Skip to main content
lyndon_liu
New Member
December 29, 2022
Question

Can fortiauthenticator itself act as a radius accounting proxy source?

  • December 29, 2022
  • 3 replies
  • 1593 views

We need the fac to works as a 802.1x server for hundreds of switchs,and then forward the radius accouting messages to dozens of the-third-party firewalls for SSO.

The fac can proxy the radius accouting messages  from swithes to destinations.However it's to complicated to create hundreds switches as proxy sources,and it's nearly impossible to set these source to dozens destionations.

Can fac itself act as a radius accounting proxy source like windows NPS?

I failed to config interface ip of fac or 127.0.0.1/localhost as the source ip.

3 replies

gfleming
Staff
Staff
December 29, 2022

https://docs.fortinet.com/document/fortiauthenticator/6.4.6/administration-guide/467685/radius-accounting-proxy

 

Does that help? Seems like you do need to manually define each source/destination...

lyndon_liu
New Member
December 30, 2022

Thanks for your reply.

There're too many sources(switches) and destinations.There should be a way to define all sources to each destination.

RodrigoAndrade
New Member
July 20, 2023

Did you get any solution to this problem? I'm the same place right now