Click the down arrow on the Template box and select the type of template you want to use for the account.

Information required to create account

Enter the E-mail address of the guest or contractor. This is the only personal information you are required to enter.

A password is automatically generated for this guest. Click Generate Password to generate a new password if necessary or enter a password manually. Password must meet the minimum length designated in the selected guest template.

FortiNAC does not recognize or restrict system-generated passwords that may be offensive.

If LDAP is specified as the authentication method in the selected guest template, the Password field is not displayed.

Click the calendar icon to the right to select a date or enter the date and time (using a 24-hour clock format) the account will become active for the guest or contractor.

Click the calendar icon to the right to select a date or enter the date and time (using a 24-hour clock format) the account will expire. At that time, the guest or contractor will no longer be able to access the network.

This defaults to the date and time calculated based on the number of hours entered in the Account Duration field in the guest template. If this field is empty, no account duration has been entered in the guest template. Administrators that have an administrator profile with custom guest/contractor account permissions will be restricted to choosing an end date that is within the bounds of the "Create accounts active for days (maximum)" setting as defined in the administrator profile. For example, if your administrator profile has a "Create accounts active for days" set to 20, you will not be able to choose an end date that is more than 20 days ahead of the chosen start date.

This date sets the user expiration date for the guest. The host registered to this guest inherits the setting for registered hosts in Global Aging. When the user expires, both the user and host are removed from the database. If the host expires first, then only the host is removed from the database.

There are two methods that work together for determining the length of time a guest account is active. The shortest duration of the two is the one that is used to remove a guest account from the database.

Account Duration (Hours): Option included in the guest template to limit the time a guest account created with this template remains in the database. If this is blank, the guest account end date is used. The Account Duration starts only when the guest user first logs in. For example, you could create a guest account with a date range that spans one week and if the account duration was 24 hours, they would be able to log in for one 24 hour period any time during that week

Account End Date: Option included on the Add Guest Account dialog to determine the date on which the guest account expires. This field is required when a guest account is created.

Additional account information

The guest or contractor’s required personal data and the fields below may be entered by the sponsor before the arrival of the guests, or may be left for the individual guests to fill out themselves.

The Required Fields under the Additional Account Information heading are designated with an asterisk (*). These fields must be filled in before the guest or contractor will be granted network access.

The computer serial number, manufacturer’s name, and model number, or any other asset identifier of the guest or contractor’s computing platform. There may be other Administrator-defined fields here as well, such as license plate. This field has a maximum length of 80.

In this example, these fields were added when the template was created and marked as Required.