u/Upset-Gur-7879

Hi,

I am experiencing an issue with FortiNAC version 7.4 integrated with Active Directory (AD).

Although I successfully imported the AD groups into FortiNAC, the system fails to assign VLANs based on these AD group memberships.

As a temporary workaround, we created local groups in FortiNAC under System > Groups and manually assigned users to their respective groups. However, this is not an optimal or scalable solution. We need users to be dynamically and automatically mapped to their VLANs based on the integrated Active Directory groups.

Could you please help us resolve this automatic mapping issue?

Hello,

I am currently deploying a FortiNAC 500F (v7.4) and configuring Dynamic VLAN Assignment based on Active Directory user groups.

The deployment is successful for wired connections, but it is failing for wireless connections.

Our environment & current configuration:

• WLC: FortiGate 70G
• RADIUS Server: FortiNAC is configured as the RADIUS server on the WLC with RADIUS CoA enabled.
• SSID Settings: "Dynamic VLAN Assignment" is enabled. Under Group Membership, both "Role-Based Access" and "Force Registration" are enabled.

The issue:
Wireless clients are not getting assigned to their proper production VLANs.

My question:
What steps did I miss?? do I need to manually create VLAN sub-interfaces under Network > Interfaces on the FortiGate WLC for each production VLAN? do i need to configure RADIUS in my switches ??

Thank you for your help.