FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
acvaldez
Staff
Staff
Article Id 339194
Description This article provides a baseline of packet capture that would demonstrate a successful radius accounting. 
Scope Wireshark and FortiAuthenticator.
Solution
  1. To configure RADIUS accounting on FortiAuthenticator, refer to this comprehensive guide: RADIUS accounting.
  2. The following packet capture illustrates RADIUS traffic sent to FortiAuthenticator, demonstrating a successful RADIUS accounting flow under Start -> Interim-Update -> Stop.

 

This capture provides a baseline reference for validating the proper flow of RADIUS accounting messages.

 

radius accounting flow.png

 

If the packet capture does not include radius traffic due to other packets that might fulfill maximum packet captured on that interface ,it is possible to run a packet capture on FortiAuthenticator CLI:

 

execute tcpdumpfile -nnvi any port 1813

 

To download this packet capture, go to: https://<fac-ip>/debug/pcap-dump.