Layer 2 Network - VLANs
VLANs are the basic networking construct used to limit network access. When you implement
network access control, include at least one non-production VLAN. In the Configuration Wizard
this is the Isolation VLAN. If there is the need to separate clients based on state, such as known
vs. unknown or out-of-compliance, configure multiple VLANs. In the Configuration Wizard these
additional VLANS are the Registration, Remediation, Dead End, VPN, Authentication, Isolation,
and Access Point Management VLANs.
If you intend to use FortiNac only to monitor network access, configuring VLANs is not
necessary. If in the future you choose to control access to the network, re-run the Configuration
Wizard to configure VLANs at that time.
If you do not configure VLANs at this time, click Next on the Isolation, Registration, Remediation,
Dead End, VPN, Authentication and Access Point Management screens. Proceed to Layer 2
Network - Summary on page 27.
Note:
The Configuration Wizard dynamically writes all files configured on the FortiNac Control
Server to the FortiNac Application Server. No direct configuration of the FortiNac Application
Server is required after the initial basic network setup is completed.
Table 11: Layer 2 VLAN Types
VLAN Type
Definition
Layer 2 Isolation
Isolates all clients connecting to the network and redirects them to the
appropriate isolation web pages. In the Isolation VLAN the state of the client,
such as known vs. unknown or out-of-compliance, determines the access
control information presented to the client via the web browser or persistent
agent. If you use this VLAN type, the configuration of the other VLAN types is
optional. You can use the Isolation VLAN with Registration, Remediation,
Dead End, VPN, Authentication, or Access Point Management VLANs as
another non-production network.
Layer 2 Registration
Isolates unregistered clients from the production network during client
registration.
Layer 2 Remediation
Isolates clients from the production network who pose a security risk because
they failed a policy scan.
Layer 2 Dead End
Isolates disabled clients with limited or no network connectivity from the
production network.
Layer 2 Virtual Private
Network
Used for clients who connect to the network through VPN services.
Layer 2 Authentication
Isolates registered clients from the Production network during user
authentication.
Layer 2 Access Point
Management
Used for clients that connect through devices managed by Access Point
Management. You can manage clients connected to hubs or simple access
points by using DHCP as a means to control or restrict client access. Once
you have completed your configuration and started FortiNac, access Help for
additional information about the Access Point Management Plugin.
Layer 2 Network - VLANs
21
Summary of Contents for FortiNac BFN320
Page 1: ...Appliance Installation Guide Version 8 3 Date 8 24 2018...
Page 7: ...4...
Page 19: ...Software Configuration Figure 7 Download Documentation Window 16...
Page 22: ...7 Close the window or tab 8 Click Next to continue Password Setup 19...
Page 27: ...Layer 2 Network Configure VLANS Figure 11 Layer 2 Isolation Figure 12 Add Subnet 24...
Page 39: ...Layer 3 Network Configure Route Scopes Figure 18 Layer 3 Access Point Management 36...
Page 40: ...Figure 19 Layer 3 Add Access Point Management Scopes Layer 3 Network Configure Route Scopes 37...
Page 42: ...Figure 20 Layer 3 Routes Import Route Scopes Window Layer 3 Network Configure Route Scopes 39...
Page 46: ...Figure 23 Results Window Results Layer 2 Layer3 Networks Or Control Manager 43...
