Fortinet black logo

Administration Guide

Home FortiAuthenticator 6.5.1 Administration Guide
6.5.1
6.6.1
6.6.0
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.2
6.2.1
6.2.0
6.1.3
6.1.2
6.1.1
6.1.0
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.5.0
5.4.0
5.3.0
5.2.0
5.1.0
5.0.0
4.3.0
4.2.1
4.2.0

RADIUS sessions

RADIUS sessions

You can monitor RADIUS activity and log out users.

To view currently active RADIUS accounting sessions, go to Monitor > Authentication > RADIUS Sessions.

The page shows the user's name, type, IP address, MAC address, and RADIUS client, duration, and data usage columns. More specifically, Accounting-Start Interim-Update packets are received. A user session is removed from this table after the Accounting-Stop packet is received, or the session doesn't receive any RADIUS accounting packets before the timeout period expires.

To log out a user as an admin, select the user from the table and select Logoff.

There are two pages to view: Active and Cumulative. Select Cumulative to view statistics for user who have a time and/or data usage limit. This information may be accumulated through a succession of RADIUS accounting sessions. A user's stats are removed when explicitly deleted by the administrator (by selecting the user and selecting Delete), or when the user's account itself is deleted.

Select Clear to clear the cumulative RADIUS accounting sessions in the Cumulative tab.

While administrators can log out users, they can also reset a user's time and/or data usage using Reset Usage.

For more information on user time and data usage limits, see Usage profile.

RADIUS accounting sessions can be configured to timeout after a specific time period has been reached. To do so, see General.

RADIUS accounting features

FortiAuthenticator offers three separate RADIUS accounting features:

  1. RADIUS accounting proxy: As the name implies, this feature relays, i.e., proxies RADIUS accounting messages between external RADIUS accounting clients and servers. Depending on its configuration, FortiAuthenticator may add/delete/modify the attributes of the RADIUS accounting requests it proxies.
  2. RADIUS accounting for FSSO: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to detect end-user logins, logouts, and IP address updates to create/update/delete FSSO sessions.
  3. RADIUS accounting for usage profile: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to track and restrict end-users' time and/or data usage.

Features 1 and 2 process the RADIUS accounting messages received on the UDP port specified by the Accounting SSO port option in Authentication > RADIUS Service > Services.

Feature 3 processes the RADIUS accounting messages received on the UDP port specified by the Accounting monitor port option in Authentication > RADIUS Service > Services.
Previous
Next

RADIUS sessions

You can monitor RADIUS activity and log out users.

To view currently active RADIUS accounting sessions, go to Monitor > Authentication > RADIUS Sessions.

The page shows the user's name, type, IP address, MAC address, and RADIUS client, duration, and data usage columns. More specifically, Accounting-Start Interim-Update packets are received. A user session is removed from this table after the Accounting-Stop packet is received, or the session doesn't receive any RADIUS accounting packets before the timeout period expires.

To log out a user as an admin, select the user from the table and select Logoff.

There are two pages to view: Active and Cumulative. Select Cumulative to view statistics for user who have a time and/or data usage limit. This information may be accumulated through a succession of RADIUS accounting sessions. A user's stats are removed when explicitly deleted by the administrator (by selecting the user and selecting Delete), or when the user's account itself is deleted.

Select Clear to clear the cumulative RADIUS accounting sessions in the Cumulative tab.

While administrators can log out users, they can also reset a user's time and/or data usage using Reset Usage.

For more information on user time and data usage limits, see Usage profile.

RADIUS accounting sessions can be configured to timeout after a specific time period has been reached. To do so, see General.

RADIUS accounting features

FortiAuthenticator offers three separate RADIUS accounting features:

  1. RADIUS accounting proxy: As the name implies, this feature relays, i.e., proxies RADIUS accounting messages between external RADIUS accounting clients and servers. Depending on its configuration, FortiAuthenticator may add/delete/modify the attributes of the RADIUS accounting requests it proxies.
  2. RADIUS accounting for FSSO: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to detect end-user logins, logouts, and IP address updates to create/update/delete FSSO sessions.
  3. RADIUS accounting for usage profile: FortiAuthenticator uses the RADIUS session information from the RADIUS accounting requests to track and restrict end-users' time and/or data usage.

Features 1 and 2 process the RADIUS accounting messages received on the UDP port specified by the Accounting SSO port option in Authentication > RADIUS Service > Services.

Feature 3 processes the RADIUS accounting messages received on the UDP port specified by the Accounting monitor port option in Authentication > RADIUS Service > Services.
Previous
Next