Greetings,I should configure a WiFi SSID on a UniFi Controller that performs redirects to a Captive Portal on a FortiGate so that the users are picked up by a FortiAuthenticator. In particular:Users connect to an SSID issued by the Unifi Controller.As soon as the user connects, a FortiGate Captive Portal should appear and read the users from the FortiAuthenticator.After user login, he can go Online.It can be done?If that's not possible, I was thinking about:SSID without passwordCaptive Portal on the FortiGate interface (which would also be the gw of the users connected via WiFi)Authentication on the FortiGate Captive Portal with users drawn from the FortiAuthenticator.Thank you very much for helping.

Explorer II

Solved

UniFi Controller SSID with FortiGate Captive Portal

Forum|Forum|2 years ago
March 30, 2024
7 replies
5543 views

Greetings,

I should configure a WiFi SSID on a UniFi Controller that performs redirects to a Captive Portal on a FortiGate so that the users are picked up by a FortiAuthenticator.

In particular:

Users connect to an SSID issued by the Unifi Controller.
As soon as the user connects, a FortiGate Captive Portal should appear and read the users from the FortiAuthenticator.
After user login, he can go Online.

It can be done?

If that's not possible, I was thinking about:

SSID without password
Captive Portal on the FortiGate interface (which would also be the gw of the users connected via WiFi)
Authentication on the FortiGate Captive Portal with users drawn from the FortiAuthenticator.

Thank you very much for helping.

Best answer by AEK

Hi @Thonno

Here is how you configure active portal:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Captive-Portal-Authentication-Network-Interface/ta-p/211018

You can create on FGT a remote group from FAC and use it in active portal.

Once user authenticate on active portal they can go online.

AEKAnswer

SuperUser

Hi @Thonno

Here is how you configure active portal:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Captive-Portal-Authentication-Network-Interface/ta-p/211018

You can create on FGT a remote group from FAC and use it in active portal.

Once user authenticate on active portal they can go online.

AEK

ThonnoAuthor

Explorer II

Does the Captive Portal appear automatically or does the user have to open a browser?

Mainly users will be connected with Smartphones, which is why I would have preferred Unifi to do Radius redirects or similar for the captive portal on FortiGate.

anyway thanks so much for the reply

AEK

SuperUser

FG portal doesn't open automatically, user has to open browser and type an address.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO