Fortinac registeration enforcement hosts connected to hub or unmanaged switch

Forum|Forum|1 year ago
April 29, 2025
5 replies
1461 views

Hi guys,

is it possible to enforce registration/isolation vlan for the devices connected to the hub or unmanaged switch?

All devices connected to the managed switches are working fine once i enforce to the isolation vlan and the captive portal is working fine but don't know about the hub.

Thanks

FortiNAC

Best answer by AEK

Hi Bootaan

I think they should be able to register.

But as I said, while there is at least one unregistered host connected to the hub, all registered hosts that are plugged to the same hub will remain in isolation. Once all are registered they will be all put in prod VLAN.

AEK

SuperUser

Hi bootaan

Unmanaged switch is not intended to stay in your network if you want to secure it with NAC solution.

The unmanaged switch or hub can't have its ports controlled by NAC.

However, if the hub's uplink is connected to a controlled port of a managed switch, and you connect a rogue device to the hub, then that controlled port will be put in isilation, so all hub ports will be in isolation.

Also in case you plug to the hub both a registered device and a rogue device, then they will both be put in isolation.

AEK

bootaan26Author

Explorer

Hi AEK,

Thanks for the clarification of the issue.

if I enforce isolation vlan to the uplink of hub's port, will the devices connected to the hub ports able to register through captive portal or I can register from fortinac host view?

AEKAnswer

SuperUser

Hi Bootaan

I think they should be able to register.

But as I said, while there is at least one unregistered host connected to the hub, all registered hosts that are plugged to the same hub will remain in isolation. Once all are registered they will be all put in prod VLAN.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO