MR Access Point Integration with FortiGate

[DavideUrsino]

Good Morning to all,

I have a question reguarding authentication with Firewall FortiGate as Access Control,

I would like the FortiGate took over the role of "WiFi controller" and centralized all the client authorization,

Is it also possible to tag traffic from clients with VLANs created on Fortigate?

Thanks in advance for your reply

[CMR]

If the Fortigate can be a radius server then you can use it for wireless client authentication. You can't use it as a full wireless controller as the Meraki cloud is that.

[DavideUrsino]

Thx for the quick answer.
with the authentication by RADIUS server, the FortiGate will decide only the access but the security policies will be settings on the Meraki cloud or will those on the fortigate be applied?

[Philip D'Ath · Accepted solution]

You can either use the Tunnel-Private-Group-ID attribute to dynamically specify the VLAN the wireless user should be placed into:

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise#Supported_RADIUS_Attributes

Or you can create a Meraki group policies assigning whatever you want. Then use the Filter-Id attribute to specify which group policies to assign to whatever users you want.

https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Using_RADIUS_Attributes_to_Apply_Group_Policies