[aqw789]

- Define a Radius server - Object tree --> Servers / Radius
(Name: Enter the host name, Host:Select Radius server, Enter Shared secret to authenticate with the Radius server)

- Define the users in the FW user DB or use external user profiles.

- Create a user group for the Radius users and add them to this group. If you are using external user profiles, they should also be added to this group.

!!! Encryption tab: This should be configured for SecureClient and IKE

- authentication tab: Select the Radius server or group

- Authentication tab: Allow Radius authentication on the gateway.

- Authentication tab of Gateway:You need to add the Radius user groups to the Policy server group if you use a policy server.

- Remote Access Community: Add the Radius group to the user groups in the Remote Access Community.
!!! Don't forget your Remote Access rule. Create it or if it's already there upload the policy to the enforcement module to activate your changes.

HTH.