Skip to main content
ByteHaven
Explorer III
February 15, 2026
Question

Isolation interface port2 and Isolation scopes

  • February 15, 2026
  • 1 reply
  • 224 views

Hello everyone,

 

I would like to know, can the isolation interface port2 and isolation scope be in the same network, example : 

Isolation interface :

  • 192.168.10.2
  • Gateway : 192.168.10.1

Isolation scope : 

  • Gateway : 192.168.10.1
  • lease pool : 192.168.10.3 - 192.168.10.100

Screenshot 2026-02-15 105552.png

 

I've seen the majority of articles use seperate subnets and some articles use them in the same subnet. Can anyone explain pls ?

 

Thanks in advance.

BR,

1 reply

ebilcari
Staff
Staff
February 17, 2026

This depends on the selected Network Type configuration. More details are shown in this section of the guide. From the shared screenshot, it appears that this setup is configured as a Layer 3 network (recommended). So, the traffic for the isolation subnets must be routed, meaning the isolation IP cannot be on the same subnet.

Emirjon
ByteHaven
ByteHavenAuthor
Explorer III
February 17, 2026

Is it incorrect if the FNAC's port2 and the isolation scope are in the same subnet ?

Cause I've tried it and it kinda worked. I wanna know the purpose of separting them.

 

BR,

ebilcari
Staff
Staff
February 17, 2026

I'm not sure how you got it working, how the DHCP relay is configured, or how DNS and HTTP traffic routing works in this case.
You can refer to this article for some details: Technical Tip: An example of a simple network deployment of FortiNAC with FortiGate/FortiSwitch

Emirjon