SMS
SMS two-factor authentication sends the token code in an SMS text message to the mobile device indicated when this user attempts to logon. This token code is valid for 60 seconds. If you enter this code after that time, it will not be accepted. Enter this code when prompted at logon to be authenticated.
SMS two-factor authentication has the benefit that you do not require email service before logging on. A potential issue is if the mobile service provider does not send the SMS text message before the 60 second life of the token expires.
If you do not use the FortiGuard Messaging Service, you need to configure an SMS service.
To configure an SMS service for your FortiGate unit - web-based manager
1. Go to System > Config > Messaging Servers.
2. In SMS Service, select Create New.
3. Enter a Name for the SMS service and the service Address (domain name), then select OK.
4. Select Apply.
To configure an SMS service - CLI
config system sms-server
edit <provider_name>
set mail-server <server_domain-name>
next
end
To configure SMS two-factor authentication - web-based manager
1. To modify an:
• administrator account, go to System > Admin > Administrators, or
• user account go to User & Device > User > User Definition.
2. Edit the user account.
3. Select SMS and either:
• Select FortiGuard Messaging Service
or
• Select Custom and then choose the SMS Provider to use.
4. Enter the phone number of the mobile device that will receive the SMS text messages.
5. Select Enable Two-factor Authentication.
6. Select the Token that the user has.
7. Select OK.
To enable SMS two-factor authentication - CLI
config user local
edit <user_name>
set sms-phone <user_phone>
set sms-server fortiguard
set two-factor sms
end
If you have problems receiving the token codes via SMS messaging, contact your mobile provider to ensure you are using the correct phone number format to receive text messages and that your current mobile plan allows text messages.