FortiNAC to send the Cisco radius Neat attribute

[BarryGhuman]

Hi Team, 

I am replacing Cisco ISE with FortiNAC. The Cisco ISE is currently configured to profile the Access Points and send a Cisco Neat attribute. This Neat attribute helps the Cisco switch assign a truck role to the port. 

In FortiNAC, Network Access > "Configuration" - It does not provide any option to send radius attribute only and VLAN ID is mandatory. 

https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116681-config-neat-cise-00.html

cisco-avpair = device-traffic-class = Switch

I want to check if FortiNAC has a way to sort this situation. 

Regards, 

Barry Ghuman 

[BarryGhuman]

Hi Ebilcari, 

Thank you for your response!

It is a little tricky to add the customized attributes. I think a knowledge document from your team will be great. 

Regards, 

Barry Ghuman

[ebilcari]

Thank you for your feedback. I can agree that this configuration is not that straight forward :). I was hoping that this article somehow covers also the custom attributes behavior, we can also create a dedicated article for it.

[BarryGhuman]

Hi Ebilcari, 

The document talks about "Tunnel-Private-Group-Id". However, the %Access_Value% is the reference value of the attribute and can be used for any attribute. It is not limited to the VLAN attribute. 

Regards, 

Barry Ghuman