---
title: "Get internal RADIUS server by ID"
method: GET
path: "/radius-servers/internal/{id}"
tags: ["Configuration - Authentication"]
---

# Get internal RADIUS server by ID

`GET /radius-servers/internal/{id}`

Get detailed configuration for internal RADIUS server by ID.

## Path parameters

- `id` integer, required

## Response `200`

OK

- XiqInternalRadiusServer — The configuration of internal RADIUS server object
  - `id` integer, required — The unique identifier
  - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
  - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
  - `org_id` integer — The organization identifier, valid when enabling HIQ feature
  - `name` string, required — The internal RADIUS server name
  - `description` string — The internal RADIUS server description
  - `authentication_method_group` 'TLS_PEAP_TTLS_LEAP_MD5' | 'TLS_PEAP_TTLS_LEAP' | 'TLS_PEAP' | 'TLS_TTLS' | 'TLS' | 'LEAP', required — The authentication group
  - `default_authentication_method` 'TLS' | 'PEAP' | 'TTLS' | 'LEAP' | 'MD5', required — The default authentication method
  - `enable_verify_server_cert` boolean, required — Enable verify server cert or not
  - `server_key_password` string — password for server key
  - `enable_check_cert_common_name` boolean, required — Enable check cert common name or not
  - `enable_check_user_for_tls_auth` boolean, required — Enable check user for TLS auth or not
  - `enable_check_user_for_peap_auth` boolean — Enable check user for PEAP auth or not, for Active Directory as the external user directory only
  - `enable_check_user_for_ttls_auth` boolean — Enable check user for TTLS auth or not, for Active Directory as the external user directory only
  - `enable_authentication_server` boolean, required — Enable the RADIUS server as authentication or not
  - `enable_radius_accounting_settings` boolean, required — Enable the RADIUS server as accounting or not, must enable authentication server if want to enable accounting settings
  - `authentication_server_port` integer, required — Port for the authentication, must enable authentication. Max:65535, Min:1
  - `active_session_limit` integer — Active session limit, must enable accounting setting. Max:15, Min:0
  - `active_session_age_timeout` integer — Active session age timeout in seconds, must enable accounting setting. Max:300000000, Min:0
  - `external_user_directory` XiqExternalUserDirectory, required — The setting for external user directory, AD or LDAP
    - `ldap_retry_interval` integer, required — Retry the previously unresponsive primary server after the specified seconds
    - `local_check_interval` integer, required — Time to user local cache if none of the external servers are reachable in seconds
    - `remote_check_interval` integer, required — Try the next backup server after specified seconds
    - `enable_radius_server_credential_caching` boolean, required — Caching credentials allows for better performance and higher availability by reducing the dependence on RADIUS servers across high-latency WAN links.
    - `cache_lifetime` integer, required — Retain Cache for
    - `user_group_attribute` string, required — The user group attribute, use string such as: 'memberOf'
    - `external_user_directory_type` 'OPEN_LDAP' | 'ACTIVE_DIRECTORY', required — The external user directory type
    - `entries` XiqExternalUserDirectoryEntry[], required — The external user directory server entries
      - `default_server_id` integer, required — The default external user directory server id, could be active directory server id(get the id list from endpoint: '/ad-servers') or LDAP server id(get the id list from endpoint: '/ldap-servers') depends on the 'external_user_directory_type'
      - `server_role` 'PRIMARY' | 'BACKUP1' | 'BACKUP2' | 'BACKUP3', required — The server role, Primary or Backup
  - `ca_certificate_id` integer, required — The CA certificate ID
  - `server_certificate_id` integer, required — The Server certificate ID
  - `server_key_id` integer, required — The Server key ID
  - `device_ids` integer[], required — The list of device ID associated with the internal RADIUS server
  - `clients` XiqRadiusClient[] — The RADIUS clients of RADIUS proxy
    - `id` integer — The RADIUS client ID
    - `shared_secret` string — The shared secret of RADIUS client
    - `description` string — The RADIUS client description
    - `l3_address_profile_id` integer — The associate L3 address profile ID

---

[API](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api.md) · [All operations](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extremecloudiq/extremecloud-iq-api/versions/5ff7ab84e8e8/schema)