config user radius
Configure the FortiExtender to access a RADIUS server.
config user radius
edit <name>
set server {string}
set secret {password}
set auth-type [auto||ms_chap_v2|...]
set timeout {integer}
set transport-protocol [udp]
set nas-ip {string}
set nas-identifier {string}
set port {integer}
set source-ip {ipv4-address}
next
end
Sample command:
config user radius
edit example_radius
set server fortinet.com
set secret ********
set auth-type auto
set timeout 5
set transport-protocol udp
set nas-ip 0.0.0.0
set nas-identifier
set port 1812
set source-ip 1.1.1.4
next
end
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
name |
Name of the RADIUS server table. |
string |
- |
none |
|
server |
Primary RADIUS FQDN or IP address. |
string |
- |
none |
|
secret |
Pre-shared secret key used to access the primary RADIUS server. |
password |
1-128 |
none |
|
auth-type |
Authentication protocols permitted for this RADIUS server. You can select the following options:
If the authentication type is set to PAP → MSCHAP_v2 → CHAP FortiExtender will only try the next protocol once it receives a RADIUS-reject message |
option |
- |
auto |
|
timeout |
Time in seconds to retry connecting to the RADIUS server. |
integer |
- |
5 |
|
transport-protocol |
Transport protocol to be used.
|
option |
- |
udp |
|
nas-ip |
IPv4 address used for the FortiExtender to communicate with the RADIUS server. It is also used as the NAS-IP-Address and Called-Station-ID attributes. |
string |
- |
none |
|
nas-identifier |
Optional NAS-Identifier string for RADIUS messages |
string |
- |
none |
|
port |
Primary RADIUS server port number |
integer |
- |
none |
|
source-ip |
Source IP address for communications to the RADIUS server. |
IPv4 address |
- |
0.0.0.0 |