Fortinet - FortiEdge Cloud

Purpose

This guide shows how to configure a Fortinet FortiEdge Cloud to deploy Cloud4Wi Guest WiFi service.

The configuration procedure has been performed and tested on Fortinet FortiEdge Cloud version v25.3_0318.

Please note that the images contained in this article may contain outdated configuration data. 

Configuration

Log in to your FortiEdge Cloud account. Select the network you intend to deploy Cloud4Wi service on. If you don't have a network, you ned to create one first. elect the network to enter in the Network view.

Creating RADIUS Server

1. Form the main sidebar expand the Wireless menu and select User Access Control and select the tab My RADIUS Server
2. Click + Add RADIUS Server
3. Create a first server for RADIUS authentication (e.g. named "Cloud4Wi Auth RADIUS Server")
   Name: Cloud4Wi Auth RADIUS Server
   Primary IP: 54.216.93.188
   Secondary IP: 34.249.131.154
   Port: 1812
   Secret: (provided by Cloud4Wi team)
4. Create a second server for RADIUS accounting (e.g. named "Cloud4Wi Acct RADIUS Server")
   Name: Cloud4Wi Acct RADIUS Server
   Primary IP: 54.216.93.188
   Secondary IP: 34.249.131.154
   Port: 1813
   Secret: (provided by Cloud4Wi team)
    

Configuring the SSID

1. Form the main sidebar expand the Wireless menu and select SSID.
2. Create a new SSID (or you can edit an existing one with the same settings described below)
3. Configure the rest of the options as detailed below:
   1. Cloud Address Group Policy: disabled
   2. External RADIUS MAC Authentication: disabled
   3. Authentication: Open
   4. OWE Transition: disabled
   5. Captive Portal: My Captive Portal
   6. Captive Portal URL: https://splashportal.cloud4wi.com
   7. Redirect URL: Specific URL / https://splashportal.cloud4wi.com
   8. Walled garden: enter as minimum *cloud4wi.com. See the paragraph Walled Garden below for a full list of Walled Garden entries
   9. Authentication Certificate: you need to upload a valid certificate to avoid security warning on some browser. You can leave this option empty and add the certificate in a second time. See the paragraph Certificates below for more details.
   10. Authentication Portal URL: enter the URL associated to your certificate. See the paragraph Certificates below for more details.
   11. Sign on Method: My RADIUS Server; select the the Cloud4Wi Auth RADIUS Server create before
   12. RADIUS Acct Settings: My RADIUS Server; select the the Cloud4Wi Acct RADIUS Server create before
   13. RADIUS Authentication by: AP
   14. Secure HTTP: enabled
   15. Session interval: 0
   16. Accounting Interim Interval: 300
   17. Configure the rest of the options as appropriate for your specific deployment (IP assignment, VLAN ID, etc..)
       
       
       
       

Walled garden

Based on the example above, you can create specific access-rules in order to allow unauthenticated users to enter specific domains.
When configuring the walled garden, you are required to add the following domain: cloud4wi.com. This allows you a proper redirection to the Splash Page and enables the access to the CDN.
For some specific use cases, you may be interested in the following articles:

• Walled garden for the Social Login (websites/domains to open)
• Walled garden for PayPal feature (websites/domains to open)
  
   

Certificate

Coming soon!

Entering the device details into the Admin Panel

For Fortinet devices, Cloud4Wi requires only the MAC address and the Identifier field is not required.