Skip to main content
eshaq786
New Member
January 14, 2016
Question

iPad Wifi Authentication with Authenticator

  • January 14, 2016
  • 2 replies
  • 4834 views

Hi 

 

What is the best way of authenticating ipads using fortiauthenticator as a radius server with fortigate as the controller?

 

Is it best to generate individual certificates for each ipad? Isnt this inefficient when you have hundreds of ipads? What alternative way would be good?

    2 replies

    boneyard
    Valued Contributor
    January 16, 2016

    what is your goal? do you want easy access, secure access, able to track who is doing what, ...?

     

    eshaq786
    eshaq786Author
    New Member
    January 18, 2016

    Goal is easy administration when deploying devices. No user input to get onto wifi. Ideally able to add and remove wifi access.

    boneyard
    Valued Contributor
    January 19, 2016

    that is asking a lot

     

    certificates are an easy way to gain access from a user point of view, no username / password, it just works (until it expires). but getting a certificate on a device other then a windows AD system is another matter. perhaps scep can help with that and you let the users enroll themselves: http://help.fortinet.com/fauth/3-3/Content/FortiAuthenticator%203_3%20Admin%20Guide/900/904_SCEP.htm although im not sure if an iPad will just pick that up.

     

    you could also look at the other products that generate and install certificates on devices like smartphones and tablets, for example Aruba ClearPass with the Onboard module.

    xsilver_FTNT
    Staff
    Staff
    February 17, 2016

    Hello eshaq786,

     

    if you are looking for easy wifi, and do not want to bother yourself with certificates, then what about simple captive portal and guest user management ?

    Maybe some of the cookbook recipes will help or bring ideas .. http://cookbook.fortinet.com/?s=WiFi&cat=5

     

    Kind regards, Tomas