Device Configuration : Configure : Authentication : Servers : Add an External Server : Add RADIUS Server
Add RADIUS Server
This page describes how to add a RADIUS server.
1. Go to Device Configuration > Configure > Authentication > Authentication Server and click Add.
2. Select the server type RADIUS Server.
3. Enter values for the following settings:
Server Name
Enter a descriptive name for the RADIUS server.
Server IP
Enter an IP address for the RADIUS server.
Authentication Port
Enter the authentication port of the RADIUS server. By default, this is port 1812.
Enable Accounting
Enable accounting on RADIUS server.
Sophos Firewall OS sends the following information to the RADIUS server as soon as the user logs in:
Accounting start request
User login time
Sophos Firewall OS sends the following information to the RADIUS server the moment the user logs out:
Accounting stop request
User logout time
* Supported client types: Windows Client, HTTP Client, Linux Client, Android, iOS, iOS HTTP Client, Android HTTP Client, API Client.
* The accounting stop message is not sent to the RADIUS server when Sophos Firewall OS shuts down or reboots.
Accounting Port
(only if Enable Accounting is active)
Enter a RADIUS port number through which the Sophos Firewall OS can communicate with RADIUS.
Shared Secret
Enter the shared secret which is a text string that serves as a password between a RADIUS client and a RADIUS server.
Group Name Attribute
Enter the alias for the configured group name which is displayed to the user.
4. Click Test Connection to check the connectivity between the RADIUS server and the Sophos XG Firewall. It also validates RADIUS server user credentials.
5. Click Save.
The RADIUS server is now available and appears in the Authentication Server list.