Register DualShield RADIUS Server

  1. Log in to the WebAdmin interface of Sophos XG
  2. Under "Configure" Select "Authentication" from the menu on the left
  3. Select “Servers” Tab




4. Click "Add"

5. Configure as follows:

OptionValue
Server Name:Radius server
Server Name:Friendly name
Server IP:Radius Server IP
Authentication Port:1812
Time-out:30
Accounting port: 1813
Shared Secret:This must match the one you specified under DualShield configuration
Domain name:Enter your domain name
Group name attribute:memberof


6. Click "Test connection" and if successful click "Save"

7. Click on the "Services" tab


8. Enable and Apply the DualShield Radius server under User Portal and VPN and SSL VPN  authentication methods 

9.  For SSL VPN, please make sure the option "Set authentication method for SSL VPN" is enabled.

10.  Once the user authenticates a user account is created on Sophos XG itself.  You can view them under the "Users" tab.

11.  Once created you need to add a Name and Email for the user and set the Policies



  • No labels