Radius Authentication

[Rajinder]

Dear Friends,

I have configured Fortinet device with ACS server. I have also created the user and radius group and called the same group in administrator with full access. I can ping ACS server from Firewall, and ACS testing is showing successful. 

When user try to login to GUI mgmt console, they are not and getting an error, invalid user / invalid password.

I am using version 6.0.x. Kindly advice, what could be the issue.

[xsilver_FTNT]

Hi,

RADIUS Admin is described here : https://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD32808

RADIUS group match is described here : https://kb.fortinet.com/kb/microsites/microsite.do?cmd=displayKC&docType=kc&externalId=FD36464

I'd suggets to check those and also packet captures.

Also 'diag debug fnbamd 7' should help you to see what FortiGate is trying to check.