FortiGate Management App for Fortinet AP was tested.
...
| Group Name | CDN_IP |
|---|---|
| Members | CDN I, CDN II, CDN III, CDN IV, CDN V, CDN VI, CDN VII, CDN VIII, CDN IX, CDN X, CDN XI, CDN XII, CDN XIII, CDN XIV, CDN XV, CDN XVI, CDN XVII |
| Show in Addresses List | <checked> |
| Static Route Configuration | <unchecked> |
Wi-Fi Settings
Wi-Fi SSID settings for SOCIFI can be made under WiFi Controller / SSID menu where you need to create a record with the following items. Below, you can see only the records we consider as important for SOCIFI. Feel free to add more parameters based on your experience and requirements. However, keep in mind that any change could affect the service and you should be aware how to revert it to this default settings if any issue is seen.
Interface Name | SOCIFI_freeNet (or another name) |
|---|---|
Type | WiFi SSID |
Traffic Mode | Tunnel to Wireless Controller |
Address IP/Network Mask | <IP Address for the interface> |
Restrict Access | checked only ping |
DHCP Server | <checked> (fill the rest based on the local network requirements) |
WiFi Settings / Security mode | Captive Portal |
Portal Type | Authentication |
Authentication Portal | External => connect-ip.socifi.com |
User Groups | SOCIFI_guest |
Exempt Sources | <nothing> |
Exempt Destination/Services | <nothing> |
Redirect after Captive Portal | Specific URL = http://connect-ip.socifi.com/api/v1/out/session |
...
As the last step you need to adjust the third second Inet_NO_auth rule thru CLI Console. You can find CLI Console e.g. under the admin menu in the upper right corner.
...