FortiAuthenticator as a Radius Server

Forum|Forum|3 years ago
March 27, 2023
3 replies
3738 views

Hello Team,

I need some guidance on FortiAuthenticator.

Let's assume I want to implement FortiAuthenticator as a Radius (and Tacacs) Server only, for a small group of Network Engineers (30 Engineers) and about 3000 devices (switches and firewalls)

Second assumption is to run FortiAuthenticator as a Virtual Appliance, what calculation needs to be done on the amount of users to match a certain type/size ? For example FAC-VM-BASE ( 100 users )

Thanks in advance !

FortiAuthenticator v5.5

Best answer by funkylicious

https://docs.fortinet.com/document/fortiauthenticator/6.4.7/release-notes/917508/maximum-values-for-vm#Maximum%C2%A0values_for_VM

funkyliciousAnswer

SuperUser

https://docs.fortinet.com/document/fortiauthenticator/6.4.7/release-notes/917508/maximum-values-for-vm#Maximum%C2%A0values_for_VM

"jack of all trades, master of none"

new2fortinetAuthor

New Member

Hello Funkylicious,

Many thanks for the calculation table.

Apologies beforehand, but I am not sure if I understand correctly, for example FAC-VM-1000-UG would be 1000 users and based on this I can only have roughly 333 switches/routers or firewalls running Radius authentication ?

In the example of 5000 users, I could only have 1666 devices ?

akanibek

Staff

Hi, @new2fortinet,

yes, it is. However, you can also specify devices with subnets to fit the licensing count.

new2fortinetAuthor

New Member

Many thanks !

The issue I might run into is the price difference between FAC-VM-1000-UG and FAC-VM-10000-UG which I most likely cannot justify for a tacacs/radius server solution.

Same goes for a hardware appliance, the FAC-300F versus FAC-800F which is 3 times the price.

new2fortinetAuthor

New Member

Hello all,

Many thanks for your responses, I will check for another Radius solution to have the units in the field authenticated against userid/password and AD/LDAP.

Sign up

Login with SSO

Login to the community

Login with SSO