Cisco switch and FortiAuthenticator RADIUS port 1645

[AEK]

Hello FortiAuthenticator admins

I try configure my Cisco switch C3750 to send RADIUS requests to 1812 but it doesn't keep it, the config remains sending on port 1645, I don't know why, probably old firmware, and upgrade is not an option.

Since this is not a Cisco forum I'll not ask how to force it to accept 1812, but how to configure my FortiAuthenticator 6.5.4 to listen to RADIUS request on both 1812 and 1645 at the same time (1812 must remain for other devices).

[ozkanaltas]

Hello @AEK ,

You can't achieve this request. Because FortiAuthenticator supports listen just one port for Radius service. I faced this issue before and I used a workaround solution for that. I configured the dnat object on Firewall. After that, I redirected all 1645 requests to this DNAT IP.

[AEK]

Indeed that a good workaround. Thanks Ozkan!

[AEK]

Found the issue, it was me! I was wrong in Cisco command to declare a RADIUS server. Just a noob's mistake.