sending Group-Name in accounting Packets to FortiGate

Somanath Mishra somanath.mishra at planetsbrain.com
Tue Sep 18 17:02:24 CEST 2018


yes, FortiGate need "ATTRIBUTE Fortinet‐Group‐Name 1 string". So where can
i modify to send in packet? Do i need to modify dictionary files? please
suggest me.

On Tue, September 18, 2018 7:40 pm, Alan DeKok wrote:
>

> On Sep 18, 2018, at 10:07 AM, Somanath Mishra
> <somanath.mishra at planetsbrain.com> wrote:
>
>> I am forwarding accounting packets to fortiGate , but Group-Name is
>> missing in this packet.
>
> Because it's not an attribute that can go into a RADIUS packet.
>
>
> And what Fortigate documentation said to send it Group-Name?  The system
> receiving the attribute has to know what to do with the attribute.
>
> You can't just invent an attribute, send it to a system, and expect the
> system to do something with it.
>
>> Group-Name is coming in radacct table. So to
>> show Group-Name i modified radacct table, after that it showed. So same
>> need to do , i guess. Can you suggest where need to modify to get
>> Group-Name in forwarding packet?
>>
>
> Read the Fortigate documentation to see what attributes it supports.
> Then, configure FreeRADIUS to send those attributes.
>
>
> And don't send Group-Name.  Fortigate doesn't support it.
>
>
> Alan DeKok.
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list