Fortinet v3.0 MR7 manual Group, Edit icon Edit a Radius server configuration

RADIUS servers Authentication servers

To configure the FortiGate unit for RADIUS authentication - CLI

config user radius edit <server_name>

set all-usergroup {enable disable } set auth-type <authentication_protocol> set nas-ip <nas_ip_called_id>

set radius-port <radius_port_id>

set secondary-server <secondary_ip_address> set secondary-secret <secondary_password> set server <primary_ip_address>

set secret <primary_password>

set use-group-for-profile <group_profile_select> set use-management-vdom <vdom_requests>

end

The use-group-for-profile and use-management-vdom can only be added to RADIUS authentication requests via the CLI. You enable use-group- for-profile to use the RADIUS group attribute to select the firewall protection profile to apply. Enable use-management-vdom to use the management VDOM to send all RADIUS requests. For more information, refer to the FortiGate CLI

Reference.

To remove a RADIUS server from the FortiGate unit configuration - web- based manager

Note: You cannot remove a RADIUS server that belongs to a user group. Remove it from the user group first.

1Go to User > Remote > RADIUS.

2Select the Delete icon beside the name of the RADIUS server that you want to remove.

3Select OK.

Figure 2: Delete (remove) a RADIUS server

Delete

Edit

Create New	Add a new RADIUS server. The maximum number is 10.
Name	The name that identifies the RADIUS server on the FortiGate unit.
Server Name/IP	The domain name or IP address of the RADIUS server.
Delete icon	Delete (remove) a RADIUS server from the FortiGate configuration.
	You cannot remove a RADIUS server that has been added to a user
	group.
Edit icon	Edit a RADIUS server configuration.

	FortiOS v3.0 MR7 User Authentication User Guide
18	01-30007-0347-20080828