SSL VPN is working fine with Local Authentication, but not with Radius Server,.

[Gururaj]

Hi Team,.

               We have installed PA 2050 box at our client place in which SSL VPN is configured for remote access. Working fine with Local Authentication but not with Radius Authentication, in PaloAlto system logs, it is showing authentication failed. But we are not able to see any logs in Radius Server 2003. Onceagain I checked shared secret, IP address and Port, it is same in both Radius server and PaloAlto Device. As i don't have much knowledge on radius server it is difficult to identify the problem. Is there any perticuler document for integrating Radius server with PaloAlto Firewall.

Radius server is in same subnet, domain and also reachable from PaloAlto management port. Also created IAS on Server, Is there any extra configuration is required to solve this issue?plese do the needful,.

Thank you

Gururaj.

[zarina]

Have the following command running:

tail follow yes mp-log authd.log

and authenticate the user against AD. These logs will indicate the reason for failure. Please paste the output here.

[npare · Accepted solution]

Did you take a look at this document : https://live.paloaltonetworks.com/docs/DOC-2909 ?

[Gururaj]

Hi npare,..

Thank you for your reply, It helped me to fix the problem. The problem was with Radius server.