Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Badger_89
New Contributor II

Hardware switch - dot1x

Hi

 

To do dot1x on a client directly connected to the firewall, the model needs a hardware switch.

 

I believe you can only have one broadcast domain/vlan on the hardware switch

 

So, by default does this mean there is no way to have clients sitting in different vlans, or is there a workaround/solution to this. 

 

Thanks

4 REPLIES 4
pminarik
Staff
Staff

That assumption is incorrect.

You can make multiple virtual switches out of the default hardware-switch. On top of these virtual switches, you can configure VLANs and enable dynamic VLAN-assigmnent based on dot1x authentication.

[ corrections always welcome ]
Badger_89
New Contributor II

thanks :)

pminarik

Quick addition: The documentation for this feature doesn't seem to be maintained anymore in recent documents versions, so here's a link to the old documentation in case you struggle with finding it:

 

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/42807/virtual-switch

 

 

[ corrections always welcome ]
Badger_89
New Contributor II

I was looking in 7.2 guide so that does explain why I couldnt see anything

 

thanks very much

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors