Palo Alto RADIUS Accounting Configuration Steps

Table of Contents

Navigate To

Access Point Integrations: RADIUS and Onboarding SSID Setups

MDM / EMMs Integrations: Certificate Auto-Enrollment API Gateway

Identity Provider Integrations: Certificate Enrollment

Identity Provider Integrations: RADIUS Authentication

RADIUS Integrations Microsoft NPS Cisco ISE Extreme Control Aruba Clearpass Radiator

Dynamic RADIUS with IdPs Azure AD Okta

VPN Integrations: RADIUS Setups

Introduction

This document explains the steps required to test RADIUS Accounting events forwarded to Palo Alto firewall.

To forward RADIUS events to Palo Alto firewall port forwarding should be configured on the ISP router.

To configurate port forwarding in the ISP router, follow the given steps.

The Palo Alto firewall helps SSL encrypted traffic and applications Perform the following configurations to receive RADIUS accounting events.

Navigate to Network > Network Profiles > Interface Management > Management.
Add the CENT NAT IP as shown in the following image.

Login to the JoinNow Management Portal.
Go to External Connections > Configuration.
Click the Add External Connection button.
In the Name field, enter a name for the connection.
In the Display Description field, enter a suitable description for the connection.
From the Type drop down list, select Palo Alto.
Click Save. The page reloads and the Configuration tab is displayed.
Select the Configuration tab:
1. In the Firewall URL field, enter the server URL.
2. In the Username and Password fields, enter the credentials.
3. Click the Validate button to verify the credentials and the connection.
Click Update.

Here is a sample of RADIUS Accounting events for Login and Logout sent to the Palo Alto Firewall for the above configurations.