Enable Enforcement

To place SSIDs under FortiNAC’s control, assign VLANs and enable enforcement for the various host states in the SSID model of the Fortigate.

Important: Always validate behavior on a test SSID first.

With the FortiGate’s model selected in the left panel, click the SSIDs tab in the right panel.
Click the desired SSID, right click and select SSID Configuration.
(Optional) Click Use Custom Settings to configure a RADIUS server different than the FortiGate’s RADIUS configuration.
Under Network Access, fill in the following fields as they apply. See Model Configuration in the Administration Guide for definitions of Host State, Access Enforcement and Access Value.
- VLAN ID for each state (Registration, Remediation, Authentication, Deadend)
- VLAN ID Default (the “catch all” VLAN for registered endpoints).
Click OK to save changes.

To place SSIDs under FortiNAC’s control, assign VLANs and enable enforcement for the various host states in the SSID model of the Fortigate.

Important: Always validate behavior on a test SSID first.

With the FortiGate’s model selected in the left panel, click the SSIDs tab in the right panel.
Click the desired SSID, right click and select SSID Configuration.
(Optional) Click Use Custom Settings to configure a RADIUS server different than the FortiGate’s RADIUS configuration.
Under Network Access, fill in the following fields as they apply. See Model Configuration in the Administration Guide for definitions of Host State, Access Enforcement and Access Value.
- VLAN ID for each state (Registration, Remediation, Authentication, Deadend)
- VLAN ID Default (the “catch all” VLAN for registered endpoints).
Click OK to save changes.