The most efficient and supported method for migrating a large number of local users from one FortiAuthenticator to another is by using the built-in import/export feature. The administrator can export the entire local user database from the source device into a comma-separated value (CSV) file. This CSV file can then be directly imported into the new FortiAuthenticator device, which will create all the user accounts in its local database. This process is designed for bulk user management and migration.

A. Import users using RADIUS accounting updates: RADIUS accounting is a protocol used for collecting information about user sessions (e.g., start/stop times, data transferred), not for populating a user database.

B. Import the current directory structure: This is not a standard FortiAuthenticator feature for local users. This terminology is more applicable to synchronizing with external directory services like LDAP or Active Directory.

C. Import users from RADIUS: RADIUS is an authentication protocol, not a user database source for bulk import. While you can configure RADIUS users, you cannot import a static user list from the protocol itself.

1. FortiAuthenticator 6.4 Administration Guide

Page 53

Section: "Authentication > User Management > Local Users".

The guide explicitly details the user management interface: "To import multiple users from a comma-separated value (CSV) file

select Import." and "To export the user list to a comma-separated value (CSV) file

select Export." This directly confirms the CSV method for bulk user migration.