Fortiswitch with Radius for admin

Hello @donalcox ,

Did you configure radius settings on FortiSwitch? 

https://docs.fortinet.com/document/fortiswitch/7.4.3/fortiswitchos-administration-guide/296000/radius

I ran into this same issue, did not open a ticket for guidance. Accounts with MFA would fail with invalid credentials just like that. I’m guessing the debug output was similar to yours https://vlc.onl/ .

Did you ever get this working? I am trying to do the same thing (seemingly a trivial task for most anythign else) and I cannot get this working. When attempting to test my authentication to the radius server, I am simply getting a unsuccessful message. 

I tested in FSW version 7.4.4 against FortiGuest and it works fine. Have you tried configuring from FSW CLI? It could be a GUI issue where 'remote' option shows greyed out. Try upgrading FSW to the latest 7.4.6.

my config FYI:-

config system admin
edit "sachit"
set remote-auth enable
set accprofile "super_admin"
set remote-group "CP"
set password ENC SH22c8w1Ta9kThXit8s9hgF2vk0m2Eo1jCexnTyijXeXX3lVRbfJfKGGKSKaFE=
next
end

config user radius
edit "fguest"
set nas-ip 10.37.165.194
set secret ENC flV9DeWrdcL0SGHkgwX/bW6JldddMsTc1dA/3m3g++YwqyFFLsm+CeFbnYQQQprHtEPfEurGp9ftQBEVD9S+11e35MK7y4/J2gWfl0pNunDZIycQoMY5pfFWOSQJTbjJYUgZJayLJs2ESCZjv3l8TrjbhijaIRZTgoqtvg6RKGSVOFcU
set server "10.36.196.198"
next
end

config user group
edit "CP"
set member "fguest"
end