Fortinac Network Authentication times

Hello saori,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

If anybody else has any info or advice, please feel free to contribute!

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP. If anyone else has any ideas in the meantime, please feel free to contribute!

With RADIUS the VLAN change should be happening in a matter of seconds.

When the host is registered, online and matches a network access policy, FortiNAC will send a Disconnect Message or CoA that triggers a new authentication request. FortiNAC then sends the Accept-Accept with new VLAN access value and any other attributes configured.

If you have a delay in this scenario you need to check with tcpdump if FortiNAC sends the DM immediately after policy match and if the Switch/WLC responds with DM ACK to clear the current radius session and trigger the new auth request. A packet capture will help you identify where the problem resides.