RADIUS Authentication Troubleshooting and Checks

RADIUS Authentication Troubleshooting and Checks

Description

If your RADIUS authentication fails and you're unable to log onto the WiFi network, it could be possibly be due to the below reasons:

Reason 1

You may notice that the RADIUS authentication fails even if the configuration is complete. This could be due to mismatch in the RADIUS server details copied from Server Information tab in Zoho One.

Solution

Recheck and ensure that the below details are copied correctly from the Server Information tab in Zoho One and pasted in the RADIUS profile created in the access point.
  1. Host name / Server address
    1. Copy either IP address or domain name (if your access point supports domain name for RADIUS server URL field) correctly from Zoho One.
    2. Paste it in your access point configuration without modification.
  2. IP address type
    1. It is recommended that the IP address used is Static.
    2. If your organization switches to a new IP address,
    3. Update the IP address in the RADIUS client info in Zoho One.
    4. Or add all valid IP addresses in the client info section by clicking +, so that RADIUS server can authenticate all requests from the listed IP addresses.
  3. Port number
    1. Copy the Port number from the Server Information tab and paste it into the corresponding field in the access point.
  4. Shared secret
    1. Copy the shared secret from the Server Information page and paste it (without any extra spaces or characters) into the corresponding field on your access point.
  5. Authentication type
    1. Select EAP-TTLS(PAP) for credential-based authentication.

Reason 2

Your authentication requests do not reach the RADIUS server because inbound or outbound UDP traffic is blocked by Firewall.

Solution

  1. Ensure that the inbound and outbound UDP calls are allowed and not blocked.
  2. Whitelist the RADIUS server URL and its IP addresses mentioned in the Server Information tab, so that the authentication requests from the user's device reaches Zoho One's RADIUS servers.

Notes
If you want the configuration to be done via HTTPS due to organization's security policies, contact our support at support@zohoone.com.