Question

Your company wants to deploy a point-to-site (P2S) VPN so remote employees can connect to an Azure VNet. Security requires that user authentication be performed against your existing on-premises Active Directory using an on-premises RADIUS server (NPS). You must select a VPN gateway SKU that supports RADIUS authentication. The existing gateway is currently the Basic SKU. What must you do to meet the requirement?

Accepted Answer

Recreate the gateway using a VpnGw1 (or higher) SKU, because the Basic SKU does not support RADIUS authentication.

Answer

Keep the Basic SKU and configure the RADIUS server IP in the point-to-site configuration.

Answer

Upgrade to an ExpressRoute gateway SKU, since RADIUS authentication is only available with ExpressRoute peering.

Answer

Change the gateway type to policy-based and enable RADIUS in the IPsec/IKE policy.