DualShield Configuration for Fortigate VPN (IPSec)

Create a RADIUS logon procedure

1. Login to the DualShield Administration Console
2. In the main menu, select Authentication > Logon Procedure
3. Click the Create button on the toolbar
4. Enter a name and select RADIUS as the type
   
   
   
   
5. Click “Save”
6. Click the Context Menu icon of the newly created logon procedure, select Logon Steps and  a new section will be added to the page;
   
   
   
   
7. To add a logon step click on the  button on the top left
8. Choose Static Password
   
   
   
   
9. Click Save
10. Click Add again to add a second Logon Procedure
11. Select OOBA Push as the second step

  12. Click Save

Create a RADIUS application

1. In the main menu, select Authentication > Applications
2. Click the Create button on the toolbar
3. Enter a name and select a realm
4. Select the newly created logon procedure
   
   
   
   
5. Click Save
6. Click the Context menu of the newly created application, select Agent and then select the Radius agent.
   
   
   
   
7. Click Save 
8. Click on the corresponding Elipses and choose Self Test from the menu.

Register Network Policy Server as a Radius Client

1. In the main menu, select RADIUS > Client
2. Click the "Create" button on the top right.
   
   
   
   
   
3. Enter a friendly name
4. Click on the magnifying glass and select the Radius Server
5. Select the Application from the drop-down list.
6. Click on the Cogwheel to the right to enter the IP address of the Network Policy Server and click "Add" then "Save"
7. Enter the Shared Secret, which will be used in FortiGate's Radius Server configuration.
8. Select PAP, Chap & MSCHAP2 as the Authentication Protocols
9. Click Save