OS Segregation is required on VLAN

[Aadar-Soomro]

Dear Members,

OS Segregation is required on specific VLAN, which has AP connected. Only android and iOS users can connect to that specific AP but not windows and linux users.

[Hatibi]

You can use FortiSwitch network access control (NAC) policies within FortiOS that matches devices with the specified criteria

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/173271/fortiswitch-n...

[Aadar-Soomro]

Hi, we have cisco's AP installed in our environment not FortiAP's

[Toshi_Esumi]

You probably need to do that at your Cisco/Meraki AP. Ask their community.

Toshi

[Hatibi]

The guide i shared does not mention any FortiAP's. FortiSwitch NAC will apply dynamic port policies on the port level where you connect hosts.

The idea is that once FortiOS detects a device, it will apply Dynamic port policies. When a rule matches the specified device patterns, the switch-controller actions control the portʼs properties.

Having FortiAP or any other AP will not make a difference here since you will have specific rules to match any device.

Check the following links to understand what is to be done:

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/801568/configuring-d...