FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 190809
Description
Network Sentry Unable to Re-Assign VLANs on Meraki Wireless Clients

Solution
Issue:  A Meraki firmware change removed the ability for Network Sentry to dynamically change the assigned VLAN of a connected wireless client.  

The Network Sentry integration with Meraki leverages a session timeout value (set via the RADIUS response) for triggering re-authentication of wireless clients to assign a new / different VLAN.  This method of changing a wireless client’s connection was used because Meraki did not support RADIUS Change of Auth (CoA).

As of fall 2015, Meraki started utilizing RADIUS CoA for disconnecting clients.  The change has resulted in a mismatch in methods between Meraki and Network Sentry, and Network Sentry can no longer disconnect Meraki clients.

Solution:  RADIUS Disconnect support for Meraki APs added in Network Sentry 8.0.0.x


Contributors