To add an external RADIUS server, you require the IP address, authentication port
number, and the shared secret for the RADIUS server.
This task is part of the network policy configuration workflow. Use this task to configure a RADIUS server for a RADIUS server group, as part of a network
policy.
-
On the Configure RADIUS
Servers page, select EXTERNAL RADIUS
SERVER.
-
Select an existing server, or select
.
-
Type a
Name for the server.
- Optional:
Type a Description for
the server.
-
Select the IP/Host Name for
the server.
If you do not see the IP
address that you need, select

to define a new one (IPv4 or IPv6).
If the address object is a host
name, ensure that the devices can resolve it to an IP address. If you
configure a domain name for the devices, or if the devices dynamically
receive a domain name through DHCP, and the RADIUS server belongs to the
same domain, the RADIUS server name can be just the host name without the
domain name. If the RADIUS server belongs to a different domain, the address
object must be the fully qualified domain name (FQDN): the host name + the
domain name.
-
For Server Type,
choose the RADIUS server role:
- Authentication: As an authentication server, the RADIUS
service requests that the client device demonstrate its identity.
- Port: Set
the RADIUS authentication port.
- Accounting: As an accounting server, the RADIUS service
tracks client-server session details.
- Port: Set
the RADIUS accounting port number.
-
Type the Shared
Secret for authenticating communications with the RADIUS
server.
- Optional:
Select Show Password.
-
Select SAVE EXTERNAL
RADIUS.
Finish configuring the RADIUS server group.