How to Configure Wireless Radius Server authentication on FortiGate Firewall (FortiAP) with Windows

You can perform user authentication when the wireless client joins the wireless network and when the wireless user communicates with another network through a firewall policy.
WPA-Enterprise and captive portal security provide separate credentials for each user. User accounts can be managed through FortiGate user groups or an external RADIUS authentication server.
Join the discussion on telegram channel: t.me/cybow_point

[@capcata]

Important tip on production servers: At 3:55 click on edit PEAP and select the correct certificate (Or the same in network policy if you not override in connection policies).

[@Incesuu]

Thanks OGA

[@CybowPoint]

You're welcome, kindly subscribe

[@chrly61]

hello ! thanks for the video, can we disable the captif portal after log with the 802.1x local credenciale ? thanks ! :D

[@ebosac8813]

Limiting the number of devices a username and password can be used on a Fortinet captive portal setup.
My question

[@rhielx]

Your Video is very good. I have some question, can we integrated between Fortigate as Internet Gateway, Mikrotik as AP and WIndows NPS as Radius Server

[@CybowPoint]

Yes you should be able to

[@rhielx]

@@CybowPoint Is there any video sample related my question.

[@CybowPoint]

@@rhielx I'm not sure of that... I've not seen one yet.

[@JK-qz1sw]

a bit of chaos, but overall ok

[@CybowPoint]

Lol
Great

[@JK-qz1sw]

How would you skip Forti www authentication (no password browsing websites) and keep only WiFi username/password to connect to AP?
ruclips.net/video/jdkIvw1tohc/видео.html (16:17min) of your video 😀

[@CybowPoint]

It was getting too long and I needed to round up.quickly.... all the configuration processes shows it works so I left it that way