#Fortinet support help page password#

If the user is not a System or SPP Admin, select the Default SPP Policy Group from the drop-down. No - Neither system admin nor admin to SPP. This option is available only if Is System Admin is set to 'No'. If the user is regarded as a System Administrator with access to all SPPs, select Yes or else click No. Click the Test button before you save the configuration.ĭefault Access Strategy for remote RADIUS user

#Fortinet support help page password#

Select to test connectivity using a test username and password specified next.

MSCHAP2-Microsoft CHAP version 2 (defined in RFC 2759).

MSCHAP-Microsoft CHAP (defined in RFC 2433).

CHAP-Challenge Handshake Authentication Protocol (defined in RFC 1994).

Auto-If you leave this default value, the system uses MSCHAP2.

RADIUS server shared secret – maximum 116 characters (special characters are allowed). IP address or FQDN of a backup RADIUS server.

IP address or FQDN of the primary RADIUS server. Select to enable RADIUS server configuration or deselect to disable.

Complete the configuration as described in the table below.

Go to System > Authentication > RADIUS.

You must have Read-Write permission for System settings.

If the user does not have a configuration on the System > Admin > Administrator page, these assignments are obtained from the Default Access Strategy settings described below. If authentication succeeds, and the user has a configuration on the System > Admin > Administrator page, the SPP or SPP Policy Group assignment, trusted host list, and access profile are applied. If RADIUS is enabled, when a user logs in, an authentication request is made to the remote RADIUS server. You also specify the SPP or SPP Policy Group assignment, trusted host list, and access profile for that user.

When RADIUS is selected, no local password option is available. You can configure administrator authentication using a Remote Authentication Dial-In User Service (RADIUS) server.Īfter you complete the RADIUS server configuration and enable it, you can select it when you create an administrator user on the System > Admin > Administrator page. System Management > Configuring RADIUS authentication Configuring RADIUS authentication