Accounting to FortiAuthenticator and user usage profiles

[Akmostafa]

Hello Friends.

I have followed the exact steps described in the below KB.

The user is successfully authenticated to the SSID and is viewed on the Fortigate as a firewall user (#dia firewall auth list)

I can see from packet capture that FG is sending the interm accounting messages to FAC on the specified period  and I see the ACC response packets from fAC in the sniffer.

However, on FAC -- monitor --- radius sessions I see 0 accounting sessions.

When I view user usage details : it is not counting anything and the user is not disconnected when reaching the max kilobytes specified in the suer profile.

I am not sure what I am missing here.

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Usage-Profiles-not-enforced-for-R...

[ismailurek2]

Hi,

When I define the DMZ interface as source-ip, I solve that problem but this time I get invalid secret error.

[Akmostafa]

Make sure secret configured on FAC matches the one confiured on Fortigate under : 

config accounting server

also if you FortiOS is higher than 

 7.2.9 or 7.4.4 or 7.6.0

then check the below update:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-RADIUS-authentication-failure-after-...