Page History

...

1. Login to the DualShield Administration Console
2. In the main menu, select Authentication > Logon Procedure
3. Click the Create button on the toolbar
4. Enter a name and select RADIUS as the type
   
   
   
   
5. Click “Save”
6. Click the Context Menu icon of the newly created logon procedure, select Logon Steps and  and a new section will be added to the page;
   
   
   
   
7. To add a logon step, click on the the button on the top left
8. Choose Static Password
   
   
   
   
9. Click Save
10. Click Add again to add a second Logon Procedure
11. Select OOBA Push as the second step

...

Create a RADIUS application

1. In the main menu, select "select Authentication | > Applications"
2. Click the "the Create" button  button on the toolbar
3. Enter a name and select a realm
4. Select the newly created logon procedure
   Image Removed
   Image Added
   
   
5. Click "Click Save"
6. Click the Context menu of the newly created application, select "select Agent" and  and then select the Radius agent.
   
   
   Click "Save" 
   
7. Click Save 
8. Click on the corresponding Elipses ellipses and choose "Self Test" from  from the menu.

Register

...

Fortigate as a Radius Client

1. In the main menu, select "select RADIUS | > Client"
2. Click the "Create" button on the top right.
   Image Removed
   Image Added
   
   
   
3. Enter a friendly name
4. Click on the magnifying glass and select the Radius Server
5. Select the Application from the drop-down list.
6. Click on the Cogwheel to the right to enter the IP address of the Network Policy Server Fortigate server and click "Add" then "Save"
7. Enter the Shared Secret, which will be used in Network Policy ServerFortiGate's Radius Server configuration.
8. Enter the NAS IP, which in this case will be the connection address used by FortiClient
9. Select PAP, Chap & MSCHAP2 Select "PAP" "Chap" & "MSCHAP2" as the Authentication Protocols
10. Click "Click Save"