Configuring RADIUS settings

Before any device can connect to the FortiAuthenticator, it must be configured as a RADIUS client and assigned to a RADIUS policy. Until this is done, FortiAuthenticator will ignore authentication requests. You must repeat this process for each device that you wish to authenticate against the FortiAuthenticator.

Adding the RADIUS client

To configure the RADIUS client:

1. In Authentication > RADIUS Service > Clients, click Create New.
2. Enter a unique name for the device and the IP from which it will be connecting.
   This is the IP address of the device itself, not the IP that users will be authenticating from.
3. Click OK to save changes to the RADIUS client.

   

Creating the RADIUS policy

To create the RADIUS policy:

1. In Authentication > RADIUS Service > Policies, click Create New.
2. For RADIUS clients, enter an identifiable policy name and description, and add the newly created RADIUS client to the policy. Click Next.

   

3. For RADIUS attribute criteria, no settings are required. Click Next.
4. For Authentication type, select Verify all configured authentication factors, and click Next.
5. For Identity source, choose a username format, and select the local realm. Click Next.

   

6. For Authentication factors, select Mandatory two-factor authentication, and click Next.
   In this menu you can also enable the option to Allow FortiToken Mobile push notifications.
7. For RADIUS response, review the policy, and click Save and exit.