Add RADIUS authentication server

Last published : Sep 30, 2026
  1. Navigate to Settings > Authentication.
  2. Select the RADIUS tab and then click Add.
    On the Create RADIUS Server page, specify the following parameters:
    1. Name – Specify a RADIUS server name
    2. Server Name / IP address – Specify the RADIUS server IP address
    3. Port – Specify the port number on which the RADIUS server is hosted. The default port is 1812
    4. Time-out (seconds) – Time in seconds for which the NetScaler® ADM system waits for a response from the RADIUS server
    5. Secret Key – Specify the RADIUS secret key for authentication
    6. Confirm Secret Key – Specify the key again for confirmation
      RADIUS
      Under Details, specify the following parameters:
      1. NAS ID – Specify the ID to send the identifier to RADIUS server
      2. Group Vendor Identifier – Specify the vendor ID for using RADIUS group extraction
      3. Group Prefix - A string that precedes group names within a RADIUS attribute for RADIUS group extraction
      4. Group Attribute Type – Specify the attribute type for RADIUS group extraction
      5. Group Separator – A string that delimits group names within a RADIUS attribute for RADIUS group extraction
      6. IP Address Vendor Identifier – Vendor ID in RADIUS denotes the intranet IP. A value of 0 denotes that the attribute is not vendor encoded
      7. Password Vendor Identifier – Vendor ID password in RADIUS response to extract the user password
      8. IP Address Attribute Type – Remote IP address attribute for the RADIUS to respond
      9. Password Attribute Type – The password attribute for the RADIUS to respond
      10. Password encoding – Select pap, chap, mschapv1, or mschapv2 from the list. This denotes how passwords should be encoded in the RADIUS packets traveling from the system to the RADIUS server.
      11. Default Authentication Group – Default group to choose when the authentication succeeds in addition to extracted groups
        Select Accounting if you want the appliance to log audit information with RADIUS server.
  3. Click Create.
    The RADIUS server is now configured.
  4. Enable the external authentication servers.
    For more information about enabling external authentication servers, see Enable external authentication servers and fallback options.
Related information
Authentication