Explorer

Question

FSSO Windows NPS

Hi;

I have the same problem as:

I have an Windows AD Environment with two DCs (Server 2016). and and Windows Radius Server NPS (Server 2019).

Fortigate 100F 7.4.3

The Radius is for Wireless Authentication with my Aruba Instant APs. Working fine.

FSSO with the Agents installed works also finde, and i applied and testet some User-based Policies, also working fine.

But how do i get the FSSO Agent Collector to collect the data from my Radius?

Best regards
Lukas

SuperUser

Hi Lukas

Do you mean RSSO?

AEK

Explorer

thanks for your reply.

yes and no.

in the FSSO Collecter Agent at advanced settings, there is "RADIUS Accounting" i thought in this direction.

I had RSSO testet before, didnt work, i will give it another try.

But when i make this with FSSO and RSSO, in my future Policies i have to set alwys both groups, one from FSSO and one from RSSO, am i right?

SuperUser

Hope it helps.

AEK

New Member

OK, maybe I know what you need, I did this to authenticate my UNIFI clients that login via Radius.

On the FFSO Colletor Agent Advanced Settings > Radius Accounting TAB:
> Enable it
> Enter a Listen port, Default 1813
> Create a Shared Secret (you'll need it later, make note)
> Enter your domain name like "myenterprise.net"
On the Radius Server, open the NPS:
> Create a Remote Radius Server Group (Named mine FSSO)
>Add your AD server (Where your FSSO Agent is) inside the group.
>In the Authentication/Accounting tab you fill in with your normal Shared Secret from radius and the FSSO agent shared secret on the Accounting field.
On the NPS Policies, at connection request policies
>On the properties of your policy go to the Settings tab
>Select Accounting (bellow Authentication), mark "Forward accounting requests to this remote RADIUS server group" and in the dropdown menu select the Group you created on step 1.
I have more policies to filter from witch group the user are, using network policies with vendor specific 12356, i'll dive more into that if you need.

Hope this help you.

Explorer

Thanks for your help.

But i did exactly this on three differents sites.

When i look with wireshark on the radius Server (Windows Server 2022).

There is no activity with port 1813. Only with 1812 to my Aruba Instant VC.

Sign up