Skip to main content
yeowkm99
New Member
January 20, 2022
Solved

Change VPN users

  • January 20, 2022
  • 1 reply
  • 3421 views

i have some local VPN users in my fortigate firewall.

We need to change them to radius authentication, is there any way to change in CLI instead of re-creating them in GUI ?

 

edit "user"
set type password
set two-factor fortitoken
set fortitoken "FTKM9E3E"
set email-to "email-address"
set passwd-time 2021-09-21 11:18:52
set passwd ENC password 

Best answer by Debbie_FTNT

Hi :).

You could make the following changes:

1. Add a RADIUS server to your FortiGate under Users & Authentication > RADIUS Server

2. Change your users to type radius:

#config user local
#edit <user>

#set type radius

#set radius <radius server>

#next

That way credentials would be checked against RADIUS, but everything else (token, group memberships, applicable policies etc) would be on the FortiGate.

 

Hope that helps!

1 reply

Debbie_FTNT
Staff & Editor
Staff & Editor
January 20, 2022

Hi :).

You could make the following changes:

1. Add a RADIUS server to your FortiGate under Users & Authentication > RADIUS Server

2. Change your users to type radius:

#config user local
#edit <user>

#set type radius

#set radius <radius server>

#next

That way credentials would be checked against RADIUS, but everything else (token, group memberships, applicable policies etc) would be on the FortiGate.

 

Hope that helps!

yeowkm99
yeowkm99Author
New Member
January 20, 2022

will try that out.

we already have a radius server in our network.

Debbie_FTNT
Staff & Editor
Staff & Editor
January 20, 2022

Great, let me know how it goes :).