• All Files

Guest portals

The following section describes how to configure custom guest portals on a per customer or per AP/Controller basis.

The portals are assigned RADIUS clients and profiles, can permit certain pre-login and post-login services for users (such as password reset and token registration abilities), and rules and replacement messages can be configured.

Portals

Guest portal configuration is available under Authentication > Guest Portals > Portals.

To configure a guest portal:

1. Select Create New to configure settings for a new guest portal.

2. Enter the following information:

Name		A name to identify the guest portal.
URL		The URL of the Guest portal, in the format of: https://<FAC IP/FQDN>/guests
Description		Optionally, enter information about the guest portal.
Profile Configuration		Assign one or more RADIUS clients and profiles to the portal.
Pre-login Services		Configure various pre-login services to permit to users.
	Password Reset	Enable/disable pre-login password reset.
	Account Registration	Select to configure various user account registration options: Require administrator approval: Enable/disable whether the user requires administrator approval. If enabled, select whether to send admin approval emails to freeform addresses or to specific email accounts. Account expires after: Enable/disable account expiration. If enabled, enter the number of hours, days, months, or years the account remains expired from the dropdown menu. Use mobile number as username: Determine whether to require the user's mobile number as their username. Place registered users into a group: Determine whether to place registered users into a group from the dropdown menu. Password creation: Determine whether the user's password is user-defined or randomly generated. Send account information via: Determine whether the user's account information is sent to them by SMS or email. SMS gateway: Select the SMS gateway for self-registered users from the dropdown menu. Required field configuration: Configure the available fields required by the user to enter (First name, Last name, Email address, and Mobile number are enabled by default).
Post-login Services		Configure various post-login services to permit to users.
	Profile	Select to determine whether authenticated users can view/edit their account information.
	Password Change	Select to determine whether local and/or remote users have the ability to change their passwords once logged in.
	Token Registration	Select to configure FortiToken Mobile self-provisioning privileges.

3. Select OK to add the new guest portal.

Rules

Portal rule configuration is available under Authentication > Guest Portals > Rules.

To configure portal rules:

1. Select Create New to configure new portal rules.
2. Enter the following information:

Note that the Conditions section is only available for configuring once the rule has already been created by selecting OK.

General		Configure the portal rule's general information, including its name and action.
	Name	A name to identify the portal rule.
	Description	Optionally, enter information about the portal rule.
	Action	Determine the action to take for the rule: assign a guest portal or assign no portal for the rule.
Conditions		Select Add Condition to configure portal rule attributes. Note that these attributes can be defined to either match the following settings below or to not match the following settings (see the Not checbox).
	Parameter	Select and/or define new Uniform Resource Identifier (URI) parameters.
	Operator	Select an operator for the portal rule attribute.
	Value	Enter a portal rule attribute value.

3. Select OK to add the new portal rule.

Replacement Message

Guest portal replacement message mappings are available under Authentication > Guest Portals > Replacement Messages.

The replacement messages are split into four categories: Authentication, Password Reset, User Registration, and Post-Login.

Selecting a specific message will display the text and HTML or plain text of the message in the lower half of the content pane.

Selecting Toggle Tag List will display a table of the tags used for that message atop the message’s HTML or plain text box.

To edit a replacement message:

1. Select a message in the replacement message list.
2. Edit the plain text or HTML code in the lower right pane, or select the open in new window icon to edit the message in a new browser window.
3. When you are finished editing the message, select Save to save your changes.
4. If you have made an error when editing the message, select Restore Default to restore the message to its default value.

Manage Images

Images can be managed by selecting Manage Images in the Replacement Messages window. Images can also be added, deleted, and edited.

To add an image:

1. In the manage images screen, select Create New to open the Create New Image window.
2. Enter a name for the image in the Name field.
3. Select Browse..., find the GIF, JPEG, or PNG image file that you are adding, and then select Open.

The maximum image size is 65kB.

4. Select OK to add the image.

To delete an image:

1. In the manage images screen, select an image, then select Delete.
2. Select Yes, I’m sure in the confirmation window to delete the image.

To edit an image:

In the manage images screen, select an image, then select Edit.

1. In the Edit Image window, edit the image name and file as required.
2. Select OK to apply your changes.