FCSS_LED_AR-7.6 · Question #59
Refer to the exhibits. Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit. The NAC feature is being tested with a device connected to port2 on managed FortiSwitch…
The correct answer is A. Device detection is not enabled on VLAN 4089. B. The device operating system detected by FortiGate is not Linux. From the FortiManager NAC policy: Category =Device Match criteria includeMAC addressandOperating System = Linux Action =Assign VLAN "Students" From the FortiGate CLI: diagnose switch-controller switch-info mac-table ... MAC: 70:88:6b:8c:4a:ce VLAN: 4089 Port: port2 diagnose…
Question
Refer to the exhibits. Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit. The NAC feature is being tested with a device connected to port2 on managed FortiSwitch S224SPTF19005867. The NAC policy has been applied to port2, and traffic was generated from the test device. However, the traffic from the test device does not match the NAC policy and remains in the onboarding VLAN. What are two possible reasons why the test device is not being correctly classified by the NAC policy? (Choose two.)
Exhibits
Options
- ADevice detection is not enabled on VLAN 4089.
- BThe device operating system detected by FortiGate is not Linux.
- CManagement communication between FortiGate and FortiSwitch is down.
- DThe MAC address configured on the NAC policy is incorrect.
How the community answered
(63 responses)- A60% (38)
- C16% (10)
- D24% (15)
Explanation
From the FortiManager NAC policy: Category =Device Match criteria includeMAC addressandOperating System = Linux Action =Assign VLAN "Students" From the FortiGate CLI: diagnose switch-controller switch-info mac-table ... MAC: 70:88:6b:8c:4a:ce VLAN: 4089 Port: port2 diagnose switch-controller mac-device mac onboarding VLAN 4089 MAC 70:88:6b:8c:4a:ce So the device is stuck inVLAN 4089, which is theonboarding VLAN. No NAC policy is matched. For a NAC policy to match, FortiGate needsdevice-identity information, which comes fromdevice detection on the VLAN / FortiLink interfaceplus theattributes that the policy expects(OS, MAC,
Topics
Community Discussion
No community discussion yet for this question.