GlobalProtect with Radius Authentication

[hidetotabei]

Hello,

Is it possible to connect to GlobalProtect using EAP-TTLS with PAP authentication?

I am using OneGate as our RADIUS server.

[JayGolf]

Hi @hidetotabei ,

EAP-TTLS with PAP is supported. Please take a look at Configuring Radius Auth.

[hidetotabei]

I selected EAP-TTLS with PAP as the authentication protocol for the RADIUS Server Profile, but the authentication failed.

I set OneGate's CA certificate for Certificate Profile.

Is there anything wrong with the settings?

[JayGolf]

Hi @hidetotabei ,

Can you share a snippet or screenshot of the system logs of the specific error? 

[hidetotabei]

GP connections were failing because the setting to enable EAP-TTLS on the RADIUS server was not reflected.

After correcting the RADIUS server settings, GP connections using EAP-TTLS with PAP are now possible.