Captive portal attached to an interface but after authentication browser go loop

Question

Hi all,

I have attached a Captive Portal to my lan interface with a local group authentication.

From a pc client, when I open the browser for digit any website, the Fortinet login appear (correct)

I insert my username and password (correct)

Fortigate accept my credentials because I can see my user from "Monitor" -> "Firewall User Monitor" (correct)

the problem is now because in address bar of the browser, I can see a continuous loop of the address:

http://172.16.0.X/fgtauth?092321232323cdw2

http://172.16.0.X/fgtauth?021372123435ed82

http://172.16.0.X/fgtauth?010032723341c889

http://172.16.0.X/fgtauth?0933423487fd0fc44

and the website that I asked don't open.

Also if I open another tab in Chrome, I can see the same loop with the magic token that change continually.

Can I solve or debug this big problem?

I haven't found any documentation about diagnostic of Captive Portal feature.

thanks!

Andrea

thende · Accepted Answer

Hi guys.

I've fixed it with the following:

config user setting set auth-src-mac disable end

I think that by default Fortigate will also check on the mac address of the client trying to authenticate and if the client is behind a router before reaching the firewall the loop is the behavior we'll see. That setting above disables it.

garylau · Answer

After upgraded to FortiOSv6.0 also face your problem.

My environment is Notebook>Wifi AP>FW

User after login success in (IE,Chrome,Firefox), the number at end of link path change continuous.

[link]http://172.16.0.X/fgtauth?[/link]040b0181b0ea850a

[link]http://172.16.0.X/fgtauth?[/link]xxxxxxxxxxxxxxxxx

Is there any changed in FortiOSv6.0? or bugs?

Sign up

Login with SSO

Login to the community

Login with SSO