5.6. RADIUS server configuration

At External Services -> RADIUS Servers the administrator can configure RADIUS servers to which privacyIDEA can forward authentication requests.

A RADIUS server definition has a unique Identifier, the Server (host name or IP address) and Port (default 1812), the shared Secret, the Dictionary file on the privacyIDEA server (default /etc/privacyidea/dictionary), the Timeout per attempt in seconds (default 5), the number of Retries (default 3), a Description, and Require Message-Authenticator.

../_images/radius-server-config.png

These RADIUS servers can be used with RADIUS tokens and in the Passthru Policy.

Note

This is meant for outgoing RADIUS requests, not for incoming RADIUS requests! To receive RADIUS requests you need to install the privacyIDEA FreeRADIUS plugin.

../_images/radius-server-chain.png

privacyIDEA can receive incoming RADIUS requests and send outgoing RADIUS requests.