Enabling Xauth Authentication For Dialup Ipsec Vpn Clients - Fortinet FortiGate User Manual

VPN authentication

Enabling XAuth authentication for dialup IPSec VPN clients

24
Parameters specific to setting up the VPN itself are not shown here. For detailed
information, see the "Configuring IPSec VPNs" chapter of the FortiGate VPN
Guide.
XAuth can be used in addition to or in place of IPSec phase 1 peer options to
provide access security through an LDAP or RADIUS authentication server. You
must configure dialup users as members of a user group who are externally
authenticated. None can have passwords stored on the FortiGate unit.
To configure authentication for a dialup IPSec VPN - web-based manager
1 Configure the users who are permitted to use this VPN. Create a user group and
add them to it.
For more information, see
2 Go to VPN > IPSec > Phase 1.
3 Select Create New or select Edit on an existing VPN gateway.
4 From the Remote Gateway list, select Dialup User.
5 Select Advanced to reveal additional parameters.
6 In the XAuth options, select Enable as Server.
"Users and user groups" on page
FortiGate User Authentication Version 1 Guide
Configuring authenticated access
15.
01-28007-0233-20050825