RADIUS Configuration

  1. In the Settings Pane, select > USERS & ACCOUNTS > Remote Authentication. 
    The REMOTE AUTHENTICATION page displays.

  2. From the Scheme options, select Radius.

  3. Select the required Mode:

    • RADIUSDownLocal

    • RADIUS Mode

    • LocalRADIUS

    • RADIUSLocal

  4. Enter the Address and optionally the Port of the Remote Authentication Server to query.
    The default port is 1812.

    Note:  Click Add Authentication Server to add multiple servers.

  5. Enter the Address and optionally the Port of the Remote Accounting Server to send accounting information.
    The default port is 1813.

    Note:  Click Add Accounting Server to add multiple servers.

  6. Enter and confirm the Server Password also known as the RADIUS Secret.

  7. Click Apply.

To provide group membership, RADIUS must be configured to provide a list of group names via the Framed-Filter-Id attribute.

The following configuration snippet shows how this can be configured for FreeRADIUS:

operator1 Auth-Type := System Framed-Filter-ID = ":group_name=west_coast_admin,east_coast_user:"

Note:  The Framed-Filter-ID attribute must be delimited by the colon character.