Picking up RADIUS information from the windows NPS server

[David2]

Hi all,

I've set up RSSO on my fortigate to pick up RADIUS authentication from users connecting to our wifi networks (Meraki) as per the fortigate cookbook but we don't see any traffic hitting the fortigate.

Do we need to install some sort of event trigger on the NPS server to forward the packets to the fortigate?

Cheers

David

[Daniel_H]

David @ SOC wrote:

Hi all,

I've set up RSSO on my fortigate to pick up RADIUS authentication from users connecting to our wifi networks (Meraki) as per the fortigate cookbook but we don't see any traffic hitting the fortigate.

Do we need to install some sort of event trigger on the NPS server to forward the packets to the fortigate?

Cheers

David

Hi,

I have this configuration on my Fortigate - FreeRadius, with Aruba.

Captive portal set on Fortigate

================================================

#1 - CONFIG_USER_RADIUS     edit "rad-uin"         set server "172.27.18.102"         set secret <secret>     next end #2 - CONFIG_USER_GROUP     edit "user-lan-uin"         set member "rad-uin"     next end #3 - INTERFACE     edit "vlan_mhs_aruba"         set vdom "root"         set ip 172.27.212.1 255.255.252.0         set allowaccess ping         set security-mode captive-portal         set security-groups "user-lan-uin"         set snmp-index 50         set interface "port34"         set vlanid 301     next end #4 - FIREWALL_POLICY     edit 8         set uuid 48df5906-b7c1-51e4-6352-e54221db5053         set srcintf "vlan_mhs_aruba"         set dstintf "port26"         set srcaddr "all"         set dstaddr "all"         set action accept         set schedule "always"         set service "ALL"         set groups "user-lan-uin"         set nat enable         set ippool enable         set poolname "IP_Pool_mhs"     next ================================================