topic Radius Authentication Profile in Next-Generation Firewall Discussions

Radius Authentication Profile

S.Byrne — Mon, 13 May 2024 11:47:37 GMT

hello

I am configuring a GP gateway for Radius Authentication

I am using the CLI test authentication command to test

I can ping the Radius host and confirmed Secret

my troubleshooting shows packets allowed by the Security policy

I cannot see any packets to the Radius host in the packet captures in any of the stages

what do you think my next steps should be ?

Raido_Rattameister — Mon, 13 May 2024 12:43:14 GMT

RADIUS host and firewall mgmt interface are in same subnet?

To capture traffic going out from mgmt interface you need to take tcpdump in cli.

Packet capture in web interface shows only traffic that passes Palo dataplane.

S.Byrne — Mon, 27 May 2024 19:19:34 GMT

first -thank you for your help

Q can you check the configuration from the screenshots ?

I am trying to ensure my config flow is correct

1 define Radius server

2 define authentication profile

3 use the authentication profile in the portal/gateway

I can see the TLS connection/traffic from my test client to the target VPN in the PA logs at the receive stage

S.Byrne — Tue, 28 May 2024 11:48:39 GMT

Q for Radius authentication to work is it a pre-requisite that the management interface has full IP connectivity to the Radius server ?

S.Byrne — Tue, 28 May 2024 14:26:08 GMT

there is an existing working GP portal configuration that uses LDAP for authentication

could this be an issue with the Security policy ?