Public Wireless with SMS Authentication on a Forti 300d

[dudarra]

Good Morning,

i'm looking for a Public Wireless LAN Solution with my Forti 300d. Something very simple... Seperate VDom with a Captive Portal login Screen. The Customer should only leave the name and his Phone number. After that he will get a Code and with this Number he can access the internet only for max 5 hours.

is this possible? when yes, how can i make this?

thanks in advance for some tipps

raffa

[dudarra]

C'mon Guys,

Nobody has an idea? cisco and all others big company have a solution...but none here with fortinet!

[AndreaSoliva]

Hi

this is possible without any problems with FortiAuthenticator. The FortiAuthenticator provides a SelfRegistration portal as the possibility to configure SMS for provider by http/s get and post. Also the fields which you would like to use like you mention is possibible. Acutally it works as following:

User connects to a SSID open which means receives a IP from DHCP SSID FGT. That the user gets to the portal he can use www.google.com or whatever. Because the SSID is open FGT shows a Captive Portal. After that you modify the Captive Portal in this way that is mentioned "no username password please click here". If the user clicks on this link he will be forwarded to the Authenticator SelfReg Portal. There he enters the name and mobile number or whatever. As soon as he confirms and you have correctly configured the SMS provider he will get on his phone the tocken to login. For the user it will pop-up -if you do so- a confirmation page which you can modify with a link "please proceed for login here". This means he will be forwarded to the Captive Portal on FGT. Now he can enter the username and tocken. Thats it....! Of course you can configure how long the token will be active etc.

The overall thing is not done with two three clicks but with Authenticator no problem.

hope this helps.

have fun

Andrea

[dudarra]

Grazie Andrea,

will give a try!

thanks raffa