Skip to main content
JOSIAH_BOZIAH
JOSIAH_BOZIAH
Explorer
July 20, 2023
Solved

Unable to connect to my Radius Server . Test connectivity settings on Fortigate primary server fails

  • July 20, 2023
  • 3 replies
  • 7285 views

Unable to connect to my Radius Server . Test connectivity settings on Fortigate primary server fails

Best answer by RBA

Try with below command

diagnose test authserver radius "RADIUS SERVER" mschap2 username password

 

Server_name indicates the value of "name" field configured under FortiGate Radius Profile.

Also share the output of command "sh full-configuration user radius"

3 replies

srajeswaran
Staff
srajeswaran
Staff
July 20, 2023

Can you collect diagnose sniffer output and then fnbamd debug as suggested in below article?

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Radius-authentication-troubleshooting/ta-p/196192

    JOSIAH_BOZIAH
    JOSIAH_BOZIAHAuthor
    Explorer
    July 21, 2023

    radius.JPG

    says the invalid RADIUS SERVER.radius2.JPG

    10.76.0.1 is my fortigate LAN IP and 10.76.12.15 is my Radius SERVER

    RBA
    Staff
    RBAAnswer
    Staff
    July 21, 2023

    Try with below command

    diagnose test authserver radius "RADIUS SERVER" mschap2 username password

     

    Server_name indicates the value of "name" field configured under FortiGate Radius Profile.

    Also share the output of command "sh full-configuration user radius"

      JOSIAH_BOZIAH
      JOSIAH_BOZIAHAuthor
      Explorer
      July 26, 2023

      tempsnip1.png

      VinayHM
      Staff
      VinayHM
      July 26, 2023

      Hi @JOSIAH_BOZIAH 

       

      Please take the sniffer on ports 1813 and 1812 and attach it here.

       

      Regards,

       

       

        JOSIAH_BOZIAH
        JOSIAH_BOZIAHAuthor
        Explorer
        July 26, 2023

        Do I need to check Radius accounting under Administrative access, also the command just hangs, no output until I terminate it control C.radiussniff.JPG

         

        VinayHM
        Staff
        VinayHM
        July 26, 2023

        HI @JOSIAH_BOZIAH 

         

        Thanks for the update.

        Open two SSH

         

        Please take the output of the below commands 

        # diagnose debug application fnbamd -1

        # diagnose debug enable

         In the second putty run the sniffer.

        diagnose sniffer packet any "host x.x.x.x and port 1813 and port 1812" 6 0 a

        where x.x.x.x is radius server IP

         

        Please recreate the issue (test connectivity) while taking the logs.

         

        After taking the logs please disable the debug command.

        # diagnose debug disable

        # diagnose debug reset

         

        Regards,

          Terms & ConditionsAccessibility statement