FortiNAC and WiFi remediation

[AEK]

Hi again FNAC admins

• FortiNAC-F 7.2.9.
• Ruckus ZD1200 10.x WLC

I have one single isolation VLAN for quarantine, dead-end and registration.

VLAN switching works now fine via RADIUS DM. Tested it by disabling adapter or disabling host, and it moves it instantly to isolation.

The issue now is with quarantine: For wired connection it works well, i.e.: host is quarantined instantly when it fails scan. But for WiFi it doesn't move it to quarantine.

With tcpdump we can see RADIUS DM is sent to the WLC, but the host never moves to isolation. DM are still sent periodically by FNAC, like if it is still trying.

Disconnecting the host from WiFi and reconnecting again still put it in prod VLAN.

Force remediation (group) enabled on the SSID, and quarantine VLAN configured for the SSID as well.

Did I miss something?

[AEK]

Hi Emirjon

There is some positive update. We just redo the model config of the WLC (and for my FG as well), and it worked successfully. Probably there was a misconfiguration that I didn't notice.

Thanks again for the tips, certainly it will be useful for future similar issues.