Server 2008 VPN authentication WITHOUT Active Directory

active-directoryradiusvpn

First the set up. 15 workgroup users, and we have a Watchguard firewall with VPN. Currently using the Watchguard to authenticate users for VPN access, but the boss wants to use server 2008 as the authentication server. The watchguard allows a relay to authenticate via RADIUS or AD. My question is can we use RADIUS as the authentication server without AD services? (they want to maintain workgroup setup, with no domain controller)

Best Answer

Don't bother with a 2008 Server if you're just using it for RADIUS. It's a waste of money. If you don't want/need AD integration, just prop up a Linux/BSD box with FreeRADIUS or use Watchguard's built-in authentication mechanism (they have one, right?).

Adding a Windows Server just for VPN auth doesn't make a ton of sense.