Fortinet FortiGate v3.0 MR7 User Manual

Page 18

FortiOS v3.0 MR7 User Authentication User Guide

01-30007-0347-20080828

RADIUS servers

Authentication servers

To configure the FortiGate unit for RADIUS authentication - CLI

config user radius

edit

set all-usergroup {enable | disable }

set auth-type

set nas-ip

set radius-port

set secondary-server

set secondary-secret

set server

set secret

set use-group-for-profile

set use-management-vdom

end

The use-group-for-profile and use-management-vdom can only be
added to RADIUS authentication requests via the CLI. You enable use-group-
for-profile

to use the RADIUS group attribute to select the firewall protection

profile to apply. Enable use-management-vdom to use the management VDOM
to send all RADIUS requests. For more information, refer to the

To remove a RADIUS server from the FortiGate unit configuration - web-
based manager

Go to User > Remote > RADIUS.

Select the Delete icon beside the name of the RADIUS server that you want to
remove.

Select OK.

Figure 2: Delete (remove) a RADIUS server

Note: You cannot remove a RADIUS server that belongs to a user group. Remove it from
the user group first.

Create New

Add a new RADIUS server. The maximum number is 10.

Name

The name that identifies the RADIUS server on the FortiGate unit.

Server Name/IP

The domain name or IP address of the RADIUS server.

Delete icon

Delete (remove) a RADIUS server from the FortiGate configuration.
You cannot remove a RADIUS server that has been added to a user
group.

Edit icon

Edit a RADIUS server configuration.

Edit

Delete