This article provides information on how to configure the IAS server.

How to configure the IAS server.

1. Right click Radius Client and select New Radius Client . The following image will be displayed; type the details and click OK :

   

2. The newly created Radius client will be listed as shown in the image below:
   
   

1. Right click Remote Access Policy and select New Remote Access Policy :
    

   

2. Click Add ; the Select Attribute dialog box is displayed:
   
   

3. Select  Windows-Group and click Add ; the Groups dialog box is displayed:
   
   

4. Click Add; the Select Groups dialog box is displayed:
   
   

5. Search for the user group, click Check Names , and select the group. The Domain Users user group has been used as an example. After selecting the group, click OK . The following dialog box is displayed:
    

   

6. Click Edit Profile ; the following dialog box is displayed:
    

   

7. Click the Authentication tab and uncheck all options; except for Unencrypted authentication [PAP , SPAP] . Now click the IP tab and select only the Server settings determine IP address assignment option:
    

   

8. Click the Advanced tab:
    

   

9. In the Advanced tab, click Add; the Add Attribute dialog box is displayed:
    

   

10. In the Add Attribute dialog box, select Vendor Specific and click Add :
     

    

    
    In the above window, click Add :
     

    

11. Select the options, as specified in the above image and click Configure Attributes :
     

    

12. Type the information in the text fields, as shown in the above image and click OK :
     

    

13. Keep clicking OK, till you get to the following window:
     

    

14. Click OK to get to the following window:
     

    

15. Select Connection Request Processing, Right click Use Windows authentication for all users , and click Properties :
     

    

16. In the above window, click Add :

    

17. In the above window, select Client-Vendor and then click Add :
     

    

18. In the above window, select Radius Standard , click Add to move it to Selected types , and then OK :
     

    

19. In the above window, click OK to complete the IAS server configuration. Now you can use your AD credentials for web-auth and XAuth, to establish the Dynamic VPN.

2024-09-02: minor non tech changes
2020-07-01: Achived.

• KB20783 - [SRX] Configuration example for admin user RADIUS authentication and authorization with Windows IAS [juniper.net]