RADIUS Authentication Failing
17120
Created On 10/16/19 20:23 PM - Last Modified 04/27/20 19:15 PM
Symptom
- Authentication failure when trying to login
- Error message "No service source route is set" seen in authd.log
> tail follow yes mp-log authd.log Egress: No service source route is set, might use destination source route if configured Authentication to RADIUS server at 10.10.10.100:1645 for user "user"
Environment
- PA-VM-300
- PAN-OS
- RADIUS Authentication
- Using Dataplane interface for management
Cause
- By default RADIUS authentication uses the MGT interface
Resolution
- Change the Service Route for RADIUS authentication from Default to the interface used for management.
- Device > Setup > Services tab
- Under Services Features select "Service Route Configuration"
- Click Customize
- Click RADIUS
- Select Source Interface used for Management (Source Address should auto-populate)
- Click OK twice.
- Commit
Additional Information
- Creating a Service Route to use a dataplane interface