disconnect a session

[kandida]

Hi We use fortigate captive portal with radius authentication. We need to disconnect a user or reauthorize a user after he has specific amount of download. 1- Is there any way to disconnect a connected user programatically? I have seen the use of radius " Packet of disconnect" or " change of authorization" extentions or reauthorization in specific time intervals. But I guess fortigate does not support any of them. 2- is there anyway to change the assigned group for a connected user on fly? thanks

[TuncayBAS]

perhaps may be useful to them. to delete user:

 diagnose firewall auth filter user " username" 
 diagnose firewall auth clear
 

You can refer to the following links for the control of user sessions. http://docs-legacy.fortinet.com/fos50hlp/50/index.html#page/FortiOS%25205.0%2520Help/UserGroups.030.28.html

[Jeff_FTNT]

You may change setting like: config user setting set auth-timeout-type hard-timeout end It will force re-authentication if " auth-timeout" is reached