Configuring RADIUS Settings

1. Navigate to Device >Users > Settings > Authentication.
2. Next to Configure RADIUS, click Configure.

   The RADIUS Configuration page is displayed.

3. Under the Settings > Radius Server tab, do the following:

   1. Click Add. The Settings page displays.
   2. In the Host Name or IP Address field, enter the host name or IP address .
   3. In the Port field, enter the port number.
   4. In the Shared Secret and Confirm Shared Secret fields, enter the shared secret.
   5. If Partition is configured, then in Authentication Partition select the authentication type.

      Partition feature is not available in the TZ series. This feature is only supported in high-end devices from the NSa 2700 onwards.

4. On the Advanced tab, do the following:
   1. Select Send Through VPN tunnel to send the requests across the VPN tunnel but it also binds these requests to X0 interface even if we have specified local network for site to site VPN.
   2. From the User Name Format list, select the username format:
      • Simple-Name
      • Name@Domain
      • Domain\Name
      • Name.Domain
   3. Click Save. The RADIUS Accounting table is updated.
5. Click on General Settings, do the following:
   1. In the RADIUS Accounting Server Timeout (seconds) field, enter a maximum time out, in seconds. The default value is 5 seconds.
   2. In the Retries field, enter the maximum number of retries. The default value is 3 retries.

   3. Enable Periodically check RADIUS servers that are down to request then its status changes to down and then further authentication requests is sent to the secondary server until the primary comes back up again.

   4. Enable Force MSCHAPv2 mode to allow password updating.

6. Click Save.

7. For each RADIUS server you want to add, repeat these steps.

8. Click Save.