Technical Tip: How to allow custom port when non-s...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 200598

Description

This article describes how to allow custom port when non-standard port is used while active authentication.

Scope

Forti OS 7.0.and above.

Solution

When URL 'http:x.x.x.x:8080' is reached, it will not prompt captive portal page.

Policy:

# config firewall policy

edit 1

set name "Internet"

set uuid 77af495c-577a-51ec-b979-dd647fc5c06d

set srcintf "port3"

set dstintf "port1"

set action accept

set srcaddr "all"

set dstaddr "all"

set schedule "always"

set service "ALL"

set nat enable

set users "test"

end

It is necessary to explicitly configure custom auth-port in user setting, so when you access URL with port 8080, it should trigger captive portal.

# config user setting

set auth-cert "Fortinet_Factory"

# config auth-ports

edit 1

set type http

set port 8080

end

1743

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to allow custom port when non-standard port is used while active authentication