Fortinet black logo

Administration Guide

Open SSID for guest management

Copy Link
Copy Doc ID 2cb222d1-3405-11ea-9384-00505692583a:219021
Download PDF

Open SSID for guest management

  1. Click System > Quick Start.
  2. Select Network Settings > Network Devices from the steps on the left.
  3. Select a device in the Network Devices window.
  4. Click Wireless Security.
  5. On the SSID Mappings dialog, click Add.
  6. Click the drop-down arrow in the SSID Name field and select the Name of the SSID configuration to be added to the FortiNAC database. These names are read from the wireless device and represent existing SSID configurations.
  7. Click Guest Management .
  8. Click Modify next to the RADIUS Secret field. Enter the secret that is configured on the device.
  9. In the Guest Template field, select the template that is required for guest access using this SSID.
  10. In the Portal Configuration field, select the captive portal that should be presented to the user when the host connects to this SSID. If you are not using multiple portals or you do not have a specific portal for this group of guests, select Use Default.
  11. In the Access User Group field select the production User Group to be used for hosts accessing the Secure SSID. These are read from the wireless device and represent existing User Groups that have been configured on the wireless device.
  12. In the Isolation User Group field select the User Group to be used to isolate unknown hosts. These User Groups are read from the wireless device and represent existing User Groups that have been configured on the wireless device.
  13. Click OK to save the SSID configuration.
Settings

Field

Definition

SSID Name

Network name of the SSID configuration that includes all of the settings for the SSID, such as encryption method or VLANs.

Mapping Type

Device Onboarding: Indicates that this SSID Mapping will be used by known network users to register devices.

Guest Management: Indicates that this SSID Mapping will be used by guests to access the network via a guest account.

Guest Template

Guest template that must be associated with a guest account in order for the guest to connect on this SSID.

RADIUS Secret

Encryption key used by the RADIUS server to send authentication information. The RADIUS secret must be the same in FortiNAC RADIUS settings, on the SSID configuration and on the device itself.

Access User Group

Name or number of the network access identifier where a known host or device will be placed, such as, User Group, VLAN ID or VLAN Name.

Isolation User Group

Name or number of the network access identifier, such as, User Group, VLAN ID or VLAN Name, for the Isolation VLAN where an unknown host or device will be placed.

Open SSID for guest management

  1. Click System > Quick Start.
  2. Select Network Settings > Network Devices from the steps on the left.
  3. Select a device in the Network Devices window.
  4. Click Wireless Security.
  5. On the SSID Mappings dialog, click Add.
  6. Click the drop-down arrow in the SSID Name field and select the Name of the SSID configuration to be added to the FortiNAC database. These names are read from the wireless device and represent existing SSID configurations.
  7. Click Guest Management .
  8. Click Modify next to the RADIUS Secret field. Enter the secret that is configured on the device.
  9. In the Guest Template field, select the template that is required for guest access using this SSID.
  10. In the Portal Configuration field, select the captive portal that should be presented to the user when the host connects to this SSID. If you are not using multiple portals or you do not have a specific portal for this group of guests, select Use Default.
  11. In the Access User Group field select the production User Group to be used for hosts accessing the Secure SSID. These are read from the wireless device and represent existing User Groups that have been configured on the wireless device.
  12. In the Isolation User Group field select the User Group to be used to isolate unknown hosts. These User Groups are read from the wireless device and represent existing User Groups that have been configured on the wireless device.
  13. Click OK to save the SSID configuration.
Settings

Field

Definition

SSID Name

Network name of the SSID configuration that includes all of the settings for the SSID, such as encryption method or VLANs.

Mapping Type

Device Onboarding: Indicates that this SSID Mapping will be used by known network users to register devices.

Guest Management: Indicates that this SSID Mapping will be used by guests to access the network via a guest account.

Guest Template

Guest template that must be associated with a guest account in order for the guest to connect on this SSID.

RADIUS Secret

Encryption key used by the RADIUS server to send authentication information. The RADIUS secret must be the same in FortiNAC RADIUS settings, on the SSID configuration and on the device itself.

Access User Group

Name or number of the network access identifier where a known host or device will be placed, such as, User Group, VLAN ID or VLAN Name.

Isolation User Group

Name or number of the network access identifier, such as, User Group, VLAN ID or VLAN Name, for the Isolation VLAN where an unknown host or device will be placed.