Fortinac delay to switch to VLAN isolation

[rzanella]

Hi,

I'm configuring my first Fortinac.

I have a problem whit switching vlan. When I plug on switch an pc  Fortinac receive snpm trap but the switch to isolation vlan is done after 40/50 seconds about.
So pc get IP of production and after switching VLAN it don't get a IP of isolation subnet until I do ipconfig /renew.

here what I see on switch:
Aug 28 15:06:16: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
Aug 28 15:06:59: %SYS-5-CONFIG_I: Configured from console by admin on vty1...

Could you help me?

Thanks in advance

[ebilcari · Accepted solution]

This looks like an integration with a Cisco switch, is it properly modeled in FNAC, are the credentials validated for both SNMP and CLI?

It is preferred to use SNMP MAC traps instead of link status traps. In case of link status traps a L2 polling is triggered and it will add some delay.

Is the end host connected directly or through an IP Phone?

[rzanella]

Solved. Thanks to  AEK and ebilcari.

Here what I do on switch.

on interfaces add:

snmp trap mac-notification change added
snmp trap mac-notification change removed
spanning-tree portfast edge 

SNMP configuration:

snmp-server community ForNacTrap RW 50

snmp-server enable traps mac-notification change move threshold