WatchGuard SSLVPN with Radius

tshemon — Thu, 11 Nov 2021 15:07:14 GMT

So setup WatchGuard Radius per Duo documentation.
Setup AD User group VPN and added to NPS and also added to VPN group for SSLVPN on Firebox.
When I go to authenticate with user get an error on Server “A RADIUS message was received from the invalid RADIUS client IP address 192.168.0.1.” (192.168.0.1 is WatchGuard)
Proxy Config
[radius_client]
host=127.0.0.1
secret=XXXXXXXXXXXXXXXX
pass_through_all=true
[radius_server_auto]
ikey=XXXXXXXXXXXXXXXXXXXX
■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■
api_host=■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■
radius_ip_1=192.168.0.1
radius_secret_1=radiuspassword
client=radius_client
port=1645
failmode=safe
pass_through_all=true

NPS is on the same server as proxy, Also tried using port 1812.
Both running on Windows Server 2019

Have a Case open with Duo but it’s been a 24hrs and still sitting as pending.
Thanks,
Tom

Re: WatchGuard SSLVPN with Radius

DuoKristina — Mon, 15 Nov 2021 13:57:30 GMT

It looks like you solved this by updating the port in this thread: WatchGuard SSLVPN with Radius.

topic Re: WatchGuard SSLVPN with Radius in Managing Users

WatchGuard SSLVPN with Radius

Re: WatchGuard SSLVPN with Radius