How to Integrate NSX Manager with a RADIUS Server

Products

• VMware NSX

Issue/Introduction

This article addresses the question of how to integrate NSX Manager with a RADIUS server for user authentication

Environment

VMware NSX

Cause

NSX Manager not designed to be a RADIUS client and lacks a native feature to communicate directly with a RADIUS server for authentication.

Resolution

Since NSX Manager doesn't natively support RADIUS, the recommended approach is a workaround that uses VMware Workspace ONE Access as an intermediary. This method provides a robust solution by leveraging the advanced capabilities of a central identity hub, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA).

• The authentication flow follows this path NSX Manager → Workspace ONE Access → RADIUS Server.
• Configure RADIUS in Workspace ONE Access. Your first step is to set up the RADIUS server as an authentication method. For detailed instructions, see the official guide Configure RADIUS Authentication in Directories Management
• Connect NSX Manager to Workspace ONE Access. Next, in the NSX Manager UI, navigate to System > Users and Roles > Identity Providers and add Workspace ONE Access as your identity provider. For a full walkthrough, refer to Integration with VMware Identity Manager/Workspace ONE Access