Troubleshooting Tip: Unable to reach production domain from registration subnet

Description

This article describes a solution to an issue where computers in the isolation network cannot resolve FQDNs of the production domain. Users may experience issues with login, logout, and policy matching due to the inability to resolve the domain name.

Scope

FortiNAC or FortiNAC-F.

Solution

It happens due to a misconfigured configuration wizard.

To solve it, make sure that the Production and Isolation domain name are correctly configured in the configuration wizard.

Isolation or registration domains must be distinguished from the production domain with the proper suffix.

For example, if the production domain is 'test.com', the value in the isolation domain cannot be the same. It should include a suffix like 'isol.test.com'.

Basic network configuration example:

Isolation network configuration example: