This enhancement adds GUI support to enable and disable the RADIUS MAC MPSK authentication function described in Wireless client MAC authentication and MPSK returned through RADIUS 7.0.2
Wireless clients can be authenticated using MAC authentication and Multiphase Shift Keying (MPSK) against a RADIUS server. The MPSK passphrases can be dynamically passed from the RADIUS server when the client MAC is authenticated by the RADIUS server, instead of statically storing them on the FortiGate. The passphases are cached on the FortiGate for future authentication, with a timeout period configured for each VAP.
- Go to WiFi & Switch Controller > SSIDs, and click Create New > SSID or edit an existing SSID.
- In Security mode, select WPA2 Personal.
Under Pre-shared Key Mode, select Multiple.
Enable RADIUS MAC authentication.
The Authentication timeout field loads. You can change the timer from 1800 to 86400 seconds.
Enable RADIUS server and select a server.
- When you are finished, click OK.