topic Radius Authentication in General Topics

Radius Authentication

MMCiobanu — Thu, 13 Feb 2014 23:57:29 GMT

Hi,

We have set up Radius authentication on Panorama and PAN firewalls and it is working fine, but, no superuser access; How do we allow superuser access in this case?

Thanks.

Re: Radius Authentication

HULK — Fri, 14 Feb 2014 00:33:13 GMT

Hello Sir,

You should create account within radius using the necessary VSA to pass admin role to the firewall ( if you wants to authenticate via RADIUS ).

Thanks

Re: Radius Authentication

HULK — Fri, 14 Feb 2014 02:07:11 GMT

For example: Pre-defined Admin Roles using VSA and Cisco Radius ACS 4.0

Thanks

Re: Radius Authentication

HULK — Fri, 14 Feb 2014 20:40:05 GMT

One more good article on the same topic: Radius Vendor Specific Attributes (VSA)

Thanks

Re: Radius Authentication

mbutt — Sat, 15 Feb 2014 01:05:03 GMT

As Hulk mentioned there are predefined roles for the superuser. You will have configure the attribute in the radius so when the user tries to authenticate he has the correct level of access. Hope the documents above and this explanation helps you resolve the issue.
Thanks

Numan