Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

FortiNac with switches managed by forticloud.

We are having a weird issue with FortiNac. We have gotten the Fortinac setup and adopted all of the switches into it Mostly 124’s and 148’s. We have setup RADIUS as a local service. The NAC is able to see the switches and validate the credentials and SNMP strings. What we can’t get working is getting the policy on the switch. When we try to enable RADIUS auth on the switch from within the Fortinac device we don't see any change. We are able to manually setup the RADIUS settings on the switch to point to the NAC and are able to test authentication there and it’s passes.

Could forticloud be interfering somehow?

From your description we can assume that the integration and RADIUS configuration is done correctly. When you enable RADIUS checkbox the attribute groups should be shown in line with Logical Networks. Make sure that RFC_Vlan is selected or some custom set of attributes.


What is the state of the end host that you are trying to authenticate (rogue/registered)? For the policy to match the host should be in a "normal" (not isolated) state and the Port Group Membership on the switch port need to have at least Role Based Access checked.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.

In additional of Emirjon explanation and questions the radius debug log should also provide more information.
Please review the following articles:


- Happy to help, hit like and accept the solution -

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors