Scribd
Upload
147 views7 pages

Setting Up A Temporary Guest WiFi User

This document provides instructions for setting up a temporary guest WiFi network on a FortiGate with a FortiAP access point. It involves connecting the FortiAP to the FortiGate's DMZ interface, creating a guest user group, configuring a captive portal SSID for guest users, setting a security policy to allow internet access, and optionally creating a guest user account for receptionists to distribute login credentials. When complete, guests will be able to login through the captive portal and have a limited internet connection for four hours.

Uploaded by

Vitor Tapadas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
147 views7 pages

Setting Up A Temporary Guest WiFi User

This document provides instructions for setting up a temporary guest WiFi network on a FortiGate with a FortiAP access point. It involves connecting the FortiAP to the FortiGate's DMZ interface, creating a guest user group, configuring a captive portal SSID for guest users, setting a security policy to allow internet access, and optionally creating a guest user account for receptionists to distribute login credentials. When complete, guests will be able to login through the captive portal and have a limited internet connection for four hours.

Uploaded by

Vitor Tapadas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 7

Setting up a temporary guest WiFi user

In this example, a temporary user account will be created and distributed to a guest
user, allowing the guest to have wireless access to the Internet.

1. Connecting the FortiAP unit using the DMZ interface


2. Creating a WiFi guest user group
3. Creating an SSID using a captive portal
4. Creating a security policy to allow guest users Internet
access
5. Creating a guest user management account
6. Results

Internet

Internal Network

FortiGate

Guest WiFi User

FortiAP

Connecting the FortiAP unit


using the DMZ interface
Go to System > Network > Interfaces.
Select the dmz interface.
Set the dmz interface to be Dedicated to
FortiAP.

Connect the FortiAP to the DMZ interface.


Go to WiFi Controller > Managed Access
Points > Managed FortiAPs and right-click
on the FortiAP unit. Select Authorize.

Using the DMZ interface creates a secure


network that will only grant access if it is
explicitly allowed. This allows guest access
to be carefully controlled.

Creating a WiFi guest user


group
Go to User & Device > User > User
Groups.
Create a new group, setting Type to Guest,
User ID to Email, and Password to AutoGenerate.
These guest user accounts are temporary
and will expire four hours after the first login.

Creating an SSID using a


captive portal
Go to WiFi Controller > WiFi Network >
SSID.
Create a new SSID. Set Traffic Mode to
Tunnel to Wireless Controller and enable
DHCP Server, taking note of the IP range
assigned.
Under WiFi Settings, set Security Mode
to Captive Portal and User Groups to the
new guest user group.
A Captive Portal will intercept connections
to the wireless network and display a login
screen on the guest users device. The guest
must then authenticate with the portal to gain
access to the wireless network.

Creating a security policy


to allow guest users Internet
access
Go to Firewall Objects > Address >
Addresses.
Create a firewall address for the guest WiFi
users. Use the DHCP IP range for Subnet/IP
Range and set the Interface to the wireless
interface.

Go to Policy > Policy > Policy.


Create a security policy allowing guest users
to have wireless access to the Internet.
Set Incoming Interface to the wireless
interface, Outgoing Interface to your
Internet-facing interface, and Source
Address to the guest WiFi users group.

Creating a guest user


management account
Optionally, you can create an administrator
that is used only to create guest accounts.
Access to this account can be given to a
receptionist, to simply the process of making
new accounts.
Go to System > Admin > Administrators.
Create a new account. Set the Type to
Regular and set a Password. Enable
Restrict to Provision Guest Accounts
and set Guest Groups to the WiFi guest
user group.

Results
Log in to the FortiGate unit using the guest
user management account. Go to User &
Device > User > Guest Management and
select Create New.
Use a guests email account to create a new
user ID.

The FortiGate unit generates a user account


and password. This account is only valid for
four hours (the default time limit for the guest
user group).

The guest can now log in using the FortiGate


Captive Portal. Once authenticated, the
guest is able to connect wirelessly to the
Internet.

To verify that the guest user logged in


successfully, go to WiFi Controller >
Monitor > Client Monitor.

Go to Policy > Monitor > Policy Monitor


and verify the active sessions.

Select one of the bars to view more


information about a session.

You might also like