Home
Configuring NAS devices for RADIUS access
Configure VPNs and other devices to work with Portnox Cloud
In this topic, you will learn how to configure a generic VPN device to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections. You can use a similar configuration for other types of NAS devices such as firewalls.

Configuring NAS devices for RADIUS access
- Configure Ethernet devices to work with Portnox Cloud
  In this collection of documents, you will find specific instructions for configuring Ethernet-based NAS devices to access the Portnox™ Cloud RADIUS servers and provide AAA services.
- Configure wireless devices to work with Portnox Cloud
  In this collection of documents, you will find specific instructions for configuring wireless NAS devices to access the Portnox™ Cloud RADIUS servers and provide AAA services.
- Configure wireless captive portals to work with Portnox Cloud
  In this collection of documents, you will find specific instructions for configuring captive portals on wireless NAS devices to work with the Portnox™ Cloud guest network.
- Configure VPNs and other devices to work with Portnox Cloud
  In this topic, you will learn how to configure a generic VPN device to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections. You can use a similar configuration for other types of NAS devices such as firewalls.
  - Meraki
    In this topic, you will learn how to configure the Cisco Meraki Security Appliance to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.
  - OpenVPN
    In this topic, you will set up the OpenVPN Access Server to use the Portnox Cloud RADIUS servers for authentication.
  - WatchGuard
    In this topic, you will learn how to configure WatchGuard Fireware Mobile VPN to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.
  - Fortinet
    In this topic, you will learn how to configure Fortinet FortiGate to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.
  - Windows Server
    In this topic, you will set up Remote Access on a Windows Server to use the Portnox Cloud RADIUS servers for authentication with the Active Directory domain.
  - Check Point
    In this topic, you will learn how to configure the Check Point Smart Console to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.
  - Palo Alto
    In this topic, you will learn how to configure Palo Alto GlobalProtect to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.
  - Cisco
    In this topic, you will learn how to configure Cisco ASA to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections.

Configure VPNs and other devices to work with Portnox Cloud

In this topic, you will learn how to configure a generic VPN device to work together with Portnox™ Cloud and 802.1X RADIUS authentication for VPN connections. You can use a similar configuration for other types of NAS devices such as firewalls.

Important: The instructions for setting up third-party devices may change when the manufacturers update their firmware or release new models. To get the most accurate and current configuration guidance, please refer to the documentation provided by the manufacturer.

If your manufacturer or device is not listed in the left-hand side menu, here are general instructions how to configure most VPN solutions for 802.1X with Portnox Cloud RADIUS servers.

In the VPN web interface, navigate to the RADIUS server configuration section.

Refer to your solution’s manual for exact steps to navigate to the RADIUS server configuration section.
Configure the RADIUS server settings.

Enter the IP address, ports, and shared secret as configured when you created the cloud RADIUS servers.

Note: In some solutions, you may not need to provide the accounting port, and in some solutions, you may be able to provide more than one RADIUS server, including the local RADIUS server, if required.
Set the RADIUS timeout to 30 seconds or more.
If the solution does not allow you to set the timeout to 30 seconds, set it to the maximum allowed value.
Configure VPN-specific settings.
Here are some other options that you may come across when configuring the VPN.
- Configure client authentication to use the MS-CHAP v2 protocol.
- Select the VPN type (e.g., L2TP, SSL).
- Select the virtual IP address pool for the VPN clients.
- Configure IPSec settings with pre-shared keys and encryption methods.
- Configure authentication profiles for VPN access.
- Create and configure user groups and associate them with RADIUS servers.
- Configure connection profiles with appropriate authentication and access settings.
- Set authentication overrides to streamline user access.