Skip to main content
MWoWGW
MWoWGW
New Member
July 19, 2022
Question

Guest user access relogin every day

  • July 19, 2022
  • 2 replies
  • 3797 views

Hello Community,

 

i've got a huge problem with guest user accouts session times on customers setup. The Fortigate (200F v6.4.8) presents the guest accounts and also a captive portal. The problem: All Endusers have to relogin every day (no matter what duration [1day, 1week, 1month or unlimited]).

 

My settings are:

 

 

config user group     edit "GWLAN-1MON"         set group-type guest         set authtimeout 43200         set auth-concurrent-override enable         set auth-concurrent-value 3         set expire-type first-successful-login         set expire 2678400         set multiple-guest-add enable         config guest             edit 1                 set user-id "user0001"                 set password ENC XXX                 set expiration 86400             next
config user group     edit "GWLAN-1DAY"         set group-type guest         set auth-concurrent-override enable         set auth-concurrent-value 3         set expire-type first-successful-login         set expire 86400         set multiple-guest-add enable         config guest             edit 5                 set user-id "user0007"                 set password ENC XXX                 set expiration 86400             next
config user group     edit "GWLAN-7DAYS"         set group-type guest         set authtimeout 10100         set auth-concurrent-override enable         set auth-concurrent-value 3         set expire-type first-successful-login         set expire 604800         set multiple-guest-add enable         config guest             edit 1                 set user-id "user0103"                 set password ENC XXX                 set expiration 604800
config user setting     set auth-type http https     set auth-cert "Portal_Forti-1"     set auth-timeout 1440     set auth-portal-timeout 30     set per-policy-disclaimer enable end

 

 

I try to play with the timeouts but nothing changes. The client devices have to relogin into captive portal every day... I've no idea

 

Thanks in advanced

 

Markus

2 replies

Anthony_E
Staff
Anthony_E
Staff
July 22, 2022

Hello MWOWGW,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Best Regards
A
Anonymous_User
Contributor
July 22, 2022

Hello @MWoWGW ,

Thank you for your question. I have found this article : Technical Tip: Explanation of auth-timeout types for Firewall authentication users.

The following are suggestions that you could make to your configuration:
- Have you tried to change the  'set auth-timeout 1440 43200'? 
- Is the keepalive enabled in the global setting?

Please monitor this configuration and let me know if this helps.

 

    Terms & ConditionsAccessibility statement