Fortinac Radius not enabled on device

[ipsectunnel]

Hi

I have FortiNAC version 7.4.1.0451 and Fortigate version 7.2.11. FortiAP 432F, SSID(traffic mode = tunnel) is using WPA2 ENTERPRISE and radius is selected pointing to the fortinac. 

Fortinac Winbind status is running and joined to the domain.

I get access-reject error in log. radius not enabled on device.

[AEK]

Under FortiNAC inventory, select the FortiGate that owns the FortiAP, then SSID tab, and check if your FNAC's local RADIUS is selected for the SSID.

[ipsectunnel]

Hi, thanks for your response. The below is what I have set.

[ebilcari · Accepted solution]

If this setup is a fresh deployment in firmware version 7.4.1, than this may be affected by a known issue 1129743. The fix will be included in the next release of 7.4.2 which is scheduled to be published in a few days.

[ipsectunnel]

Hi, the deployment is about a month old so fairly fresh with FortiNAC 7.4.1

[AEK]

Hi Emirjon

BTW, why 7.4 is at patch 1 and 7.6 is at patch 3? This is not common.

Could it mean like 7.4 is short term support or something similar?

[ebilcari]

No, I think the 7.4 branch will become the main focus once the 7.2 branch reaches EOES (in a few months). The 7.6 branch introduced many new features, which likely explains the faster release of patches.

[ipsectunnel]

Should I wait for 7.4.2 or move to 7.6.x ?

[ebilcari]

Firmware version 7.6.3 includes the fix for this issue. If it is not urgent, I would suggest waiting for the release of version 7.4.2.

[AEK]

Hi Emirjon

BTW again, which version you "currently" recommend to install for critical production?

I mean are currently 7.4.1 or 7.6.3 stable enough for critical production or is it safer to install 7.2.9?