Skip to main content
ceva156
ceva156
New Member
June 2, 2022
Question

Fortinet Wi-Fi client settings

  • June 2, 2022
  • 1 reply
  • 885 views

I'm taking lead on the Windows 10 / macOS client portion of a new Fortinet wireless deployment. I'm used to PEAP with MS-CHAP v2 which I can deploy with Group Policy.

It looks like it's defaulting to EAP-TTLS with MS-CHAP v2. This isn't available in Group Policy, so I tried deploying with Intune. It's showing up as N/A, which I'm investigating with Microsoft support.

What protocols are others using for 802.1x on Fortinet wireless?

1 reply

Markus_M
Staff & Editor
Markus_M
Staff & Editor
June 2, 2022

Hi ceva,

 

the EAP methods available depend on the RADIUS server and the RADIUS client. They will negotiate. Upon EAP message from the client in the request, the server will send a challenge. The challenge contains an EAP method.

The client can then respond with that method, if supported or reject it with "NAK" and request a different one. The server can then speak that or... and so on.

The wireless controller or AP do not matter much in terms of EAP.

The methods and negotiation are readable in clear text using wireshark. Capture packets on port 1812 (default) and expand the RADIUS packets to see the EAP messages.

 

Best regards,

 

Markus

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!