Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiAuthenticator 6.4.8 Administration Guide
    6.4.8
    6.6.2
    6.6.1
    6.6.0
    6.5.5
    6.5.4
    6.5.3
    6.5.2
    6.5.1
    6.5.0
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.2
    6.2.1
    6.2.0
    6.1.3
    6.1.2
    6.1.1
    6.1.0
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.5.0
    5.4.0
    5.3.0
    5.2.0
    5.1.0
    5.0.0
    4.3.0
    4.2.1
    4.2.0

    RADIUS sessions

    RADIUS sessions

    You can monitor RADIUS activity and log out users.

    To view currently active RADIUS accounting sessions, go to Monitor > Authentication > RADIUS Sessions.

    The page shows the user's name, type, IP address, MAC address, and RADIUS client, duration, and data usage columns. More specifically, Accounting-Start Interim-Update packets are received. A user session is removed from this table after the Accounting-Stop packet is received, or the session doesn't receive any RADIUS accounting packets before the timeout period expires.

    To log out a user as an admin, select the user from the table and select Logoff.

    There are two pages to view: Active and Cumulative. Select Cumulative to view statistics for user who have a time and/or data usage limit. This information may be accumulated through a succession of RADIUS accounting sessions. A user's stats are removed when explicitly deleted by the administrator (by selecting the user and selecting Delete), or when the user's account itself is deleted.

    Select Clear to clear the cumulative RADIUS accounting sessions in the Cumulative tab.

    While administrators can log out users, they can also reset a user's time and/or data usage using Reset Usage.

    For more information on user time and data usage limits, see Usage profile.

    RADIUS accounting sessions can be configured to timeout after a specific time period has been reached. To do so, see General.

    RADIUS accounting features

    FortiAuthenticator offers three separate RADIUS accounting features:

    1. RADIUS accounting proxy: As the name implies, this feature relays, i.e., proxies RADIUS accounting messages between external RADIUS accounting clients and servers. Depending on its configuration, FortiAuthenticator may add/delete/modify the attributes of the RADIUS accounting requests it proxies.
    2. RADIUS accounting for FSSO: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to detect end-user logins, logouts, and IP address updates to create/update/delete FSSO sessions.
    3. RADIUS accounting for usage profile: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to track and restrict end-users' time and/or data usage.

    Features 1 and 2 process the RADIUS accounting messages received on the UDP port specified by the Accounting SSO port option in Authentication > RADIUS Service > Services.

    Feature 3 processes the RADIUS accounting messages received on the UDP port specified by the Accounting monitor port option in Authentication > RADIUS Service > Services.
    Previous
    Next

    RADIUS sessions

    RADIUS sessions

    You can monitor RADIUS activity and log out users.

    To view currently active RADIUS accounting sessions, go to Monitor > Authentication > RADIUS Sessions.

    The page shows the user's name, type, IP address, MAC address, and RADIUS client, duration, and data usage columns. More specifically, Accounting-Start Interim-Update packets are received. A user session is removed from this table after the Accounting-Stop packet is received, or the session doesn't receive any RADIUS accounting packets before the timeout period expires.

    To log out a user as an admin, select the user from the table and select Logoff.

    There are two pages to view: Active and Cumulative. Select Cumulative to view statistics for user who have a time and/or data usage limit. This information may be accumulated through a succession of RADIUS accounting sessions. A user's stats are removed when explicitly deleted by the administrator (by selecting the user and selecting Delete), or when the user's account itself is deleted.

    Select Clear to clear the cumulative RADIUS accounting sessions in the Cumulative tab.

    While administrators can log out users, they can also reset a user's time and/or data usage using Reset Usage.

    For more information on user time and data usage limits, see Usage profile.

    RADIUS accounting sessions can be configured to timeout after a specific time period has been reached. To do so, see General.

    RADIUS accounting features

    FortiAuthenticator offers three separate RADIUS accounting features:

    1. RADIUS accounting proxy: As the name implies, this feature relays, i.e., proxies RADIUS accounting messages between external RADIUS accounting clients and servers. Depending on its configuration, FortiAuthenticator may add/delete/modify the attributes of the RADIUS accounting requests it proxies.
    2. RADIUS accounting for FSSO: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to detect end-user logins, logouts, and IP address updates to create/update/delete FSSO sessions.
    3. RADIUS accounting for usage profile: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to track and restrict end-users' time and/or data usage.

    Features 1 and 2 process the RADIUS accounting messages received on the UDP port specified by the Accounting SSO port option in Authentication > RADIUS Service > Services.

    Feature 3 processes the RADIUS accounting messages received on the UDP port specified by the Accounting monitor port option in Authentication > RADIUS Service > Services.
    Previous
    Next