Radius server groups

3 replies
4160 views

Hi,

Is it possible to add radius server groups in FortiOS? I can only see primary and secondary radius servers under one name?

Also I can bind multiple radius servers to user groups. With that will the users get authenticated from any of the linked radius servers?

Thanks,

Raj

emnocAnswer

New Member

I guessing you want to group 2x radius servers for redundancy? I just wrote a blog entry providing examples of this;

And on the 2nd question, yes the 2 radius servers could authenticate the user.

http://socpuppet.blogspot.com/2015/10/fortigate-radius-observations.html

emnocAnswer

New Member

I guessing you want to group 2x radius servers for redundancy? I just wrote a blog entry providing examples of this;

And on the 2nd question, yes the 2 radius servers could authenticate the user.

http://socpuppet.blogspot.com/2015/10/fortigate-radius-observations.html

rajendraAuthor

New Member

Actually i have to add 3 radius servers for resiliency. I can see that two can be grouped but cant figure out how to use 3.

emnoc

New Member

Simple, after you set the 1st server , the cfg will allow you to set the secondary, after setting the 2nd, the cfg will allow the 3rd

e.g

config user radius edit "socpuppets_1plus1eq2.com" set server "1.1.1.1" set secret mysecrethere set secondary-server "1.1.1.2" set secondary-secret mysecrete

set tertiary-server '1.1.1.3 set tertiary-secret mysceretagainhere next end

Sign up

Login with SSO

Login to the community

Login with SSO