NPS as DHCP

soffcec
soffcec used Ask the Experts™
on
I am small ISP and I have a working NPS Radius server who is controlling my DSL subscribers. Can I make the NPS server to relay ip addresses to my subscribers DSL modem ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2014

Commented:
Yes, just install the DHCP role and configure.  If you have routers between your clients and the NPS you'll need to configure a relay agent on the router that clients connect to.
soffcecManager

Author

Commented:
I have many routers between and they are not all mine. How do i configure ?
Top Expert 2014

Commented:
Your DSLAM can probably do it.  Configure a DHCP relay (or IP helper as it may be called) on the DSLAM which points to the IP of your NPS server.
Should you be charging more for IT Services?

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

soffcecManager

Author

Commented:
Well, I have no access to the Dslam, I only hire access thru them. I own the backbone router and the DSL modems but the dslams are owned and runned by another company who also own the copper wire.

But as NPS can manually assign an ip address to the modem thru Dial In tab in AD, is it not possible to assign DNS ip addresses ?
Top Expert 2014

Commented:
You can assign DNS via RADIUS (NPS) but it's not that easy.  Perhaps a bit of an overview of how the client's traffic gets from their router to your NPS would help.

Is the DSLAM pointing at your NPS when a client attempts to connect their DSL router?  If so, do you know the manufacturer?
soffcecManager

Author

Commented:
How can I assign DNS via NPS ?
Top Expert 2014

Commented:
Using vendor attributes... hence asking...

Is the DSLAM pointing at your NPS when a client attempts to connect their DSL router?  If so, do you know the manufacturer?
soffcecManager

Author

Commented:
I don´t know the manufacture of the Dslam.

What I do now is:
I connect router and get DSL sync. Then I enter my username@domain.dot and my password for PPPoE dial in.
After that BBRAS (owned by the other company) ask RADIUS(owned by the other company) which ISP is the owner of this @domain.dot
Next the LNS(owned by the other company) asks my RADIUS(NPS) if the user is allowed. My RADIUS answers with ip address who has been set in the Dial Up tab on the AD and then my router can talk to my backbone router and go to the internet but without DNS.
Top Expert 2014
Commented:
Ok, so let's assume the LNS is a Cisco box.

In the NPS access policy you need to add a Cisco AV-Pair in the settings tab so that the DNS servers are passed to the LNS, which will then tell the client.

cisco-avpair = "ip:dns-servers=8.8.8.8 4.2.2.2"

NPS Cisco AV-Pair

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial