Skip to main content
RandomTechGuy
New Member
December 1, 2023
Question

FortiGate and Fortiap with Radius authentication

  • December 1, 2023
  • 18 replies
  • 9613 views

Hi guys.

A customer  asked for FortiGate WIFI with Radius authentication.

I tried to do it on a lab first.

I have windows server 2016 with a ad domain and radius server with Certificate issued.

Also I have Fortigate 40F and Fortiap 220B ( I know its old but this is what i currently have)

I have configured WPA2  Enterprise with radius server and created a group that belongs to the radius server and everything looks fine.

When i login to the wifi i put my credentials and its taking its time on checking network environment.

Eventually I'm able to login.. I'm getting apipa address and when I check the Fortigate wifi clients i see that the user is logged in and was assigned an IP.

Can you guys help ? I dont know what am i doing wrong :\

18 replies

dbhavsar
Staff
Staff
December 12, 2023

Hello @RandomTechGuy 

 

can you try disabling below settings on fortigate and reconnect again:
config system npu
    set capwap-offload disable
end

- Also your AP is running on bridge mode or is it in tunnel mode? Also have you tried connecting another machine to isolate the issue [adaptor issue or something else]

RandomTechGuy
New Member
December 14, 2023

Hi @ebilcari I didn't have the command diag_sniffer on the AP it was version 4.0
I upgrated it to 5.2.7 and before I tried to diagnose i tested it again and I'm glad to say its working now.

I used an old AP hardware and firmware.
Thank you guys very much for you help.. I  really appriciate all of your help.

@dbhavsar @vbandha @dbu @distillednetwork 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!