Support RADIUS NAS-ID on FortiAPs in standalone mode

This information is also available in the FortiWiFi and FortiAP 7.6 Configuration Guide: Custom RADIUS NAS-ID

This features requires FortiAP to run firmware 7.6.0 or later.

This feature enables the FortiOS WiFi controller to push the RADIUS nas-id-type setting to a managed FortiAP. The FortiAP can then forward the NAS-Identifier value in an Access-Request packet when authenticating a wireless client with a remote RADIUS server.

For more information about configuring NAS-IDs, refer to Custom RADIUS NAS-ID in the FortiWiFi and FortiAP Configuration Guide.

Example topology

To configure and push a NAS-ID to a FortiAP in standalone mode:

1. From FortiOS, configure the RADIUS server with a NAS-ID. You can use custom or hostname NAS-IDs.

   config user radius
     edit "wifi-radius"
       set server "172.16.200.55"
       set secret ENC
       set nas-ip 172.16.200.9
       set nas-id-type custom
       set nas-id "AP-431F"
     next
   end

2. Apply the RADIUS server to an SSID.

   config wireless-controller vap
     edit "stand-vap"
       set ssid "FOS_101F_Stand_Ent_Radius"
       set security wpa2-only-enterprise
       set auth radius
       set radius-server "wifi-radius"
       set local-standalone enable
       set local-bridging enable
       set schedule "always"
     next
   end

3. When the client connects to the SSID, the NAS-Identifier attribute you configured, AP-431F, will be sent in an Access-Request packet.