Forti AP constantly dropping off SSID with Radius auth

Forum|Forum|1 year ago
February 3, 2025
9 replies
1843 views

Have Forti AP's connected though Fortiswitches

Guest WIFI works fine

Work WIFI using RADIUS auth on NTP server - very intermittent.

One minute its connected - next minutes - no internet

the domain never drops - only the internet connection drops

Lots of DNS errors on the logs. DNS-NO-RESPONSE, DNS-NO-DOMAIN

Internal DNS on our domain controllers set - dont use the forti ones.

Just dont understand what's causing the constant drops - then it just randomly reconnects.

very unstable.

Forti Support just told me to upgrade the AP's and it's made no difference.

AEK

SuperUser

Should I understand your issue is that DNS is not stable?

IS it the same behavior when you try using public DNS for your client?

AEK

Forti-MonAuthor

Explorer

Well the connection to the Staff (LAN) wifi keeps dropping - assume it's DNS

Nope - Guest WIFI is fine - DHCP req DHCP ACK - done.

ebilcari

Staff

I would suggest to start isolating the problem. Is this an association/authentication issue, do you see the host getting frequently re-authenticated in the WiFi Events? Is the host able to always ping its gateway? Have you checked if there is more than one SSID configured in the end host and it is frequently jumping after the DNS failures?

If the issue seems related to the DNS only, I doubt that the AP or WiFi configuration will affect this service only, maybe check the DNS server or any DNS filter in the firewall policies.

Emirjon