User groups | Fortinet v3.0 MR7 instruction

User groups

Users/peers and user groups

	FortiOS v3.0 MR7 User Authentication User Guide
46	01-30007-0347-20080828

Image 46

Fortinet v3.0 MR7 manual User groups

Contents

E R G U I D E FortiOS v3.0 MR7 User Authentication User Guide Trademarks Contents Index Configuring authenticated accessUsers/peers and user groups Creating local users Creating peer users About authentication Introduction Web-based user authentication User’s view of authenticationVPN client-based authentication FortiGate administrator’s view of authentication See Creating local users on See Creating peer users on Authentication servers See Configuring user groups on Users Public Key Infrastructure PKI authenticationPeers User groups Firewall policies Authentication timeoutAbout this document VPN tunnels FortiGate documentation Name field, type adminTypographic conventions FortiGate Administration Guide Related documentation FortiMail documentation FortiManager documentationFortiClient documentation FortiAnalyzer documentation Fortinet Knowledge Center Customer service and technical supportFortinet Tools and Documentation CD Comments on Fortinet technical documentation Authentication servers Radius servers Configuring the FortiGate unit to use a Radius server Radius attributes sent in Radius accounting message Primary Server Name/IP Primary Server Secret Edit icon Edit a Radius server configuration Group Ldap servers Ldapsearch -x objectclass= Configuring the FortiGate unit to use an Ldap server Common Name PasswordServer Port Identifier Protocol To configure the FortiGate unit for Ldap authentication CLIEdit Certificate Using the Query icon Ldap server Distinguished Name Query tree TACACS+ servers Ascii Authentication Type Server Key Directory Service servers Groups Create NewDomain Fsae Collector IP Directory Service server configuration Name Fsae Collector IP/Name Port CLI Example Directory Service server list Directory Service servers Users/peers and user groups Users/peers Creating local users User type AuthenticationTo create a local user web-based manager Go to User Local Delete icon Edit icon To view a list of all local users, go to User LocalTo create a local user CLI Creating peer users To remove a user from the FortiGate unit configuration CLIDelete icon To view a list of PKI peer users, go to User PKI Authenticating peer userSubject To create a peer user for PKI authentication CLI Remove PKI peer user User groups Directory Service user groupsFirewall user groups SSL VPN user groups Protection profiles Select Create New and enter the following information Configuring user groupsFirewall Members Configuring Directory Service user groupsTo create a firewall user group CLI FortiGuard Web Configuring SSL VPN user groups Available Users/Groups or Available Members To create a peer group CLI Configuring Peer user groupsViewing a list of user groups Group Name Config user group delete groupname End User groups Enter the Idle Timeout value seconds Select Apply Authentication timeoutAuthentication protocols Telnet Firewall policy authentication Authentication Settings To configure authentication for a firewall policy Configuring authentication for a firewall policyAuthentication is an Advanced firewall option Go to Firewall Policy Firewall policy order Firewall Policy Move To Source Interface Configuring authenticated access to the InternetZone Select Enable SSL-VPN and enter information as follows VPN authenticationConfiguring authentication of SSL VPN users Go to VPN SSL Require Client Certificate Default RC4128Server Certificate Encryption Key Algorithm To configure authentication for an SSL VPN CLI Select Enable Pptp Configuring authentication of VPN peers and clientsConfiguring authentication of Pptp VPN users/user groups Select Require Client Certificate, and then select Apply To configure authentication for a Pptp VPN CLI Configuring authentication of L2TP VPN users/user groupsConfiguring authentication of remote IPSec VPN users To configure authentication for an L2TP VPN CLI Only users with passwords on the FortiGate unit To configure user group authentication for dialup IPSec CLIRemote Gateway Configuring XAuth authentication IPSec configuration for dialup users XAuth To configure authentication for a dialup IPSec VPN CLIRemote Gateway Authentication Method Server Type VPN authentication Index 01-30007-0347-20080731 MS-CHAP VSA