Troubleshooting Tip: Troubleshooting steps for FortiSwitch and FortiNAC Integration for VLAN Switching

[Adolfo_Z_H]

Description	This article describes the troubleshooting steps for FortiSwitch and FortiNAC integration issues, specifically with VLAN switching. The article provides a step-by-step guide to find and resolve issues from FortiSwitch point of view and ensure seamless communication between FortiSwitch and FortiNAC via Radius.
Scope	FortiSwitch integrated into a FortiNAC solution.
Solution	To troubleshoot FortiSwitch and FortiNAC integration issues, follow these steps: Verify RADIUS Communication: Ensure that FortiSwitch is configured to communicate with FortiNAC via RADIUS. Refer to Standalone Mode for configuration details. Check RADIUS Server Configuration: Go to Network -> RADIUS Servers and confirm that the RADIUS server is properly set up and enabled on FortiNAC. Validate VLAN Assignment: Confirm that FortiSwitch is configured to use the correct VLAN for RADIUS traffic. Refer to FortiSwitch security policies for VLAN configuration guidance. 802.1X Authentication Troubleshooting: Use Troubleshooting Tip: Configure and troubleshoot 802.1x authentication on a Managed FortiSwitch to configure and debug 802.1X authentication on FortiSwitch. Diagnose CoA Issues:  Use Troubleshoot Tip: Most common causes CoA request fail to disconnect or change VLAN for an authorized...  to diagnose Change of Authorization behavior. When using this guide, consider that the authenticator role in FortiSwitch deployments is performed by the device itself—even when managed via FortiLink. Perform Troubleshooting Tip: Debugging RADIUS Change of Authorization (CoA) debugs directly on the FortiSwitch CLI interface to gather equivalent information and follow the same analysis methodology.