When configuring isolation networks in the configuration wizard, why does a layer 3 network typo allow for mora than ono DHCP scope for each…

Layer 3 isolation networks in FortiNAC can span multiple physical subnets. The ability to configure multiple DHCP scopes for a single L3 isolation network type allows administrators to assign different IP configurations based on the host's status. For example, a device needing registration can be assigned an IP from one scope with limited access, while a non-compliant device needing remediation can be assigned an IP from another scope with access only to remediation servers.

B. DHCP server redundancy is managed at the DHCP server level (for example, using failover configurations), not by defining multiple scopes within FortiNAC for this purpose.

C. While multiple isolation networks can exist, this option does not explain why a single L3 network type supports multiple DHCP scopes.

D. Using subsequent scopes when one is exhausted is a function of a DHCP superscope, not the primary reason FortiNAC allows multiple scopes for isolation networks.

1. Fortinet NSE Training Institute. (2022). NSE 5 FortiNAC 7.2 Study Guide. Page 51, "Isolation Networks". "For layer 3 isolation networks, you can configure multiple DHCP scopes. This allows you to configure a different scope for each host state, such as registration and remediation."

2. Fortinet Document Library. (2023). FortiNAC 7.4.0 Administration Guide. Page 101, "Isolation Networks". "For Layer 3 networks, you can configure multiple DHCP scopes. This allows you to configure a different scope for each host state, such as registration and remediation."