Dell Networking: Configuring Windows Server 2016 as a radius server for SmartFabric OS10

Summary: This article covers how to configure Windows Server 2016 as a Network Policy Server (NPS) using radius for Dell Networking OS10.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

How to configure server 2016 NPS radius server for OS10

 

Steps:

1. Open NPS server management application

2. Right-click Radius Clients

3. Choose New.
 

  • Create Friendly name OS10
  • Enter IP of Switch
  • Enter Shared secret

 

HOW12936_en_US__1icon Ensure the shared secret matches what is configured on the switch.
  • Click Ok


4. Right-click connection request Policies

5. Choose new.

  • Create policy Name OS10-Radius
  • Click next
  • On conditions choose add
  • Select a Client Friendly name
  • Value is OS10
  • Click Finish
     

6. Right-click Network Policies (Steps 10.4.1.x and below)

7. Choose new.

  • Create Name OS10-Policies
  • Click next
  • Add condition
  • Choose users groups
  • Add wanted user group to be allowed networking\domain admin
  • Click next
  • Ensure access granted is selected 
  • Click next
  • Check "unencrypted Authentication (PAP, SPAP)
  • Click next 
  • Click next on Constraints
  • On Settings leave standard with
    • Framed-protocol PPP
    • Service-type Framed
  • Vendor Specific
    • Cisco-AV-Pair shell:roles="sysadmin"
 

8. Right-click Network Policies (steps 10.4.2.x+)

9. Choose new.

    • Create Name OS10-Radius
    • Click next
    • Add condition
    • Choose users groups
    • Add wanted user group to be allowed networking\domain admin
    • Click next
    • Ensure access granted is selected
    • Click next
    • Check "unencrypted Authentication (PAP, SPAP)
    • Click next
    • Click next on Constraints
    • On Settings leave standard with
      • Framed-protocol PPP
      • Service-type Framed
    • Vendor Specific
      • Select Vendor-Specific
        • Enter Vendor Code: 674
        • Yes, It conforms to the Radius RFC (5080)
        • Configure Attribute
          • Vendor-assigned Attribute number: 2
          • Attribute format: string
          • Attribute value: sysadmin
    • Click next
    • Confirm that the settings are correct and then click finish

 

HOW12936_en_US__1icon Do not copy and paste as formatting may incorrectly add characters.

 

  • Click next
  • Confirm that the settings are correct and then click finish

 

Switch configuration:
 

Command Description
OS10(config)#aaa authentication login default local group radius Configure login to use local accounts first.
OS10(config)#radius-server host key This points to the radius server IP along with the shared key

 

 

Affected Products

PowerSwitch S3048-ON, PowerSwitch S4048-ON, PowerSwitch S4048T-ON, PowerSwitch S4112F-ON/S4112T-ON, PowerSwitch S4128F-ON/S4128T-ON, PowerSwitch S4148F-ON/S4148T-ON/S4148FE-ON, PowerSwitch S4148U-ON, PowerSwitch S4248FB-ON /S4248FBL-ON , PowerSwitch S5148F-ON, PowerSwitch S5212F-ON, PowerSwitch S5224F-ON, PowerSwitch S5232F-ON, PowerSwitch S5248F-ON, PowerSwitch S5296F-ON, PowerSwitch Z9100-ON, PowerSwitch Z9264F-ON, PowerSwitch Z9332F-ON, PowerSwitch Z9432F-ON, SmartFabric OS10 Software ...
Article Properties
Article Number: 000120149
Article Type: How To
Last Modified: 05 Jun 2025
Version:  7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.