About RADIUS Auth

A RADIUS Auth action authenticates a client against an external RADIUS server. A RADIUS Auth action provides these configuration elements and options.

Note: When configured in a per-request policy subroutine, some screen elements and options described here might not be available.

AAA Server

Specifies the RADIUS accounting server; servers are defined in the Access > Authentication area of the Configuration utility.

Show Extended Error

When enabled, causes comprehensive error messages generated by the authentication server to display on the user’s logon page. This setting is intended only for use in testing, in a production or debugging environment. If enabled in a live environment, your system might be vulnerable to malicious attacks. (When disabled, displays non-comprehensive error messages generated by the authentication server on the user’s logon page.)

Max Logon Attempts Allowed

Specifies the number of user authentication logon attempts to allow. A complete logon and password challenge and response is considered as one attempt.

Note: For a per-request policy subroutine, equivalent functionality is supported through subroutine settings.

Username Source

Specifies the session variable name from which RADIUS agent should read the username. The default value is %{session.logon.last.username}.

Password Source

Specifies the session variable name from which RADIUS agent should read the password. The default value is %{session.logon.last.password}.