FortiSwitch Standalone Mode Administration Guide

802.1x

This chapter contains information on using 802.1x protocol.

Authenticating with a RADIUS server

  1. Creating a RADIUS user group:

config user radius edit <name> set server <address>

end

end

  1. Creating a user group:

config user group edit <name> set member <list> config match edit 1 set group-name <name> set server-name <name>

end

end

end

end

  1. Configuring the switch interface for 802.1x config switch interface edit <interface> set security-mode 802.1X set security-groups <name>

end

end

  1. Configuring an STP instance config switch stp instance edit <name> set priority <integer>

end

end

Example Configuration

The following is an example configuration for a RADIUS user group, with the CLI syntax shown to create it.

  1. Creating a RADIUS user group config user radius edit R1 set server “192.160.10.98”

next

end

  1. Creating a user group config user group edit 802group set member user1 R1 config match edit 1 set group-name 802group set server-name R1

end

end

end end

This entry was posted in Administration Guides, FortiSwitch and tagged , , , on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.