Skip to main content
FortiKoala
Staff
Staff
September 28, 2018

Technical Tip: Disabled wired hosts not isolated

  • September 28, 2018
  • 0 replies
  • 1551 views

Description


This article describes a wired Host marked as disabled but not switched to the Dead End or Isolation VLAN.

Scope


FortiNAC.


Solution

 

Add the switch to which the host connects to the Physical Address Filtering group. This is required in order for disabled hosts to be isolated.
 
  1. In the Administration UI, navigate to System -> Groups.
  2. Modify Physical Address Filtering group.
  3. Select the desired switch and select the > icon.
  4. Save.

Or:

  1. In the Administration UI, navigate to Network -> Inventory.
  2. Right click on the switch Model.
  3. Right click and select Group Membership.
  4. Check the Physical Address Filtering group.
  5. Save.

 

Related articles:

Technical Tip: Configuring Dead End as Enforcement

Technical Note: Disabled wireless hosts not isolated