What actually happens on the wire

Pick a scenario, set the defenses and the attacker's move, and NetLab walks the sequence step by step: do they get in, where do they land, what catches them, and how you close the gap. A teaching model for the controls behind 802.1X, NAC, L2 hardening and Wi-Fi — the way FortiGate, FortiSwitch and FortiAP behave.

① Set the posture

Choose the controls in place on the port, switch or WLAN.

② Pick the move

Decide what the attacker tries.

③ Read the outcome

Verdict, auth flow, blast radius, detection, and the why.

VERDICTSCritical — the attack succeeds or you're exposedPartial — mitigated, detected or limitedAllowed or contained by designBlocked — the control holdsDisruption or collateral damage
← all scenarios

CriticalPartialAllowed by designBlockedDisruption / collateral

⟳ What happens

    ◎ Blast radius

      ◉ Detection

        ❏ Why this happens

        ⚒ Close the gap

          NetLab is a teaching model, not a packet-level emulator — it captures how controls interact with an attack. Real outcomes vary with timers, order of operations and vendor quirks (FortiSwitch · FortiAP · Cisco · Aruba).
          Always verify against your own FortiGate / FortiSwitch / FortiAuthenticator configuration before relying on it in an audit.