Follow the steps below to add a DualShield RADIUS server in Palo Alto



Log in to the Palo Alto administrative interface. Click the Device tab







Navigate to Server Profiles, then RADIUS







Click the Add button to add a new RADIUS server profile.







In the server profile, enter the following information:

OptionValue
Profile NameEnter "DualShield RADIUS" (or any descriptive name that you like)
TimeoutIncrease to at least 30 (60 recommended if using OOBA or push authentication).
Authentication ProtocolChange the "" drop-down option to PAP.








In the "Servers" section, click the Add button to add a RADIUS server, and enter the following information:

OptionValue
Name

Type in DualShield RADIUS or any name you prefer.

If you have multiple DualShield RADIUS servers then you can add all of them in the list

RADIUS ServerThe hostname or IP address of the DualShield RADIUS server to be added
Secret The shared secret between Palo Alto and the DualShield RADIUS server

Port

1812 (or the DualShield RADIUS authenticaiton port that you changed at installation).




 






Click OK to save the new RADIUS server profile.