topic Re: Radius Authentication - Passive Firewall in General Topics

Radius Authentication - Passive Firewall

indysogi — Tue, 10 Nov 2015 11:02:00 GMT

Hi,

I am trying to authenticate the passive firewall via Radius for management purposes.

In the active firewall I have the same radius server configured with two different secret keys (one for active and one for passive). On my radius server I have two clients. One is the active firewall and the other for the passive.

I can authenticate the active firewall without any issues. However, the passive firewall will not authenticate. I receive an unknown user error.

Is this configuration possible?

Re: Radius Authentication - Passive Firewall

rmonvon — Tue, 10 Nov 2015 19:41:04 GMT

Hi there...The passive firewall should authenticate to Radius just like the active firewall. Have you tried swapping the 2 Radius clients such that the passive firewall will authenticate to the active client, and active firewall --> passive client? Also, you may want to check the secret key for typo. Thanks.

Re: Radius Authentication - Passive Firewall

pulukas — Wed, 11 Nov 2015 11:50:58 GMT

Confirm that you have both firewall local ip addresses setup on the RADIUS server.

Re: Radius Authentication - Passive Firewall

indysogi — Wed, 11 Nov 2015 11:54:33 GMT

the ip addresses of both firewalls are setup on the radius server.

Re: Radius Authentication - Passive Firewall

pulukas — Fri, 13 Nov 2015 10:44:37 GMT

The configuration is possible.

Check the system log to see if there is a more specific error.

Do a packet capture on the RADIUS server of the failed login to get the full details on the transaction.