FortiGate IKEv2 VPN with Microsoft NPS, Active Directory and FortiToken MFA
Build an AD-backed IKEv2 remote-access VPN with Microsoft NPS/RADIUS, mandatory FortiToken MFA, and least-privilege access policies based on AD group membership.
Knowledge Base
Search practical IT knowledge
Search titles, full article content, commands, error messages, vendors, products, versions and tags.
0 results for
SynologyStill useful
Related knowledge
Suggestions based on technical overlap; your query was not changed automatically.
FortiGate IPsec IKEv2 VPN with FortiToken MFA and local users
Configure and verify a FortiGate dial-up IKEv2 VPN using local users, EAP-MSCHAPv2, FortiToken Mobile, and the free FortiClient VPN.
Recover a failed FortiOS upgrade using the backup firmware partition
Recover a FortiGate that loses LAN connectivity after a firmware jump by booting its working backup partition from the serial console and then following the verified upgrade path.
FortiToken activation email fails: FortiGate SMTP local-out source IP
Troubleshoot FortiToken enrollment emails that time out on SMTP TCP/465 when FortiGate local-out traffic uses an unsuitable WAN source address.
Configure FortiGate IKEv2 remote-access VPN with LDAP and EAP-TTLS
Configure a FortiGate IKEv2 dial-up VPN using LDAP-backed AD groups, FortiClient EAP-TTLS and least-privilege firewall access.
FortiClient IKEv2 VPN fails after partial XML import: missing PSK
Diagnose an IKEv2 connection failure after importing a sanitized FortiClient XML profile that omits the pre-shared key.