Re: IPsec with multiple NPS groups

Somashekara_Hanumant · 01-20-2025

Description This article describes how to configure secondary LDAP and troubleshoot. Scope FortiAuthenticator. Solution The user should have 2 LDAP servers with the same domain name, in this case, below are the LDAP servers: Domain Name: dxb-nse8.lab...

Somashekara_Hanumant · 01-09-2025

Description This article describes the issue with the warning message 'Another wildcard administrator with the same remote group exists' while creating wildcard admin accounts. Scope FortiGate, LDAP. Solution Configure the LDAP server below: config u...

Somashekara_Hanumant · 12-09-2024

Description This article explains how to download the FortiAuthenticator Agent logs for Microsoft Windows. Scope FortiAuthenticator Agent. Solution When it is not possible to log in to the Windows system using FortiAuthenticator Agent, ask for the Fo...

Somashekara_Hanumant · 10-25-2024

Description This article describes whether the same OTP can be used on multiple devices at the same time or not. Scope FortiAuthenticator. Solution Expectations, Requirements. FortiAuthenticator as RADIUS server, 2 FortiGates as RADIUS client (can be...

Somashekara_Hanumant · 10-18-2024

Description This article describes the behavior of the Static route destination address missing after upgrading firmware. It explains how the destination address in the static route is assigned after upgrading the firmware. Scope FortiGate 7.2.x. Sol...

Somashekara_Hanumant · 08-27-2024

Hello AEK, Request you to please open a web ticket, so that one of our engineer would be able to further assist you on this. Regards, Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, Please refer the below screen capture. On the same vendor Specific you need to add multiple groups. Hope this answers your question. Regards Somu

Somashekara_Hanumant · 08-27-2024

Hello AEK, No need to create multiple NPS policies, on the same policy you need to add multiple groups under Vendor Specific option, and bind these policies on FortiGate. Regards, Somu

Somashekara_Hanumant · 08-26-2024

Hi AEK, As suggested on below article, need to configure multiple groups attributes on NPS server and also need to bind these groups on FGT. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-FortiGate-and-Microsoft-NPS-Radius/ta-p...

Somashekara_Hanumant · 08-26-2024

Hi, Hi, If you are looking to disable and enable the 'nattraversal' on IPSec phase1 settings, then you need to create action, trigger and Stitch as below Action: config system automation-actionedit "ipsec"set action-type cli-scriptset minimum-interva...

User Statistics

User Activity

Technical Tip: How to configure secondary LDAP on FortiAuthenticator

Technical Tip: Remote wildcard admin user with same LDAP group with different administrator profile

Technical Tip: How to download FortiAuthenticator Agent log for Microsoft Windows

Technical Tip: FortiAuthenticator FortiMobile token OTP using on multiple devices at the same time

Technical Tip: Static route destination address is missing after upgrading firmware