Admin Auth via NPS Radius

[Curious1]

Hi Everyone,

Am wating to implement radius auth of our BIG-IP administrators (GUI and SSH), radius is a supported auth method so we would like to use the Microsoft NPS services.

Has anyone successfully implemented GUI / SSH authentication of BIG-IP Administrators via radius to Microsoft NPS?

Would be great to hear of your learnings and any advice you can provide.

TIA (currently running v16.1.3.1)

[CA_Valli]

Hello, check this KB: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-systems-user-account-administration/remote-user-ac...

[Curious1]

Hi CA_Valli, thanks for the article.  I am not convinced the BigIP and MS NPS will play nicely together.

Anyone succeeding in implementing this?

[Curious1]

Hi KristiD21,

Yes, this is what I want to do.  Authenticate users with AD defined accounts via Radius to a MS NPS service. 

Would be ideal to have various roles available (eg. admins, auditors etc). 

Would be able to enable MFA via MS Authenticator for all our logins to our F5 devices.

Has anyone achieved this yet?