Configure the RADIUS server on FortiGate

To configure the RADIUS server:

1. In FortiGate, go to User & Authentication > RADIUS Servers, and click Create New.
2. Under New RADIUS Server, set the following:
   1. Name: Enter a name for the RADIUS server, for example FAC.
   2. NAS IP: Enter the Network Access Server (NAS) IP. This should ideally be the IP from the interface/VLAN FortiAuthenticator is on.
3. Under Primary Server, set the following:
   1. IP/Name: Enter the FortiAuthenticator IP address.
   2. Secret: Enter the secret matching the one configured on FortiAuthenticator.
4. Click Test Connectivity to test if the connection is correctly configured, and click OK.