Fortinet & FortiGate

FortiGate Management App for Fortinet AP was tested.

RADIUS & User Group Settings

Two servers are required for authentication and accounting.

In the settings, under the tab User&Device / RADIUS Servers you need to create a record for primary and secondary RADIUS server with the following settings:

As the next step, you need to create a user in User&Device / User Definition settings:

In User&Device / User Groups you need to create an authentication group:

Walled Garden

Example

Each record needs to be created as follows: 

Merge these records into the groups based on the type. 

Wi-Fi Settings

Wi-Fi SSID settings for SOCIFI can be made under WiFi Controller / SSID  menu where you need to create a record with the following items. Below, you can see only the records we consider as important for SOCIFI. Feel free to add more parameters based on your experience and requirements. However, keep in mind that any change could affect the service and you should be aware how to revert it to this default settings if any issue is seen. 

IPv4 Policy

For access management you need to create three rules. 

1. The first rule for access to the DNS service to the master subnet. 
   

2. The second rule for allowing the access to selected sources for not-authenticated users
   
   
   
3. The third rule for allowing access anywhere for authenticated users
   

As the last step you need to adjust the second Inet_NO_auth rule thru CLI Console. You can find CLI Console e.g. under the admin menu in the upper right corner. 

config firewall policy
  edit <policy_id>
    set captive-portal-exempt enable
  end

The adjusted rule looks like this:

Add a new hotspot to SOCIFI Dashboard