Extend disclaimer only timeout

Question

Hi,we have a VLAN on a 40F that is being provided through some 3rd party access points. We enabled the disclaimer portal for that VLAN for guest access. We don't want them to type in an E-Mail or provide guest accounts.The disclaimer portal works well but we need to extend the (idle) timeout to more than 300 seconds.Where can I do that? None of the settings seem to alter that value. I tried:config user setting > set auth-timeout Xconfig wireless-controller timers > set client-idle-timeout Xconfig system settings > set auth-timeout X In this article using a mail collection portal, it is somehow set to 10 days (864000) by defaultRetail environment guest access | FortiGate / FortiOS 7.6.0 | Fortinet Document Library But mine always looks like this:192.168.3.17        src_mac: 98:69:8a:XX:XX:XX        type: disclaimer, id: 14, duration: 368, idled: 210        expire: 90, allow-idle: 300        flag(1000): src_idle How can allow-idle be modified or set to a hard timeout? Thanks a lot

Duka · Accepted Answer

Hi,this can be solved with the following configuration: Create Dummy Userconfig user local edit "CaptivePortal" set type password set passwd-time *** set passwd ENC *** next end Create Group with the desired timeout (in this case 14 days of non-use)config user group edit "CaptivePortalUsers" set authtimeout 20160 set member "CaptivePortal" next end Activate captive portal on the interfaceconfig system interface edit "lan1" set vdom "root" set ip *** set allowaccess ping set type physical set alias "lan" set security-mode captive-portal set security-groups "CaptivePortalUsers" set device-identification enable set role lan set snmp-index 2 next end Customize the HTML page (System -> Replacment Messages -> Login Page) so that the values of the variables USERNAMEID and PASSWORDIT are predefined and hidden. Check withdiag firewall auth list ****, CaptivePortal src_mac: ****** type: fw, id: 0, duration: 553, idled: 3 expire: 1209597, allow-idle: 1209600 packets: in 11556 out 4997, bytes: in 10975870 out 1244385 user_id: 16777218 group_id: 2 group_name: CaptivePortalUsers Best RegradsPatrick

sjoshi · Answer

How can allow-idle be modified or set to a hard timeout? >> this can be changed under config user settings   https://docs.fortinet.com/document/fortigate/7.2.7/cli-reference/473620/config-user-setting

Sign up

Login with SSO

Login to the community

Login with SSO