Fortiswitch with Radius for admin

[donalcox]

I have a Fortiswitch standalone mode - no Fortigate - I am trying to set up MS NPS for radius authentication. I have all set up in the NPS.

On the Fortiswitch for a new administrator I cannot choose remote as an option - greyed out.

Is what I am doing possible - if so how do I get rem

[ozkanaltas]

Hello @donalcox ,

Did you configure radius settings on FortiSwitch? 

https://docs.fortinet.com/document/fortiswitch/7.4.3/fortiswitchos-administration-guide/296000/radiu...

[milotgoa]

I ran into this same issue, did not open a ticket for guidance. Accounts with MFA would fail with invalid credentials just like that. I’m guessing the debug output was similar to yours https://vlc.onl/ .

[kidfry]

Did you ever get this working? I am trying to do the same thing (seemingly a trivial task for most anythign else) and I cannot get this working. When attempting to test my authentication to the radius server, I am simply getting a unsuccessful message. 

[sachitdas_FTNT]

I tested in FSW version 7.4.4 against FortiGuest and it works fine. Have you tried configuring from FSW CLI? It could be a GUI issue where 'remote' option shows greyed out. Try upgrading FSW to the latest 7.4.6.

my config FYI:-

config system admin
edit "sachit"
set remote-auth enable
set accprofile "super_admin"
set remote-group "CP"
set password ENC SH22c8w1Ta9kThXit8s9hgF2vk0m2Eo1jCexnTyijXeXX3lVRbfJfKGGKSKaFE=
next
end

config user radius
edit "fguest"
set nas-ip 10.37.165.194
set secret ENC flV9DeWrdcL0SGHkgwX/bW6JldddMsTc1dA/3m3g++YwqyFFLsm+CeFbnYQQQprHtEPfEurGp9ftQBEVD9S+11e35MK7y4/J2gWfl0pNunDZIycQoMY5pfFWOSQJTbjJYUgZJayLJs2ESCZjv3l8TrjbhijaIRZTgoqtvg6RKGSVOFcU
set server "10.36.196.198"
next
end

config user group
edit "CP"
set member "fguest"
end