Loading ...

Ubiquiti USG Remote User VPN RADIUS Authentication

Posted in : Network Policy Server, Networking, Ubiquiti, VPN
8 thoughts on “Ubiquiti USG Remote User VPN RADIUS Authentication

Buddy, thank you SO much for making this. I was having a lot of trouble getting this going for one of my clients and your guide made short work of getting it fixed. I really, really appreciate you putting this together. I know a lot of people don’t take the time to say, ‘you helped with this’, I didn’t want to be one of them. Thank you.



I cannot thank you enough for this guide – you helped me get this deployed for our own network and a few customers of mine. They (and I) are thrilled with how well this works. Thank you!!


Had to set this up for a Ruckus Wifi network once – this is so much easier, I was looking for all the hard parts. Now to get the controller to adopt the damn USG


I have had difficulty getting USG adopted before. The quickest way is to reset the USG to defaults then login to the console via SSH. Once in run a set-inform command to the controller, click Adopt, and then go back to the console and run the set-inform again.


I burnt through a few guides but this one had the missing Key Move the Policy UP LOL


This worked well once it was set up. Something over the past week, users started reporting a “The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations ubiquiti radius” error when trying to connect.
On our UDM, we have a Local WAN IP set with an external address which resolves to a hostname for our employees. This IP/hostname is not pingable from the outside internet. Any ideas on how to make it reachable from the outside again?


Windows 10 users and administrators report problems making L2TP VPN connections after installing the recent Windows 10 KB5009543. Uninstall this update to restore connectivity and block this update to keep it.


Found an article that shows that Ubiquiti Unifi L2TP VPN and Windows 2019 RADIUS do not play nice until you run the following command from an elevated command prompt:

sc sidtype IAS unrestricted

Have to restart NPS too.


Leave a Reply

Your email address will not be published. Required fields are marked *



Evaluation Signup

[contact-form-7 id="452" title="Free Network Evaluation"]
And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10