Hello, i'm not sure if I understand your design fully but I know Fortigate doesn't support Radius (RSSO) users in its profiles. Here is a forum thread that explains the problem:
https://community.fortinet.com/t5/Support-Forum/Using-RSSO-usernames-in-policies/td-p/11235 I have put in a feature request with Fortigate to add this. If this is affecting you I recommend contacting Fortinet to add support to this feature request. Aaron On Wed, Aug 21, 2024 at 2:41 PM Guilherme Assis via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello everyone. > > > > Can you help me with a configuration? > > > > I am working on a deployment that requires integrating my FortiGate > Firewall with Packetfence RADIUS. The idea is to have clients connect to my > Wi-Fi network through a Site-To-Site VPN to authenticate via Captive Portal > and RADIUS return whether the user was authorized or not, thus freeing up > the client's internet. However, I am having difficulties with this > configuration. FortiGate has already managed to connect to RADIUS, but when > I create a local user in Packetfence for testing, I am unsuccessful when > trying to authenticate. For this configuration to be possible, do I need to > synchronize the SSO Firewall? Today I have configured FortiGate in the > Switches and SSO Firewall tabs. > > > > Another question is how should I create the authentication source for this > configuration to work. > > > > I appreciate everyone's help! > > > > Best regards, > > > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users >
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
