This RADIUS server solution uses NPS to perform centralized authentication, authorization, and accounting for wireless, authenticating switches, remote access dial-up or virtual private network (VPN) connections. When you use NPS as a RADIUS server, you configure network access servers, such as wireless access points or VPN servers, as RADIUS clients in NPS.

NPS uses an Active Directory Domain Services (AD DS) domain or the local Security Accounts Manager (SAM) user accounts database to authenticate user credentials for connection attempts.

Features:
Supports WPA2-Enterprise (preferred) or WPA-Enterprise, and either AES (preferred) or TKIP encryption cipher, depending on which versions are supported by your wireless client computer network adapters.
Active Directory or local security accounts manager for authentication
Allow or deny connections to specific wireless networks that you specify by network type and Service Set Identifier (SSID)
Allow or deny connections to infrastructure networks
Allow or deny connections based on AD group membership
Machine certificate authentication using trusted certs
Built-in support for IEEE 802.1X Authenticated Wireless Access with PEAP-MS-CHAP v2
Accounting logging
Unlimited number of RADIUS clients (APs) and remote RADIUS server groups
Configure RADIUS clients (APs) by specifying an IP address range.
Single sign-on solution
RADIUS standard specified by the Internet Engineering Task Force (IETF) in RFCs 2865 and 2866

Amazon EC2 running Microsoft Windows Server is a fast and dependable environment for deploying applications using the Microsoft Web Platform. Amazon EC2 enables you to run compatible Windows-based solutions on AWS' high-performance, reliable, cost-effective, cloud computing platform.