Setting up Radius Server Wireless Authentication in Windows Server 2012 R2

Why you should choice the Enterprise mode to authentication your wifi user. In this short video tutorial I’ll show you that…

Network topology:


1. Benefits:

– End-users can logon with usernames and passwords.

– End-users securely receive unique encryption keys at each session.

– Administrator can change the login credentials and revoke access per user.

– This mode provides better encryption key security.

2. Contents:

– Setting up Access point as a Radius Client.

– Create test account and put them to allowed access Wifi group.

– Install Active Directory Certificate Services.

– Request Certificate.

– Install Network Policy and Access Service Role, DHCP Server.

– Configure Network Policy and Access Service Role.

– Configure Network Setting on Client Machines.

3. Prerequisite:

– 01 Windows Server 2012 R2 with AD promoted.

– 01 Windows 7 (Client Machine).

4. Assign IP address:

AD – Radius Server

Access Point

IP Address

Subnet mask

Default gateway

Preferred DNS

5. Implementation by Video:

Have fun!


  1. I am facing an issue while requesting a new certificate that i cannot see domain controller as an option. i only get the option of computer.
    please let me know on how i can sort this out.

    • Hi Baptist,

      Thank you for your interest in my articles.
      May I know which server you are requesting certificate?
      In my test-lab, I’m using AD + Radius on the same server.

    • If you do not use the same Radius and AD on the same server, you can ignore this step “Request certificate” make sure that on your radius server must be have “Active Directory Certificate Services” installed.

      For Network Policy Server:

      Network Policies => Open Your Policy => Constraints tab => Authentication Methods => on the right panel click “Microsoft: Protected EAP (PEAP)” => Edit => Certificate issued to: => choose your Certificate that you installed.

  2. Great tutorial. I use RADIUS, AD, and DHCP all on separate servers. I also have a trusted CA from a provider (VeriSign). How can I make this work and will I also still need to install Certificate Services on the RADIUS? Please advise. Thank you.

  3. Hello, does the server need to be a DC and CA for this? If we can get away from these, that’d be great as I as an admin don’t like promoting servers to DCs if they aren’t doing only DC stuff. Thank you.

Leave a Reply

Your email address will not be published.


This site uses Akismet to reduce spam. Learn how your comment data is processed.