Hello,
Hope you are doing well.
I'm trying to change to vlan from authentication vlan which is the default with id 150 to Vlan 25 for the production access when the scan is successful without using dot1x on the switch port on Cisco switch.
So far only for testing the Operating system windows 10 pass and the right network access policy is granted, but when it comes to cli change it keeps adding vlan 25 and undo it to 150 back and fourth.
The port is a member of "Forced Registration" "Reset Forced Registration" and "Role Based Access"
My enforcement Access:
Cli template :
config t
interface %port%
description Network Security
switchport access vlan %vlan%
do wr
Undo :
config t
interface %port%
description Authentication
switchport access vlan 105
do wr
FortiNAC version 9.2
Cisco Switch 3750 IOS 12.2
Thank you!
Best Regards!
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Firstly you don't have to use specific CLI command for simple VLAN change. By default FNAC will do the changes via CLI just by setting the VLAN under Access Value. CLI commands are usually used to add extra configuration like voice VLAN, ACL etc.
To gain more information you can check from "Ports", bottom window "Port Changes", it will give you a history of policy evaluations done.:
Since you are trying to do registration (register rouge devices) you have to change the Registration to Enforce and the value to 150.
You need to create also a method for host registration. If the host status is stuck as Rogue no policy will be evaluated. Easiest way can be Device Profiling rules.
Firstly you don't have to use specific CLI command for simple VLAN change. By default FNAC will do the changes via CLI just by setting the VLAN under Access Value. CLI commands are usually used to add extra configuration like voice VLAN, ACL etc.
To gain more information you can check from "Ports", bottom window "Port Changes", it will give you a history of policy evaluations done.:
Since you are trying to do registration (register rouge devices) you have to change the Registration to Enforce and the value to 150.
You need to create also a method for host registration. If the host status is stuck as Rogue no policy will be evaluated. Easiest way can be Device Profiling rules.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1558 | |
1033 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.