RADIUS 802.1X Wifi")

[@PatrickDomingues1]

@@ramisyumakaev6716 The reason is due to a windows update however you can configure it manually patrickdomingues.com/2021/12/04/windows-devices-cant-connect-to-radius-802-1x-wifi/ or you can setup GPO to deploy the Wifi connection for you patrickdomingues.com/2022/05/05/how-to-auto-deploy-radius-wifi-with-group-policy/