Technical Note: L2 Roles Only Configuration Fails ...

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 190818

Description

L2 Roles Only Configuration Fails to Switch Roles in Aruba

Solution

If you are configuring Aruba for L2 Roles Only
You must have VLAN Switching Enabled checked on the model configuration in topology under the properties of the controller.
If this is unchecked Network Sentry will return Native Policy and not the role configured in the model for registration when a rogue host connects.
If VLAN Switching is not enabled a message similiar to the one below will be seen with Radius Manager Debug enabled in the master loader.

2016/01/27 16:08:34.180 RadiusPollThread2 RadiusServer validClient VLAN switching disabled for 172.16.200.20 <- Controller that has VLAN switching disabled

271

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Note: L2 Roles Only Configuration Fails to Switch Roles in Aruba