Enterprise Licenses Only#

The Radius plugin lets you validate authentication against a Radius server. This plugin is only enabled for Enterprise users. You can set the authentication type to use, the host information, and port information for the authentication process. The RADIUS protocol itself and related terms are well documented (external link), outside the purpose of this wiki.

With the RADIUS plugin enabled the CrushFTP Server acts as the Network Access Server(NAS) in a RADIUS infrastructure, with HTTPS, SFTP, FTP, etc. endpoints on the front, passing authentication through to a RADIUS server backend by means of the plugin.
In the upper part of the config panel the Connection Parameters are set:

term

definition text

Authenticator Type

dropdown selector to choose the RADIUS authentication type (PAP, CHAP, etc.)

Server Item

dropdown list selector allows binding the plugin to specific server items (FTP, SFTP, etc)

Server Host and Port

the RADIUS server IP and Authentication port (IANA default 1812)

NAS IP

sets the NAS-IP-Address RADIUS attribute. If left empty, the local private address of the server is used.

NAS Port

sets the NAS-Port RADIUS attribute

IMPORTANT:
#

Retries

Timeout (s)

Shared Secret: