Troubleshooting Tip: Configure the captive portal using FortiGuest with FortiGate for Data restriction

[rmittal]

Description	This article describes how to Configure a captive portal using FortiGuest with FortiGate for Data restriction.
Scope	FortiGate, FortiGuest.
Solution	Create a radius server: Note: NAS-IP is mandatory. Select 'OK' and Enable Radius Accounting from CLI of FortiGate and edit the below parameters with values: set acct-interim-interval 60 set radius-coa enable     config accounting-server         edit xx Create SSID with the below fields: Captive Portal: Enabled. Portal type: Authentication Authentication portal: External Enter the Captive portal URL from FORTIGUEST. Under user group select FORTIGUEST radius server. Exempt destinations/services =è Enter FortiGuest FQDN/IP and DNS. Redirect after Captive Portal: Enter success URL from FortiGuest Login into FortiGuest GUI using admin credentials: Add FortiGate as a radius client, under Devices -> Radius Clients and Select NEW. Select Attributes: Create a portal and portal Rule under Guest portal -> Portal and select 'Create New'. Guest portal -> Portal Rules. Create a Usage Profile under Network Access policies -> Usage profile and select 'Create New'. Select Data usage and Enter the details. Map the Usage profile.