Fortinet Document Library

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Manage settings

The RADIUS Settings View allows you to add or modify RADIUS server profiles for individual network devices. For devices using 802.1x, accept the default primary and secondary RADIUS servers or you can select profiles for each device within its Model or Global Model Configuration view. See Model configuration for additional information.

The ability to map a domain name to a RADIUS server profile also functions within the context of 802.1x. It provides RADIUS server selection based on the domain of the authenticating user. Users authenticating from different Microsoft domains can be directed to separate RADIUS servers configured for those domains.

Users authenticating from a domain, can only authenticate via the RADIUS server profile configured for that domain. Multiple RADIUS server profiles can be configured for each domain and searched for the authenticating user. RADIUS servers are searched in order from the top of the list of servers down. .

RADIUS Settings can be accessed from System > Settings or from System > Quick Start > Authentication Settings, however configuration steps point you to System > Settings.

Note

FortiNAC's capacity for processing RADIUS requests is approximately 60 requests per second. Capacity is affected by the use of other features in the program such as the Persistent Agent or MAC Notification Traps. Any requests that are not immediately processed are placed in queue. After 5 seconds any unprocessed requests are discarded. If you are in an environment where you expect to receive more than 60 RADIUS requests per second you may need additional FortiNAC appliances to handle the load.

Manage settings

The RADIUS Settings View allows you to add or modify RADIUS server profiles for individual network devices. For devices using 802.1x, accept the default primary and secondary RADIUS servers or you can select profiles for each device within its Model or Global Model Configuration view. See Model configuration for additional information.

The ability to map a domain name to a RADIUS server profile also functions within the context of 802.1x. It provides RADIUS server selection based on the domain of the authenticating user. Users authenticating from different Microsoft domains can be directed to separate RADIUS servers configured for those domains.

Users authenticating from a domain, can only authenticate via the RADIUS server profile configured for that domain. Multiple RADIUS server profiles can be configured for each domain and searched for the authenticating user. RADIUS servers are searched in order from the top of the list of servers down. .

RADIUS Settings can be accessed from System > Settings or from System > Quick Start > Authentication Settings, however configuration steps point you to System > Settings.

Note

FortiNAC's capacity for processing RADIUS requests is approximately 60 requests per second. Capacity is affected by the use of other features in the program such as the Persistent Agent or MAC Notification Traps. Any requests that are not immediately processed are placed in queue. After 5 seconds any unprocessed requests are discarded. If you are in an environment where you expect to receive more than 60 RADIUS requests per second you may need additional FortiNAC appliances to handle the load.