Skip to main content
Esteemed Contributor III
Nov 11, 2008 5:49 PM UTC

Technical Tip: Fortinet RADIUS vendor-specific attributes (VSAs)

  • Apr 16, 2026 12:32 PM UTC
  • 0 replies
  • 26241 views

 

Description

The following Fortinet RADIUS vendor-specific attributes (VSAs) can be returned to a FortiGate within an Access-Accept response from a RADIUS server.

This article also includes a brief screen-shot document that shows how to import Fortinet VSAs into Windows 2003 Server.

For more information about using Fortinet VSAs, see the related articles 'Using RADIUS for Admin Access and Authorization'.

Components

FortiOS all versions.

Steps or Commands

#
# Fortinet VSAs
#

VENDOR Fortinet 12356

BEGIN-VENDOR Fortinet
ATTRIBUTE Fortinet-Group-Name        1 string
ATTRIBUTE Fortinet-Client-IP-Address 2 ipaddr
ATTRIBUTE Fortinet-Vdom-Name         3 string
ATTRIBUTE Fortinet-Access-Profile    6 string

#
# Integer Translations
#

END-VENDOR Fortinet

 

Related Article:

Technical Note : Using RADIUS for Admin Access and Authorization - "wildcard" admin accounts ** Internal/Outdated**

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT