Solution Guide: Fortinet Solutions RSSO (RADIUS Single Sign On)

[Andy_G]

Description

Introduction

FortiGate and FortiAuthenticator support the use of RADIUS Start, Stop, and Interim Update messages to authenticate and manage active users transparently. Carriers often use RADIUS servers tied into backend billing systems to record usage information. Enterprises often use RADIUS servers to authenticate VPN connections.

In both cases, the entities in question may want to provide UTM functions or other traffic restrictions to this traffic without having the user re-enter their credentials. Fortinet RSSO solutions can assist in deploying these solutions.



Contents

Introduction
Deployment Considerations
Requirements
RADIUS Accounting Direct to FortiGate (FortiGate RSSO)
* Steps and related CLI / Configuration Example
* Monitoring and Troubleshooting Examples
RADIUS Accounting via FortiAuthenticator to FortiGate (FortiAuthenticator RSSO to FSSO)
* FortiAuthenticator Steps and related CLI / Configuration Example
* FortiGate Steps and related CLI / Configuration Example
* Monitoring and Troubleshooting Examples
RADIUS Accounting via FortiAuthenticator RADIUS Accounting Proxy to Fortigate
(FortiAuthenticator RSSO to RSSO)
* FortiAuthenticator Steps and related CLI / Configuration Example
* FortiGate Steps and related CLI / Configuration Example
Related Information

Scope

FortiOS 5.0.6.This configuration example uses FortiOS 5.0.6 and FortiAuthenticator 3.0.1.