Skip to main content
Daryaya
Visitor III
September 29, 2020
Question

Fortigate as a Radius Client

  • September 29, 2020
  • 2 replies
  • 3575 views

Hi,

 

If there is an external firewall between the Radius server(which is outside my network) and my Fortigate as the radius client, then I need to have a rule on the external firewall to allow RADIUS traffic from my Fortigate firewall. so the source address on the rule should be teh address of RADIUS client which is my Fortigate. My question is what address do I have to use ? would it be the outside interface of my Fortigate?

    2 replies

    emnoc
    New Member
    September 29, 2020

    Most likely yes. You can do a diag sniffer packet any "port 1812" for example to see the src.ip 

     

    Ken Felix

    journeyman
    New Member
    October 9, 2020

    In general outgoing services from a FGT default to the outgoing interface IP.

    For many of these services the IP can be changed (eg to a loopback IP). This can be done for ntp, snmp, syslog at least.

    This looks to be applicable to radius as well:

    config user radius

        edit test

            set source-ip 1.1.1.1

        next

    endI'm not sure if this is the correct radius configuration for what you are doing but this may suit your needs.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT