Technical Tip: How to set source IP address for FSSO, LDAP and Radius

[ppatel]

Description

This article describes how to set the source IP address in order to connect FSSO, LDAP and Radius when the closest interface does not have an IP address.

Scope

FortiGate.

Solution

For FSSO.

config user fsso
    edit <FSSO object name>
        set source-ip <IP address associated an interface>
    end

For LDAP.

config user ldap
    edit <LDAP object name>
        set source-ip <IP address associated an interface>
    end

For RADIUS:

config user radius

    edit <radius object name>

        set source-ip <IP address associated an interface or client configured on radius server>

    end

WARNING:
This setting does not exist for local polling.

config user fsso
    edit "Local FSSO Agent"
end

Note:

The source-IP should be configured/assigned as interface IP.
If the traffic is going over the IPsec tunnel, the source-ip should match the Local Address/Remote Address in Phase2 selector on both Firewalls.