Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

New Contributor

FAC Mac Authentication Bypass Scenario

Hello guys !
I have a question about FortiAuthenticator MAB
Can we have multiple FortiAuth MAB user groups in FortiAuthenticator?
From the cookbooks, I read that we only config the devices in MAB section and linked it to the user groups (per radius clients)
What I want to achieve is I want a separate user groups for Printers, CCTV, Access Doors etc with Dynamic VLAN Assignment enabled (so we throw in the radius attributes)
Could we achieve that? My best guess is we create user groups in FortiAuthenticator with user and password using devices' MAC but I have no FortiAuth to test. Any recommedation for above use cases? 
Andryan VT


Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.