Issue: Wireless endstations matching a Network Access Policy frequently drop and reconnect.
VLANs are read from a Controller/Access Point either in the format of ID or name. If the VLAN value in the Configuration of the applicable Access Policy does not match the format seen in the Model or SSID Configuration, it can appear that the endstation's current VLAN doesn't match the policy VLAN value. Consequently, Network Sentry will try to disconnect the endstation in the attempts to assign the proper VLAN upon reconnecting.
Solution: When configuring Network Access Policies, the Network Access/VLAN value in the Configuration must match the format used in the Model Configuration (name versus number).
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.