Technical Tip: How to limit number of users created for guest group

Description

This article describes how to limit number of users created for the guest group.

Scope:

FortiGate.

Solution

From the CLI:

Execute the following commands to configure the maximum accounts and limit the number of users created for a specific guest group.

config user group
    edit <guest_group_name>
        set max-accounts <integer value>
    end

If max accounts is set to 0, there will be no limit.

config user group
    edit <guest_group_name>
        set max-accounts 0
    end

Limiting the maximum accounts from GUI.

 

If maximum accounts is disabled from GUI, then there will be no limitation.

 

 

 

Note:

Guest user account creation remains constrained by the internal .user.group:guest table size, which is a hardcoded system limit based on platform and FortiOS version.
When the table limit is reached, additional guest user creation fails with an 'undefined' error in the GUI and a 'Too many entries in table of .user.group.guest' error in the CLI.

 

 

Related articles:

Maximum Values Table 

Technical Tip: FortiGate maximum values table