FortiGate wireless LAN controller - Passpoint Configuration

FortiGate wireless LAN controller - Passpoint Configuration

Prerequisites

  1. Access to the FortiGate CLI as a user with administrative privileges.
  2. Information about the assigned RADIUS servers (Server IP address, port numbers, shared secrets):
  3. Access to the IronWiFi Management Console - Sign in or Open Account


Log in to the FortiGate CLI


Configure Venue Name

  1. config wireless-controller hotspot20 anqp-venue-name
  2.      edit "IW_Venue"
  3.         config value-list
  4.             edit 1
  5.                 set lang "EN"
  6.                 set value "IW Venue"
  7.             next
  8.         end
  9.     next
  10. end

 Configure RCOI

  1. config wireless-controller hotspot20 anqp-roaming-consortium
  2.     edit "IW_RCOI"
  3.         config oi-list
  4.             edit 1
  5.                 set oi "AA146B0000"
  6.                 set comment "IronWiFi"
  7.             next
  8.         end
  9.     next
  10. end

Configure NAI Realm and authentication

  1. config wireless-controller hotspot20 anqp-nai-realm
  2.     edit "IW_NAI_Realm"
  3.         config nai-list
  4.             edit "IW_NAI_List"
  5.                 set nai-realm "ironwifi.net"
  6.                 config eap-method
  7.                     edit 1
  8.                         set method eap-ttls
  9.                         config auth-param
  10.                             edit 1
  11.                                 set id non-eap-inner-auth
  12.                                 set val non-eap-pap
  13.                             next
  14.                         end
  15.                     next
  16.                 end
  17.             next
  18.         end
  19.     next
  20. end
Configure Address Type
  1. config wireless-controller hotspot20 anqp-ip-address-type
  2.     edit "IPv4"
  3.         set ipv4-address-type single-NATed-private
  4.     next
  5. end
Configure HotSpot Profile that will connect together all the configurations above.
  1. config wireless-controller hotspot20 hs-profile
  2.     edit "IW_HS_Profile"
  3.         set release 3
  4.         set access-network-internet enable
  5.         set domain-name "ironwifi.net"
  6.         set venue-name "IW_Venue"
  7.         set roaming-consortium "IW_RCOI"
  8.         set nai-realm "IW_NAI_Realm"
  9.         set ip-addr-type "IPv4"
  10.     next
  11. end
Warning
This guide assumes that you have already configured IronWiFi Radius Server. If you have not done it yet, please follow this GUIDE 

Finally, configure your WLAN (you can of course modify type from Bridge to Tunnel to match your environment, and change VLAN to your own, those two options are an example

  1. config wireless-controller vap
  2.     edit "Passpoint"
  3.         set ssid "PasspointForti"
  4.         set security wpa2-only-enterprise
  5.         set auth radius
  6.         set radius-server "IW-ew2-radsec"
  7.         set local-bridging enable
  8.         set schedule "always"
  9.         set vlanid 50
  10.         set hotspot20-profile "IW_HS_Profile"
  11.     next
  12. end

If you have installed the Passpoint Profile using the OSU URL in Captive Portal settings, your device should automatically authenticate to the SSID you have just created.

    • Related Articles

    • Aruba wireless LAN controller - Passpoint configuration

      Prerequisites This user guide applies to Aruba Mobility Controllers with AOS 8.x or later. AOS 6.4.x is the minimum version to support Passpoint capabilities. Access to the Aruba wireless LAN controller as a user with administrative privileges. ...

    • RUCKUS wireless LAN controller - Passpoint Configuration

      Prerequisites Access to the Ruckus SmartZone Dashboard as a user with administrative privileges. Information about the assigned RADIUS servers (Server IP address, port numbers, shared secrets): Email or document that contains this information OR ...

    • Fortigate / FortiAP

      This page explains the Captive Portal configuration for Fortigate hardware and authentication via IronWiFi. IronWiFi Console Configuration Log into the IronWiFi console or register for free Create a new network After that, create a new captive ...

    • TP-Link OMADA Passpoint

      This guide requires Passpoint enabled firmware on both the controller and Access Point. The lastest stable firmware for the controller is 1.30.7 Build 20250704 Rel.78617 (Stable), and you need to have the lastes dev / testing firmware installed on ...

    • Aerohive (Extreme) wireless controller - Passpoint configuration

      Prerequisites Access to the ExtremeCloud Dashboard as a user with administrative privileges. Information about the assigned RADIUS servers (Server IP address, port numbers, shared secrets): Email or document that contains this information OR Access ...