Accounting to FortiAuthenticator and user usage profiles

[Akmostafa]

Hello Friends.

I have followed the exact steps described in the below KB.

The user is successfully authenticated to the SSID and is viewed on the Fortigate as a firewall user (#dia firewall auth list)

I can see from packet capture that FG is sending the interm accounting messages to FAC on the specified period  and I see the ACC response packets from fAC in the sniffer.

However, on FAC -- monitor --- radius sessions I see 0 accounting sessions.

When I view user usage details : it is not counting anything and the user is not disconnected when reaching the max kilobytes specified in the suer profile.

I am not sure what I am missing here.

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Usage-Profiles-not-enforced-for-R...

[ismailurek2]

Hi,

When I define the DMZ interface as source-ip, I solve that problem but this time I get invalid secret error.

[Akmostafa]

Make sure secret configured on FAC matches the one confiured on Fortigate under : 

config accounting server

also if you FortiOS is higher than 

 7.2.9 or 7.4.4 or 7.6.0

then check the below update:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-RADIUS-authentication-failure-after-...

[Ganehs]

Hello Ismail,

I'm facing the same issues, no rsso packets received on FG, no radius session FAC also.

Can you post the FAC configuration?

1/13/2025 12:24:30 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:29:30 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:34:30 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:36:10 [3700813952] FortiAuthenticator rad_accounting [30394] [DEBUG]: [Maintenance] Save expired accounting sessions to DB
11/13/2025 12:39:30 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:44:31 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:49:31 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:52:51 [3700813952] FortiAuthenticator rad_accounting [30394] [DEBUG]: [Maintenance] Save expired accounting sessions to DB
11/13/2025 12:54:31 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 12:59:31 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 13:04:31 [3700813952] FortiAuthenticator rad_accounting [30394] [INFO]: Updated accounting sessions file. Status = 0
11/13/2025 13:09:32 [3700813952] FortiAuthenticator rad_accounting [30394] [DEBUG]: [Maintenance] Save expired accounting sessions to DB