Radius Authentication

[MMCiobanu]

Hi,

We have set up Radius authentication on Panorama and PAN firewalls and it is working fine, but, no superuser access; How do we allow superuser access in this case?

Thanks.

[HULK · Accepted solution]

Hello Sir,

You should create account within radius using the necessary VSA to pass admin role to the firewall ( if you wants to authenticate via RADIUS ).

Thanks

[HULK]

For example: Pre-defined Admin Roles using VSA and Cisco Radius ACS 4.0

Thanks

[HULK]

One more good article on the same topic: Radius Vendor Specific Attributes (VSA)

Thanks

[mbutt]

As Hulk mentioned there are predefined roles for the superuser. You will have configure the attribute in the radius so when the user tries to authenticate he has the correct level of access. Hope the documents above and this explanation helps you resolve the issue.
Thanks

Numan