Fortinet FortiNac BFN620 Installation Manual page 26

Field Definition
Identifies the domain for this range of IP addresses. To help identify the VLAN,
incorporate part of the name in the domain. For example, for the isolation VLAN use
megatech-iso.com or for the registration VLAN use megatech-reg.com.
Note: Note: If you use agents for OS X, iOS, and some Linux systems,
using a .local suffix in Domain fields may cause communications issues.
Domain
Example:
Incorrect dns suffix for reg: tech-reg.megatech.local
Correct dns suffix for reg: tech.megatech-reg.edu
Time in seconds that an IP address in this domain is available for use. When this time
Lease Time
has elapsed the user is served a new IP address. The recommended lease time for
Isolation, Registration, Remediation, Authentication, Dead End and VPN is 60
seconds.
Isolation IP Subnets
IP Subnets are optional and used in situations like Client control via FlexCLI or roles
only Aruba/Xirrus integration.
List of IP Addresses and corresponding Subnet Masks indicating IP addresses for
Subnets which FortiNac will serve DNS. Should only be used for hosts that are being isolated by
FortiNac.
Can be any address on any subnet, as long as the same address is added to the filters
as an isolation address when configuring the device.
Layer 2 Network - Configure VLANS
23