Skip to main content
alexyamil
New Member
March 8, 2016
Question

FortiAP, RSSO & NPS Windows Server 2012 Configuration Problem (SOLVED)

  • March 8, 2016
  • 1 reply
  • 8445 views

Hi, I’ve been trying to configure my Wireless Network to authenticate through the NPS to get policy based access.I can connect to the WiFi and my users appears on the wifi clients but NOT on the firewall monitor. Here's a detailed view of what i configured on both sides. On the fortigate:Configured Radius Server pointing to my Windows ServerConfigured the FortiAP pointing to my Radius Server Forti ConfigurationConfigured the RSSO Group with the class DOMAIN On the Windows Server: 

[ul]Radius Clients & Server[ul]Radius Clients[ul]FortiAP[ul]Device IP, SharedSecret[/ul]FortiGate[ul]Device IP, SharedSecret[/ul][/ul][/ul]Remote RADIUS Server Groups[ul]Fortigate[ul]IP, Shared Secret, unchecked Use the same shared…[/ul][/ul]Policies[ul][ul]Connection Request Policies“NEW”[ul]Day and time restriction is explicit 24/7Settings:[ul]Accounting Forwarding to the fortigate, Authenticate on this server[/ul][/ul][/ul]Network Policies[ul]“New”[ul]Conditions[ul]Windows Group -> “my domain users”, Nas Port Type -> Wireless - IEEE 802.11, [/ul]Constrains[ul]Authentication Method  EAP[/ul]Settings [ul]RADIUS attributes[ul]Class -> DOMAIN, Framed-Protocol PPP, Service-Type Framed, [/ul][/ul][/ul][/ul][/ul][/ul]

1 reply

xsilver_FTNT
Staff
Staff
March 9, 2016

Hello,

I'd suggest to check that integration/interoperability guide. There are even quite helpful troubleshooting tips and examples on the end of document. http://docs.fortinet.com/uploaded/files/2716/fortios-rsso-with-win-server-2012-and-nps.pdf

Kind regards, Tomas

alexyamil
alexyamilAuthor
New Member
March 9, 2016

xsilver wrote:

Hello,

I'd suggest to check that integration/interoperability guide. There are even quite helpful troubleshooting tips and examples on the end of document. http://docs.fortinet.com/uploaded/files/2716/fortios-rsso-with-win-server-2012-and-nps.pdf

Kind regards, Tomas

 

Thanks A LOT!!!

 

Solved