Fortinet and Smoothwall Guest Wireless

[Olliesaurus]

Hi all,

 

I have taken on an RM school which was upsold the world so has the most convoluted and bum about face setup I have ever come across, however I have been asked to fix the guest wireless immediately!

 

I currently have a guest wireless SSID that is open, when I connect to this SSID it takes me to a Fortinet login page, I then login with my network credentials and it takes me to a Smoothwall captive portal, then finally once I have logged in with my network credentials again it will login to the internet.

 

I cant quite figure out how to streamline this process a little bit, any ideas how I can remove the Fortinet step completely? or whether its ever needed to begin with!

 

Thanks

[FN-GM]

If you're required to have an AD login its not really suitable for a guest login is it?

 

What WIFI system are you using?

[tom_newton]

Ew.

If it's fortinet wifi I would keep the fortinet login above the smoothie one and use radius accounting to log users into the Smoothwall (this would keep your wifi most protected).

[TomFreeman]

Ew.

If it's fortinet wifi I would keep the fortinet login above the smoothie one and use radius accounting to log users into the Smoothwall (this would keep your wifi most protected).

 

+1

 

That's how ours is setup and works ok for us.

 

We have a generic AD account locked down to high heaven for guest access, or if they're here for a little while we make them their own account.

[AlanD]

If this is RM and MERU/fortinet and smoothwall then you are probably paying for support ...and I suggest you make them earn their money. Either fortinet needs to do the authentication via radius and pass the accounting to smoothwall ...or maybe you don’t require fortinet to this at all and smoothwall can do it.

 

Guest accounts are always questionable...and with multi gigabyte 4G contracts ...I’m not sure that any school should be squandering it’s bandwidth for them as public service. Ocassionally, guests require temporary or limited access to school resources, and if this can’t be done via an external, ideally web based connection...then they need a locked down AD account.

[Olliesaurus]

Thanks all, as ever your help is greatly appreciated,

 

May the IT odds be ever in your favour.