topic GlobalProtect with Radius Authentication in GlobalProtect Discussions

GlobalProtect with Radius Authentication

hidetotabei — Mon, 25 Mar 2024 04:23:10 GMT

Hello,

Is it possible to connect to GlobalProtect using EAP-TTLS with PAP authentication?

I am using OneGate as our RADIUS server.

JayGolf — Mon, 25 Mar 2024 22:51:03 GMT

EAP-TTLS with PAP is supported. Please take a look at Configuring Radius Auth.

hidetotabei — Tue, 26 Mar 2024 00:51:44 GMT

I selected EAP-TTLS with PAP as the authentication protocol for the RADIUS Server Profile, but the authentication failed.

I set OneGate's CA certificate for Certificate Profile.

Is there anything wrong with the settings?

JayGolf — Wed, 27 Mar 2024 17:12:44 GMT

Can you share a snippet or screenshot of the system logs of the specific error?

hidetotabei — Thu, 28 Mar 2024 00:20:10 GMT

GP connections were failing because the setting to enable EAP-TTLS on the RADIUS server was not reflected.

After correcting the RADIUS server settings, GP connections using EAP-TTLS with PAP are now possible.