Troubleshooting Tip: Configure the captive portal using FortiGuest with FortiGate for Data restriction

1. Create a radius server:

Note:

NAS-IP is mandatory.

Select 'OK' and Enable Radius Accounting from CLI of FortiGate and edit the below parameters with values:

set acct-interim-interval 60

set radius-coa enable

    config accounting-server

        edit xx

2. Create SSID with the below fields:

• Captive Portal: Enabled.
• Portal type: Authentication
• Authentication portal: External
• Enter the Captive portal URL from FORTIGUEST.
• Under user group select FORTIGUEST radius server.
• Exempt destinations/services =è Enter FortiGuest FQDN/IP and DNS.
• Redirect after Captive Portal: Enter success URL from FortiGuest

3. Login into FortiGuest GUI using admin credentials:

• Add FortiGate as a radius client, under Devices -> Radius Clients and Select NEW.

Select Attributes:

• Create a portal and portal Rule under Guest portal -> Portal and select 'Create New'. Guest portal -> Portal Rules.
• Create a Usage Profile under Network Access policies -> Usage profile and select 'Create New'. Select Data usage and Enter the details.

• Map the Usage profile.