Configure Fortigate to use Cloud RADIUS

This article covers configuration of Fortigate devices for use with JumpCloud’s RADIUS Servers. Once configured, users connecting through your Fortigate VPN or networking device can authenticate via RADIUS with their JumpCloud credentials.

This configuration applies to most Fortigate devices, but screenshots and locations of these settings within the Fortigate systems may vary with newer updates from the vendor.

To configure a Fortigate device with JumpCloud RADIUS:

1. Log in to your Fortigate Admin Panel with your Administrator credentials.
2. In the left menu, go to User & Device > RADIUS Servers. These are the settings that need to be configured to point to JumpCloud’s RADIUS Servers.
   
3. Under Edit RADIUS Server, enter the following settings:
   1. Name: JumpCloud RADIUS Server
   2. Authentication Method: Specify
      • Select the RADIUS Protocol that fits your needs. Learn more around supported RADIUS Authentication Protocols and JumpCloud.
   3. NAS IP: Enter if applicable.
4. Next, configure the Primary Server:
   1. IP/Name: Enter in the IP Address for the JumpCloud RADIUS Server closest to your geographic region.
   2. Secret: This is the RADIUS Secret you’ve configured within your JumpCloud Admin Portal.
      
5. Repeat the previous step for the Secondary Server using a different RADIUS Server.
   • For example, if you used us1.radius.jumpcloud.com for your Primary Server, you’ll want to set up us2.radius.jumpcloud.com for your Secondary Server. This will ensure a level of fault tolerance if there are issues with connections to the us1 server.
6. Next, click Test Connectivity for both the Primary and Secondary Servers.
   • If an error occurs, verify the configuration performed in the previous steps.
7. Finally, click Test User Credentials and enter the credentials of your JumpCloud test account.
   • If an error occurs testing user credentials:
     • Ensure the password of the JumpCloud user is entered correctly.
     • Ensure the username of the JumpCloud user is entered correctly.
     • Verify the test user is associated with the RADIUS Server you configured within the JumpCloud Admin Portal. See Selecting Users for Access to the RADIUS Server.