Administrative authentication with radius

[iqbshaik]

Hello Mates, 

Can you help me with the configuration required to enable administative authentications via radius in fortigate firewall in VDOM mode. 

I tried the below config but seems firewall not sending any request to radius. Also I see no reference created of USER group even I called it in new user. Fortigate OS is 5.6.8

Root: config user group edit "Firewall-Admin" set group-type firewall set authtimeout 0 set auth-concurrent-override disable set http-digest-realm '' set member "cisco-acs" config match edit 1 set server-name "cisco-acs" set group-name "Any" next end next end

show user radius config user radius edit "cisco-acs" set server "10.20.10.5" set secret ENC xxxxxx set nas-ip 10.50.245.81 set auth-type pap set secondary-server "10.20.10.6" set secondary-secret xxxx next end

Global : (global) # show system admin radius_admin config system admin edit "radius_admin" set remote-auth enable set accprofile "monitor_readonly" set vdom "root" set wildcard enable set remote-group "Firewall-Admin" next end

[Toshi_Esumi]

First make sure the radius is working with:

diag test authserver radius cisco-acs pap <user_name> <user_password>

Then, try removing "match" section. It shouldn't need to be there.