FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nshelke
Staff
Staff
Article Id 200598
Description

This article describes how to allow custom port when non-standard port is used while active authentication.

Scope Forti OS 7.0.and above.
Solution

When URL 'http:x.x.x.x:8080' is reached, it will not prompt captive portal page.

 

Policy:

 

# config firewall policy

    edit 1

        set name "Internet"

        set uuid 77af495c-577a-51ec-b979-dd647fc5c06d

        set srcintf "port3"

        set dstintf "port1"

        set action accept

        set srcaddr "all"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set nat enable

        set users "test"

    next

end

 

It is necessary to explicitly configure custom auth-port in user setting, so when you access URL with port 8080, it should trigger captive portal.

 

# config user setting

    set auth-cert "Fortinet_Factory"

    # config auth-ports

        edit 1

               set type http

               set port 8080

        next

    end

end  

Contributors