FortiNAC & Catalyst 9300 802.1X Setup

I’m ready to roll out FortiNAC in a live network built around a Cisco Catalyst 9300 stack and I need an expert who can take the installation from zero to fully authenticated access control. The goal is straightforward: every wired port must enforce 802.1X using PEAP, validating credentials against our on-prem Active Directory.

Here’s what I expect: you’ll install and license FortiNAC, register the Catalyst 9300, build the necessary RADIUS policies, and push the switch config so that authenticated users drop into the correct VLAN while unknown devices are isolated. Once everything is up, we’ll run a short test plan together—laptops, printers, and a BYOD guest—to confirm successful PEAP logons, automatic VLAN assignment, and proper fallback for non-authenticating gear.

I’ll provide remote access to the switch, the FortiNAC VM image or appliance, and domain admin rights needed for the AD connector. You provide the working configuration, clear documentation of every change, and a brief hand-over call so my team can support the solution after you’re done.

If you’ve deployed FortiNAC with Cisco IOS-XE and Active Directory before, this should be quick work; if not, please save us both time. I’m ready to start as soon as you are.