Fortigate Radius Administrator Login

[abhisar]

Dear All,

I am trying to add Device login via Radius, but its failing. But if I login to SSL via same Radius user its working fine.

When I am creating user in adminitrator, I will click on Remote, then add specific user group which I will create in User group.

Can you please suggest.  Also, can you please help on the commnds for debuging radius.

Thank You,

Abhisar.

[Somashekara_Hanumant]

Hi,

Using below commands you can capture the packets for radius authentication against your admin user

diag debug reset diag debug enable diag debug application fnbamd -1

And also you can sniff the packets using below command

diag sniff packet any 'host x.x.x.x and port 1812' 6 0 a

(where x.x.x.x is a radius server ip address)

After initiating the above command on ssh session then try to authenticate using radius user.

To convert the sniffer packet to wireshark, refer the below kb article

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=11186&sliceId=1&d...

To verify the radius user from fortigate cli console

#diag test authserver radius <radius_server_name> <chap/pap/mschap/mschap2> <username> <password>

Regards,

Somu