FortiNAC 7.6.5 Is it possible to limit self-registered guests to 1 hour of Internet access per day?
I am using FortiNAC-CA / FortiNAC-OS v7.6.5.0815 (GA) together with a FortiGate and I would like to implement a daily Internet usage limit for self-registered guest users.
My requirement is:
- Guest connects to the Guest Wi-Fi.
- Guest self-registers through the FortiNAC captive portal.
- After successful authentication, the guest receives Internet access.
- The guest is allowed a maximum of 1 hour of Internet access per day.
- After the 1 hour is consumed, Internet access should be blocked automatically.
- The guest should not be able to regain access by disconnecting/reconnecting or registering again.
- After the daily 24-hour reset, the same user/device should receive another 1 hour of access.
- Ideally, the limitation should be based on the user or device/MAC address, so creating another self-registration session does not bypass the limit.
I understand that FortiNAC has Account Duration and Reauth Period, but from the documentation it appears that Account Duration is not a recurring daily quota. For example, FortiNAC states that Account Duration starts when the self-registered guest first logs in and can provide one continuous period of access.
My question is:
Can this "1 hour per day per user/device" requirement be implemented natively using FortiNAC 7.6.5 and FortiGate?
If yes, could someone provide the recommended configuration/design, particularly:
- FortiNAC Guest Self-Registration Template settings
- Reauth Period / Account Duration settings
- FortiNAC Network Access Policy
- FortiGate firewall configuration
- How to track the 1-hour daily usage
- How to prevent users from bypassing the limit by reconnecting or self-registering again
- How the 24-hour usage counter/reset should be implemented
If it is not supported natively, is there a recommended Fortinet solution using FortiGate, FortiNAC, RADIUS?
Any configuration examples or recommended architecture would be greatly appreciated.
Thank you.
