PA-220 radius authentication for management

Scott64 — Tue, 06 Oct 2020 10:25:17 GMT

Hi All,

I am trying to configure my PA-220's with Radius Authentication for management access am having some issues around the configuration.

The PA-220's are running PAN-OS 10.01.

I have created an Admin Role, Authentication Profile and a Radius Server Profile.

I have created a Radius Client and Network Policy using the Vendor Specific 25461 attribute.

Currently both setup to use CHAP.

In the log I just get invalid username/password

I can ping my Radius Server from a console session on the PA-220

Not sure what I am missing ?

Regards

Scott

Re: PA-220 radius authentication for management

MP18 — Tue, 06 Oct 2020 12:21:53 GMT

Make sure under Device,Setup,Authentication settings and Authentication profile is configured.

Also you can check below logs

less mp-log authd.log

Regards