Technical Tip: How to configure FortiNAC to proxy MAB Requests

[scitlak]

Description	This article describes how to configure FortiNAC to proxy MAB Requests to Radius Server.
Scope	FortiNAC -F 7.4, FortiNAC -F 7.6.
Solution	Before FortiNAC -F version 7.4 and version 7.6, MAB requests proceeded and were answered by FortiNAC -F locally, and it was not possible to proxy it. FortiNAC -F version 7.4 and version 7.6 now allow proxying. Follow the steps below to configure it: Under 'Service Connectors', create a RADIUS server. Create a new 'Virtual Server' under Network -> RADIUS and select the RADIUS server that has been created under 'Service Connectors`. Under Device Model Configuration, set the 'Server Configuration' as a Virtual Server configuration that contains a RADIUS Proxy configuration. As shown below: with FortiNAC -F 7.6, there are no more options for RADIUS Proxy or RADIUS Local. These options are still available in version 7.4 and, in this case, the RADIUS mode should be set to Local. In the NAS client, RADIUS authentication should be set to the port number that has been configured under Network -> RADIUS -> Configuration. The 'Proxy MAB Requests" option should be selected under Network -> RADIUS -> Configuration. When an MAB authentication request is initiated from NAS, FortiNAC will proxy it to the RADIUS server as shown below.