> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/web-interface/administration/configuration/server-settings/security/multifactor/radius.md).

# RADIUS

To enable this MFA method for your users, go to ***Administration – Server settings – Multifactor*** and check the ***RADIUS*** MFA option. A ***Configure*** button will appear next to the option.

![](https://cdnweb.devolutions.net/docs/docs_en_server_ServerOp2099.png)

{% hint style="info" %}
See [Multifactor](https://docs.devolutions.net/server/web-interface/administration/configuration/server-settings/security/two-factor/) for more information on MFA configuration.
{% endhint %}

See in the tables below what each setting does in each tab.

### General

![](https://cdnweb.devolutions.net/docs/docs_en_server_ServerOp2098.png)

<table><thead><tr><th width="251">Option</th><th>Description</th></tr></thead><tbody><tr><td>RADIUS client port</td><td>UDP port the Devolutions Server machine listens to for the RADIUS server response.</td></tr><tr><td>RADIUS server port</td><td>UDP port the Devolutions Server machine sends the authentication request to the RADIUS server.</td></tr><tr><td>Timeout delay (sec)</td><td>Waiting time before clearing a communication error.</td></tr><tr><td>RADIUS server</td><td>URL or IP address of the RADIUS server.</td></tr><tr><td>RADIUS shared secret</td><td>Secret required to communicate with the RADIUS server.</td></tr><tr><td>Test</td><td>Test communication with the RADIUS server.<br><br>Clicking on the button gives you access to the <em><strong>Username</strong></em> and <em><strong>Passcode</strong></em> fields as well as the <em><strong>Check</strong></em> button.</td></tr><tr><td>Username</td><td>Username that can authenticate to the RADIUS server.</td></tr><tr><td>Passcode</td><td>Code or password associated with the username to authenticate to the RADIUS server.</td></tr><tr><td>Check</td><td>Test the <em><strong>Username</strong></em> and <em><strong>Passcode</strong></em>.</td></tr><tr><td>Enable RADIUS NAS-Identifier</td><td>Indicates that the server will send a Network Access Server (NAS) credential in its RADIUS request.</td></tr><tr><td>RADIUS NAS-Identifier</td><td>The value sent as the NAS credential. The NAS Identifier specifies a character string that is the name of the NAS. You can use pattern matching syntax to specify NAS names.</td></tr><tr><td>Strip domain from username</td><td>Removes the domain name from the username sent by Devolutions Server to the RADIUS server.</td></tr></tbody></table>

### Failover

![](https://cdnweb.devolutions.net/docs/docs_en_server_ServerOp2097.png)

{% hint style="info" %}
Note that Devolutions Server will always listen to the same port. The failover configuration does not include a client port. Therefore, the RADIUS configuration will be used as the client port.
{% endhint %}

<table><thead><tr><th width="257">Option</th><th>Description</th></tr></thead><tbody><tr><td>Enable failover RADIUS server</td><td>Enable the failover RADIUS server.</td></tr><tr><td>Failover RADIUS Server Port</td><td>UDP port the Devolutions Server machine sends the authentication request to the failover RADIUS server.</td></tr><tr><td>Failover RADIUS server</td><td>URL or IP address of the failover RADIUS server.</td></tr><tr><td>Failover RADIUS server secret</td><td>Secret required to communicate with the failover RADIUS server.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/server/web-interface/administration/configuration/server-settings/security/multifactor/radius.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.