SSID Captive Portal Timeout

[Infotech22]

Hello to all,

I need a little help with configuration of captive portal for our SSID for guest.

I already created everything, user, add it to group, create SSID with captive portal, create policy for network access and it's working perfectly.

Now the only problem is that I can't find a way to set and test authetication timeout.
It only asks for authetication on the first login with the new device, even if I configure set auth-timeout 2 (2 minutes for testing only) and it is still logged in and have access to network. Also when I forget the network and connect again it doesnt ask me for authetication and don't display Captive Portal.

Any help is welcomed :)

[anignan]

Hi @Infotech22 ,

Can you try to set it under the user group? and make it hard-timeout by default it is idle..

REF: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Fire...

Thanks

[Infotech22]

Hi @anignan,

As I can see this settings need's to be done under "config user settings".
Does this means it will assign hard-timeout to all users, SSL users etc?

There is no way to configure hard-timeout only for group users?

[anignan]

Hi @Infotech22 ,

This will not affect vpn users... you can control the same for sslvpn users under config vpn ssl setting...

No  there is no option for specific user group it is global.

Abdel

[Infotech22]

Hi @anignan,

Thank you for the answers. So this will then affect all local users on the FortiGate itself.
Guest Users for captive portal and administrators.

[Infotech22]

I guess it will not affect the Adminsitrators.

[anignan]

Hi @Infotech22 ,

No this is will not affect admins it will affect only user that authenticate with firewall portal

Abdel

[Infotech22]

It work's now

[anignan · Accepted solution]

Hi @Infotech22 ,

yeah i just tested it and it worked on my end.  you can see the logs with

dia deb dis

dia deb res

dia deb app authd -1

dia deb en

You can mark this as a solution

Abdel