WAC124 Disconnected when Sync with NTP Server - SECOND :D

Hi DaneA,

thank you for your answer. No problem. I attach a Topoly Diagram take from Zabbix (sorry, I hide the Ip addresses for privacy 😁, but the important things I think is shown...).

First Answer: yes the WAC124 is in Access Point Mode.

About how everything is connect. As you can see in the diagram:

- AP is connected by LAN1 plug to a Netgear managed switch 5p (305S if i remember well). On the Switch port only VLAN 10 (same as AP and of all Home Managment Devices) is allowed. 

- The switch is connected by cable directly to the Firewall Fortinet 60D. 

- The firewall is connected by cable to the router.

The firewall is acting as main router. The connection between the FW and the Router is made by a single cable. Everything is under NAT (each subnet presents itself as a single NAT IP and the FW and the ROUTER communicated each other with a single interfaces with NAT).

I highlight in red the route between the AP Netgear and the External net. 

Inside the network there is another AP (Tp-link) that is highlight in green in the diagram. The AP is on a different Subnet. Both the AP are managed with different static Channel (either 2,4 ghz and 5 ghz) in order to avoit overlap. 

Even the overlapping with other WIFI network in neighbourhood is avoider (low amout of wifi connection in my area... basically 90% of the time the channel that they use are empty, and I also checked that the disconnetion is not on the same time when other WIFI Connection overlap the channels).

On the interface of the firewall and the swith 5p a vlan is set up. Is the only VLAN present in the entire network (I need the time to set the others on the other subnet...).

The virtual Switch on the FW is because of this. No problem with the external connection of another device that is not connected directly to the AP (as an example, in the diagram the HUE Bridge or the Camera, NEVER suffer disconnection).

The rule on firewall for the AP is basically a permit Any Any to the outside Network (because of this I use 1 AP for the home managment and 1 for the client).

The access point use the VIRTUAL SWITCH interface as a default gateway. The AP has a Static IP address and Use the DHCP server on the Firewall to define the Address pool.

As DNS it uses the Firewall ONE as primary (I have on Firewall, internal DNS and use the autorized DNS of the Fortinet itsefl) and google as secondary.

That the big picture. Please let me know if you need more information.