Technical Tip: How to use domain name on authentication page

[kwcheng__FTNT]

Description
This article describes the configuration of how to use domain name on authentication page.

Solution

Make sure the DNS is configured to resolve the domain to the FortiGate IP address.

Otherwise, the client will not be able to load the authentication page with domain name due to unsolvable domain name.

1) The above shows the default configuration of the authentication page. It is expected to use the FortiGate IP address when there is no configuration applied.

2) Configure the DNS and make sure it can resolve the domain name to the FortiGate IP address. The example given here will be 'fortinetexample.com'.

3) Login to theFortiGate via command line and key in the following command line. According to the example given above, the 'domainname' is replaced with 'fortinetexample.com':

# config firewall auth-portal
    set portal-addr "domainname.com:1000"
end

4) Trigger the authentication page again and you shall see the authentication page is using domain name now.

Important Notes.
Use the internal DNS to force the client to resolve the domain name to the FortiGate IP address. It will not be achievable if a public DNS is used.