How to handle MAB locally in FortiNAC ?

Forum|Forum|8 months ago
December 24, 2025
6 replies
697 views

Hello Community,

When FortiNAC is in proxy mode, the PC authenticates successfully but the IP phone MAB requests are always forwarded to Radius Server and rejected.

I tried to create an authentication policy to override this behavior and force local MAB authentication on FortiNAC, but it did not work.

Is it possible to handle MAB locally while FortiNAC is running in proxy mode?

FortiNAC

AEK

SuperUser

Ha Rabeb

If I remember well I was used to configure on FNAC both RADIUS proxy and local RADIUS at the same time. Only thing needed is to change the listening port of one of them, e.g.: use legacy port 1645 for local RADIUS.

AEK

ebilcari

Staff

Check if this setup has the option 'Proxy MAB Requests' enabled like shown below:

By default, this option is disabled. Authentication policies are not related to RADIUS authentication requests originating from NAS devices.

Emirjon

Rabeb_AliAuthor

Explorer II

thank you for your replies, the proxy MAB Requests is enabled and the RADIUS server is configured to listen on port 1645, but MAB requests from IP phones are still not handled locally by FortiNAC and continue to be forwarded to NPS and rejected