Skip to main content
Esteemed Contributor III
November 11, 2008

Technical Tip: Fortinet RADIUS vendor-specific attributes (VSAs)

  • April 16, 2026 at 12:32 PM
  • 0 replies
  • 26228 views

 

Description

The following Fortinet RADIUS vendor-specific attributes (VSAs) can be returned to a FortiGate within an Access-Accept response from a RADIUS server.

This article also includes a brief screen-shot document that shows how to import Fortinet VSAs into Windows 2003 Server.

For more information about using Fortinet VSAs, see the related articles 'Using RADIUS for Admin Access and Authorization'.

Components

FortiOS all versions.

Steps or Commands

#
# Fortinet VSAs
#

VENDOR Fortinet 12356

BEGIN-VENDOR Fortinet
ATTRIBUTE Fortinet-Group-Name        1 string
ATTRIBUTE Fortinet-Client-IP-Address 2 ipaddr
ATTRIBUTE Fortinet-Vdom-Name         3 string
ATTRIBUTE Fortinet-Access-Profile    6 string

#
# Integer Translations
#

END-VENDOR Fortinet

 

Related Article:

Technical Note : Using RADIUS for Admin Access and Authorization - "wildcard" admin accounts ** Internal/Outdated**

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT