topic Re: Radius issues after GW upgrade to R82 in Firewall and Security Management

Radius issues after GW upgrade to R82

mva — Fri, 14 Mar 2025 10:34:12 GMT

Hello mates!

We've configured RADIUS authentication for Gaia on R81.10 GW. After migration to R82 (jhf 12) we'fe faced next issue - we can't login via RADIUS on Gaia portal of this GW, but it's still working in SSH connection. We've turned RADIUS on in priority settings and gave it priority . Moreover, we don't see any request logs on RAD server while portal auth, but from SSH login we observe succesfull logs.

Any ideas? Is it another one R82 issue?

Re: Radius issues after GW upgrade to R82

the_rock — Fri, 14 Mar 2025 11:48:47 GMT

You dont see any logs about the failure at all?

Andy

Re: Radius issues after GW upgrade to R82

mva — Fri, 14 Mar 2025 11:58:29 GMT

No logs about this attempts at all, both in SC and on RAD server. Messages file also doesn't contain anything which seems like errors about RADIUS

Re: Radius issues after GW upgrade to R82

the_rock — Fri, 14 Mar 2025 12:00:32 GMT

Did you do tcpdump on port 1812?

Andy

Re: Radius issues after GW upgrade to R82

mva — Fri, 14 Mar 2025 12:05:54 GMT

Not yet, we were trying to find out reason, why only Gaia portal doesen't work with RADIUS

Re: Radius issues after GW upgrade to R82

the_rock — Fri, 14 Mar 2025 12:07:35 GMT

Thats where I would start, with the captures, and see what gives.

Andy

Re: Radius issues after GW upgrade to R82

Timothy_Hall — Fri, 14 Mar 2025 13:44:34 GMT

No RADIUS errors in /var/log/secure when this is happening?

Wondering if this failure is due to the Blast RADIUS fixes being enabled now, what does show aaa radius-servers require-message-authenticator say?

Edit: Any special characters in the login name? sk183201: After an upgrade to R81.20 Jumbo Hotfix Accumulator Take 96 and higher, users with special characters in the username cannot login to Gaia Portal

Also there was a major update of the Gaia kernel from 3.10 to 4.10 so that may be related as well.