FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Cayazo
Staff & Editor
Staff & Editor
Article Id 414301
Description This article describes how to configure a RADIUS server in the FortiGate and change the source interface for the RADIUS requests.
Scope FortiGate.
Solution

v7.6.x:

  1. Go to Users & Authentication -> RADIUS Servers.
  2. Select the specific server.
  3. Select Edit and select the Advanced tab.
  4. In the Source Interface section, select the new interface expected for the RADIUS requests to come from.

 

v7.4.x and prior:

It is configurable only over the CLI. These are the required commands:

 

config user radius
    edit "RADIUS_Server_Name"

        set interface-select-method specify 
        set interface "interface_name"
    next
end

 

Note:
Make sure that the new interface selected is up and running with a valid IP address. 
Routing should be active with that interface to send the traffic; otherwise connection will fail.

 

There is another option to specify the source interface. 

 

Method 2:

  1. Navigate to Network -> Local Out Routing.
  2. Select the RADIUS Server -> Edit.
  3. Mention the Outgoing interface as Specify, select the interface preferred for the RADIUS traffic to exit.
  4. Select OK to save the changes.

 

image (8).png

 

To test the connectivity, place a capture with the configured RADIUS port:

 

diagnose sniffer packet any 'host [radius-srv-ip] and port (1812 or 1813)' 4 0 l