Hi all,
I want to create two groups which will be authenticated with RADIUS server with different level of accesibility to the network.
I know that if I creating authentication with LDAP server I can create two groups and associated them with different groups od LDAP server by specifying indyvidual CN.
Could you tell me, if I could to this the same with RADIUS? If yes, how can I do this?
You may set up your Radius server to support Fortinet VSA.
VENDOR Fortinet 12356
BEGIN-VENDOR Fortinet
ATTRIBUTE Fortinet-Group-Name 1 string
ATTRIBUTE Fortinet-Client-IP-Address 2 ipaddr
ATTRIBUTE Fortinet-Vdom-Name 3 string
ATTRIBUTE Fortinet-Client-IPv6-Address 4 octets
ATTRIBUTE Fortinet-Interface-Name 5 string
ATTRIBUTE Fortinet-Access-Profile 6 string
#
# Integer Translations
#
END-VENDOR Fortinet
FGT can check the return "Fortinet-Group-Name" value "radius_group1" to do group match
config user group
edit "group_radius"
set member "vdom1rad"
config match
edit 1
set server-name "vdom1rad"
set group-name "radius_group1"
next
end
next
end
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
