Step 3: Configure RADIUS in FortiNAC
Configure the appropriate RADIUS server option.
-
Proxy
-
Authentication: FortiNAC processes RADIUS MAC but proxies 802.1x EAP authentication to a customer-owned (external) RADIUS server.
-
Accounting: FortiNAC proxies accounting traffic to a customer-owned (external) RADIUS server.
-
For more information on this option, see Proxy in the Administration Guide.
-
-
Local
-
Authentication: FortiNAC’s Local RADIUS Server processes RADIUS MAC and 802.1x EAP authentication without the need to proxy to an external RADIUS server.
-
Accounting: The Local RADIUS server does not provide accounting. If accounting is required, FortiNAC can be configured to proxy Accounting traffic to an external RADIUS server.
-
For more information on this option, see Local RADIUS Server in the Administration Guide.
-
These modes can be configured in FortiNAC on a per-device basis.