Updated Date: 07/07/2026
Creating a virtual server for RADIUS
You should have an access profile configured.
You create a virtual server to handle traffic connecting to applications being authenticated using RADIUS.
Note: An AAA server does not load-balance. Do not select a local traffic pool for this virtual server.
-
On the Main tab, click Local Traffic > Virtual Servers.
The Virtual Server List screen opens.
-
Click Create.
The New Virtual Server screen opens.
-
In the Name field, type a unique name for the virtual server, such as
ldap_proxyorea-ldap-vip. -
For Source Address, select Host and type the address, for example
0.0.0.0/0. -
For the Destination Address/Mask setting, confirm that the Host button is selected, and type the IP address in CIDR format (address/prefix).
Note: The various virtual servers being used for ephemeral authentication (LDAP, LDAPS, and/or RADIUS) can all have the same Destination Address as long as they use different service ports.
-
In the Service Port field, select port number 1812.
-
For Protocol, select UDP.
-
For Protocol Profile (Client), select a protocol profile (such as udp).
-
For Source Address Translation, select Auto Map.
-
In the Ephemeral Authentication section, for Access Configuration, select the Access Configuration you created.
-
For RADIUS Authentication Configuration, select the Ephemeral Authentication > RADIUS Authentication Configuration > Profile you created.
-
Optionally, under Resources, for Default Pool, select the external RADIUS server to be used for bypass users.
If you want certain users to bypass ephemeral authentication, the RADIUS virtual server works as a RADIUS proxy. In that case, the backend devices authenticate directly with an external RADIUS server.
-
Click Finished.
The virtual server is created with the Ephemeral Access Configuration and the RADIUS Authentication Configuration associated with it.