topic Re: How to recover Radius profile shared secret ? in General Topics

How to recover Radius profile shared secret ?

Psrivastava — Fri, 03 Nov 2017 00:47:32 GMT

Folks- Any idea how to recover shared secret of Radius profile which is set to verify and encrypt the connection between the firewall and the RADIUS server ?

Is there a more system:runnig config CLI command like Cisco in PAN firewalls which can help me out ?

Radius profile

Radius server admin don't know the shared secret as well.

Re: How to recover Radius profile shared secret ?

Mick_Ball — Fri, 27 Oct 2017 17:23:01 GMT

Can you not change the secret both ends, palo and radius.....

perhaps i missed the point...

Re: How to recover Radius profile shared secret ?

Psrivastava — Fri, 27 Oct 2017 17:28:57 GMT

Yup that is a last resort but was checking if Palos can show the secret set. Same goes with PSK for S2S VPN.

Cisco ASAs gives all these if I run more system:running config

Is Palo have similar kind of command or functionality ?

Re: How to recover Radius profile shared secret ?

OtakarKlier — Fri, 27 Oct 2017 22:11:14 GMT

Hello,

What type of RADIUS server are you running? On some, i.e. windows, this is possible.

Regards,

Re: How to recover Radius profile shared secret ?

Psrivastava — Mon, 06 Nov 2017 17:28:31 GMT

It is Win 2012 R2

Re: How to recover Radius profile shared secret ?

OtakarKlier — Mon, 06 Nov 2017 17:29:49 GMT

Hello, If you open NPS on the windows server and export the config, in the XML the RADIUS secret is in plain text. Regards,