Technical Tip: Rogue wireless clients cannot connect to SSID

[FortiKoala]

Description

Rogue wireless clients cannot connect to SSID.  Registered clients connecting to the SSID work as expected.

Scope

ForiNAC v9.x.

Solution

1.  Navigate to Network > Inventory.
2. Select the Controller/Access Point, then click on the SSIDs tab.
3.  Select the affected SSID, 'right-click' and select SSID Configuration. 

If Registration State=Deny, FortiNAC rejects a RADIUS request that comes from a rogue host.
If Registration State= Enforce, but a VLAN is not defined (Registration Access Value= (none)), FortiNAC will reject the client (even if the RADIUS server accepts the user account).

Set the access value to the appropriate VLAN and select Apply. Registration State= Enforce.
Registration Access Value= (Registration VLAN)