FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
pksubramanian
Article Id 196684

Description

 

This article describes how to add specific RADIUS attributes for incoming RADIUS requests from the same RADIUS client but through different interfaces/SSIDs.

 

Scope

 

FortiAuthenticator. 

Solution

 

When a user connects to an interface/SSID called '802.1x' the Called-Station-ID will show in the following format:


'08-5B-0E-XX-XX-XX:802.1x'

 
 
Add the following RADIUS Attribute in the dedicated RADIUS policy for that particular RADIUS Client:
 
ssid_0.png

ssid.png
 
ssid_1.png
 
Connecting on a different SSID to capture the called station-ID:
 
 
Add another new RADIUS Attribute  for Second interface/SSID CA-5B-0E-XX-XX-XX:fortinet9 in the same RADIUS policy as the following:
 
ssid_3.png

Verify successful RADIUS authentication logs in FortiAuthenticator: