In the NPS/RADIUS section of Administering Windows Server Hybrid Core Infrastructure, a RADIUS client is defined as a network access server (NAS) such as a VPN server, wireless AP, or switch. The guide states: “Each VPN server that forwards connection requests to NPS must be configured as a RADIUS client.” User counts are irrelevant to the number of RADIUS clients; the determining factor is the number of NAS devices that send RADIUS messages to NPS. The table shows Boston: 2 VPN servers, Dallas: 2, Seattle: 4—for a total of 8 VPN servers. Therefore, to enforce policies for all remote connections through NPS1, you must add each of the eight VPN servers as a RADIUS client. Options reflecting user totals (180/188) are incorrect because users are authenticated via the NAS, not directly configured as clients in NPS.