Register DualShield RADIUS Server
- Log in to the WebAdmin interface of Sophos XG
- Under "Configure" Select "Authentication" from the menu on the left
Select “Servers” Tab
4. Click "Add"
5. Configure as follows:
Option | Value |
---|---|
Server Name: | Radius server |
Server Name: | Friendly name |
Server IP: | Radius Server IP |
Authentication Port: | 1812 |
Time-out: | 30 |
Accounting port: | 1813 |
Shared Secret: | This must match the one you specified under DualShield configuration |
Domain name: | Enter your domain name |
Group name attribute: | memberof |
6. Click "Test connection" and if successful click "Save"
7. Click on the "Services" tab
8. Enable and Apply the DualShield Radius server under User Portal and VPN and SSL VPN authentication methods
9. For SSL VPN, please make sure the option "Set authentication method for SSL VPN" is enabled.
10. Once the user authenticates a user account is created on Sophos XG itself. You can view them under the "Users" tab.
11. Once created you need to add a Name and Email for the user and set the Policies