---
title: "List all internal RADIUS servers"
method: GET
path: "/radius-servers/internal"
tags: ["Configuration - Authentication"]
---

# List all internal RADIUS servers

`GET /radius-servers/internal`

List all internal RADIUS servers configurations.

## Query parameters

- `page` integer
- `limit` integer

## Response `200`

OK

- PagedXiqInternalRadiusServer
  - `page` integer, required — The current page number
  - `count` integer, required — The element count of the current page
  - `total_pages` integer, required — The total page number based on request page size
  - `total_count` integer, required — The total element count
  - `data` XiqInternalRadiusServer[] — The data in the current page
    - `id` integer, required — The unique identifier
    - `create_time` string, date-time, required — The create time in UTC (ISO 8601 format)
    - `update_time` string, date-time, required — The last update time in UTC (ISO 8601 format)
    - `org_id` integer — The organization identifier, valid when enabling HIQ feature
    - `name` string, required — The internal RADIUS server name
    - `description` string — The internal RADIUS server description
    - `authentication_method_group` 'TLS_PEAP_TTLS_LEAP_MD5' | 'TLS_PEAP_TTLS_LEAP' | 'TLS_PEAP' | 'TLS_TTLS' | 'TLS' | 'LEAP', required — The authentication group
    - `default_authentication_method` 'TLS' | 'PEAP' | 'TTLS' | 'LEAP' | 'MD5', required — The default authentication method
    - `enable_verify_server_cert` boolean, required — Enable verify server cert or not
    - `server_key_password` string — password for server key
    - `enable_check_cert_common_name` boolean, required — Enable check cert common name or not
    - `enable_check_user_for_tls_auth` boolean, required — Enable check user for TLS auth or not
    - `enable_check_user_for_peap_auth` boolean — Enable check user for PEAP auth or not, for Active Directory as the external user directory only
    - `enable_check_user_for_ttls_auth` boolean — Enable check user for TTLS auth or not, for Active Directory as the external user directory only
    - `enable_authentication_server` boolean, required — Enable the RADIUS server as authentication or not
    - `enable_radius_accounting_settings` boolean, required — Enable the RADIUS server as accounting or not, must enable authentication server if want to enable accounting settings
    - `authentication_server_port` integer, required — Port for the authentication, must enable authentication. Max:65535, Min:1
    - `active_session_limit` integer — Active session limit, must enable accounting setting. Max:15, Min:0
    - `active_session_age_timeout` integer — Active session age timeout in seconds, must enable accounting setting. Max:300000000, Min:0
    - `external_user_directory` XiqExternalUserDirectory, required — The setting for external user directory, AD or LDAP
      - `ldap_retry_interval` integer, required — Retry the previously unresponsive primary server after the specified seconds
      - `local_check_interval` integer, required — Time to user local cache if none of the external servers are reachable in seconds
      - `remote_check_interval` integer, required — Try the next backup server after specified seconds
      - `enable_radius_server_credential_caching` boolean, required — Caching credentials allows for better performance and higher availability by reducing the dependence on RADIUS servers across high-latency WAN links.
      - `cache_lifetime` integer, required — Retain Cache for
      - `user_group_attribute` string, required — The user group attribute, use string such as: 'memberOf'
      - `external_user_directory_type` 'OPEN_LDAP' | 'ACTIVE_DIRECTORY', required — The external user directory type
      - `entries` XiqExternalUserDirectoryEntry[], required — The external user directory server entries
        - `default_server_id` integer, required — The default external user directory server id, could be active directory server id(get the id list from endpoint: '/ad-servers') or LDAP server id(get the id list from endpoint: '/ldap-servers') depends on the 'external_user_directory_type'
        - `server_role` 'PRIMARY' | 'BACKUP1' | 'BACKUP2' | 'BACKUP3', required — The server role, Primary or Backup
    - `ca_certificate_id` integer, required — The CA certificate ID
    - `server_certificate_id` integer, required — The Server certificate ID
    - `server_key_id` integer, required — The Server key ID
    - `device_ids` integer[], required — The list of device ID associated with the internal RADIUS server
    - `clients` XiqRadiusClient[] — The RADIUS clients of RADIUS proxy
      - `id` integer — The RADIUS client ID
      - `shared_secret` string — The shared secret of RADIUS client
      - `description` string — The RADIUS client description
      - `l3_address_profile_id` integer — The associate L3 address profile ID

---

[API](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api.md) · [All operations](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extremecloudiq/extremecloud-iq-api/versions/5ff7ab84e8e8/schema)