Course 203 - Fortinet Wireless

Module 6 Putting it all together

Fortinet Wireless Course 203

Module 6 Putting it all together

2012 Fortinet Training Services. This training may not be recorded in any medium, disclosed, copied, reproduced or distributed to anyone without prior written consent of an authorized representative of Fortinet.

Objectives Configure WPA Enterprise authentication using FortiAuthenticator as the authentication server Configure a full-mesh full mesh wireless network

01-05002-RevA-0203-20130520

Course 203 - Fortinet Wireless

Module 6 Putting it all together

FortiAuthenticator Used to provide 802.1X authentication for wireless clients RADIUS Authentication and Certificate Management features will be configured for this lab

FortiAuthenticator: Key Functionality

Authentication and Authorization
RADIUS LDAP External LDAP integration

Two Factor Authentication

FortiToken 200 FortiToken Mobile Tokenless SMS and e-mail

FortiAuthenticator
Fortinet Authentication Server, Identity Management and User Access Control

Certificate Management
x.509 Certificate signing Revocation

Fortinet Single Sign On

Active Directory Polling Carrier RADIUS Integration

01-05002-RevA-0203-20130520

Course 203 - Fortinet Wireless

Module 6 Putting it all together

Configuring FortiAuthenticator

Configuring FortiAuthenticator Change system IP and gateway

set port1-ip <IP>/<Netmask> set default-gw default gw <Gateway>

Set NTP server

set date <YYYY-MM-DD> set time <HH:MM:SS> set tz <timezone_index>

Set DNS servers

Done in GUI Network DNS

Most configuration is done from the GUI.

01-05002-RevA-0203-20130520

Course 203 - Fortinet Wireless

Module 6 Putting it all together

802.1X Supplicant is the wireless client Authenticator is the wireless controller Authentication A th ti ti server is i the th F FortiAuthenticator tiA th ti t

Full Mesh Deployment

01-05002-RevA-0203-20130520

Course 203 - Fortinet Wireless

Module 6 Putting it all together

Lab Exercise 1, configure FortiAuthenticator for 802.1X authentication Exercise 2, configure the mesh for the AP distribution system

01-05002-RevA-0203-20130520