topic Re: Configure rsa with palo alto radius protocol in General Topics

Configure rsa with palo alto radius protocol

Syedhammadali123 — Fri, 28 Jun 2019 23:29:23 GMT

Palo alto integrate with Rsa Authentication Manager . I have configured Global protect which is working fine, now end users will authenticate with RSA using radius . Kindly share proper steps of configuration . I have tried as per document but some errors are showing . Thanks .

Re: Configure rsa with palo alto radius protocol

BPry — Sat, 29 Jun 2019 05:20:13 GMT

@Syedhammadali123,

It would be easier if you simply stated what you are having an issue with, instead of asking for yet another guide to be created. What errors are you actually getting?

Re: Configure rsa with palo alto radius protocol

Syedhammadali123 — Sat, 29 Jun 2019 07:25:43 GMT

Error is mentioned below .

Target vsys is not specified , user "faizan" is assumed to be configured with a shared authentication profile .

Re: Configure rsa with palo alto radius protocol

BPry — Sun, 30 Jun 2019 02:41:42 GMT

@Syedhammadali123,

Use the CLI command 'test authentication authentication-profile' and build out a complete command and post the output.

Most useful information is going to be coming from the actual RADIUS server logs on the RSA server itself to see exactly why the auth request is failing. Also worth double checking the shared secret and noting what Auth Protocol you have configured on the server profile. Lets get the output of the above test though first, it could be something extremely simple to identify with that output.

Re: Configure rsa with palo alto radius protocol

Syedhammadali123 — Sun, 30 Jun 2019 08:22:14 GMT

okay i will check the output with this commad .

Re: Configure rsa with palo alto radius protocol

Syedhammadali123 — Sun, 30 Jun 2019 09:33:35 GMT

@BPry

Output of test authentication authentication-profile <auth profile > username <username> password

''Target vsys is not specified , user "faizan" is assumed to be configured with a shared authentication profile ''

Using Palo Alto 850.

Re: Configure rsa with palo alto radius protocol

BPry — Sun, 30 Jun 2019 22:05:19 GMT

@Syedhammadali123,

Please actually post the entire output, not just repeating the original message. To be clear, the "error" you keep repeating isn't an error message, unless you've set the target vsys on the system prior to testing it will only look in the shared auth profiles. The message doesn't indicate a failure to auth against the Radius server, which is why I need to full output of the test command.

If the only "error" you are getting is this message and your auth request actually returns a valid response, everything is functioning as designed; the message is simply stating that you didn't specify a vsys and is therefore only going to utilize any shared profiles that have been configured.

Re: Configure rsa with palo alto radius protocol

Syedhammadali123 — Sat, 06 Jul 2019 23:00:51 GMT

Dear basically issue has been resolved . Invalid radius response error was coming as showing on above snapshot. Due to screte key mis match this error was coming . Thanks for your kind responses which is highly appriciated .