I'm managing a large organization with multiple locations where all the PCs are joined to Active Directory (AD) through a central office. We utilize site-to-site VPNs, which work well for PC authentication, but now I'm considering implementing RADIUS for WiFi authentication. My main concern is that if the VPN connection fails, it could prevent WiFi authentication, leading to access issues for local resources. Is the only solution to deploy Domain Controllers (DCs) and RADIUS servers at each site? I'm just checking if there's a more efficient solution out there that I might not be aware of, perhaps something like a caching system for RADIUS?
5 Answers
Consider the type of WiFi technology you have. Some vendors offer RADIUS caching, which allows successful authentications to be stored temporarily. If your VPN goes down, clients who have already authenticated can still connect without issues until it’s restored.
Setting your RADIUS server in the cloud, like Azure, could be a solid choice! This way, a site outage wouldn't take down your RADIUS authentication, making things a lot smoother. It’s less of a hassle than deploying more servers across locations.
If local resources are essential for your users, implementing a cloud-based RADIUS solution might be the best route. Plus, you might want to explore using some technologies that allow for alternative authentication methods when the RADIUS server is unavailable.
There are definitely options out there for combining local and external authentication. Some NAC solutions allow for local caching or fallback mechanisms when RADIUS server connectivity is disrupted. This way, you're not left hanging if the VPN drops.
You're on the right track thinking about RADIUS and the VPN. If the VPN goes down, the RADIUS server needs to be reachable for authentication. Some folks suggest looking at cloud RADIUS solutions for your setup, especially since your organization is already syncing AD users with Office 365.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures