Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
All Products
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Web Application Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • Web Application / API Protection
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions
    • All Products

    CLI Reference

    Home FortiExtender 7.6.1 CLI Reference
    7.6.1
    7.6.5
    7.6.4
    7.6.2
    7.6.1
    7.6.0
    7.4.4
    7.4.1
    7.4.0
    7.2.3

    config user radius

    config user radius

    Configure the FortiExtender to access a RADIUS server. 

    config user radius
  edit <name>
    set server {string}
    set secret {password}
    set auth-type [auto||ms_chap_v2|...]
    set timeout {integer}
    set transport-protocol [udp]
    set nas-ip {string}
  next
end

    Sample command:

    config user radius
  edit example_radius
    set server <IPv4 address>
    set secret <password>
    set auth-type auto
    set timeout 5
    set transport-protocol udp
    set nas-ip <IPv4 address>
  next
end

    Parameter

    Description

    Type

    Size

    Default

    name

    Name of the RADIUS server table.

    string

    -

    none

    server

    Primary RADIUS server IP address in IPv4.

    string

    -

    none

    secret

    Pre-shared secret key used to access the primary RADIUS server.

    password

    1-128

    none

    auth-type

    Authentication protocols permitted for this RADIUS server. You can select the following options:

    • auto

    • ms_chap_v2

    • ms_chap

    • chap

    • pap

    If the authentication type is set to auto, FortiExtender uses the following protocols in sequence:

    PAP → MSCHAP_v2 → CHAP

    FortiExtender will only try the next protocol once it receives a RADIUS-reject message

    option

    -

    auto

    timeout

    Time in seconds to retry connecting to the RADIUS server.

    integer

    -

    5

    transport-protocol

    Transport protocol to be used.

    • udp

    option

    -

    udp

    nas-ip

    IPv4 address used for the FortiExtender to communicate with the RADIUS server. It is also used as the NAS-IP-Address and Called-Station-ID attributes.

    string

    -

    none
    Previous
    Next

    config user radius

    config user radius

    Configure the FortiExtender to access a RADIUS server. 

    config user radius
  edit <name>
    set server {string}
    set secret {password}
    set auth-type [auto||ms_chap_v2|...]
    set timeout {integer}
    set transport-protocol [udp]
    set nas-ip {string}
  next
end

    Sample command:

    config user radius
  edit example_radius
    set server <IPv4 address>
    set secret <password>
    set auth-type auto
    set timeout 5
    set transport-protocol udp
    set nas-ip <IPv4 address>
  next
end

    Parameter

    Description

    Type

    Size

    Default

    name

    Name of the RADIUS server table.

    string

    -

    none

    server

    Primary RADIUS server IP address in IPv4.

    string

    -

    none

    secret

    Pre-shared secret key used to access the primary RADIUS server.

    password

    1-128

    none

    auth-type

    Authentication protocols permitted for this RADIUS server. You can select the following options:

    • auto

    • ms_chap_v2

    • ms_chap

    • chap

    • pap

    If the authentication type is set to auto, FortiExtender uses the following protocols in sequence:

    PAP → MSCHAP_v2 → CHAP

    FortiExtender will only try the next protocol once it receives a RADIUS-reject message

    option

    -

    auto

    timeout

    Time in seconds to retry connecting to the RADIUS server.

    integer

    -

    5

    transport-protocol

    Transport protocol to be used.

    • udp

    option

    -

    udp

    nas-ip

    IPv4 address used for the FortiExtender to communicate with the RADIUS server. It is also used as the NAS-IP-Address and Called-Station-ID attributes.

    string

    -

    none
    Previous
    Next