Skip to main content
Hatibi
Staff & Editor
Staff & Editor
September 27, 2024

Technical Tip: Collect Device Modelling information for newly added switch

  • September 27, 2024
  • 0 replies
  • 393 views
Description This article describes how to use FortiNAC-F (NACOS) cli commands to investigate device modeling of a switch/device and provide the collected information to FortiNAC technical support when requesting Device support.
Scope FortiNAC-F v7.4 and greater.
Solution

On some occasions, a newly added network inventory device will not be fully supported or FortiNAC will not be able to parse or read information from it (VLANs, Ports, SSID etc.)

In such cases, it is helpful to collect modeling information from CLI and share the output with FortiNAC technical support for further investigation.

 

  1. Collect SNMP Walk data for an OID of a given IP:

 

diagnose network snmp walk <ip>
Usage: diagnose network snmp walk <ip> <oid> [--bulk] [--debug] [--c <context>]


<ip> IP Address of the device
<oid> OID value to manipulate data through snmp4j commands
--c, --context <context> The context value
--debug Turns on detailed debug
--bulk Does a bulk get instead of a getNext

 

  1. Check the Device Type, Telnet MIB file, and MIB ID that will be used for a device:

 

diagnose network mib-info ip <ip>
Usage: diagnose network mib-info (ip <ip> | name <name> | MIB-name <MIB-name> | all)


ip <ip> Device IPv4 Address
name <name> Device Name
MIB-name <MIB-name> Returns MIB info for devices that use the specified MIB file
all Returns MIB info for all devices

 

  1. Display device model information:

 

diagnose network device display ip <ip>

Usage: diagnose network device display (ip <ip> | mac <mac> | dbid <dbid> | device-name <device-name> | group <group> | container-name <container-name> | class-id <class-id> |
attribute-name <attribute-name> | all)


all select all devices
attribute-name <attribute-name>
select by device attribute
class-id <class-id> select device(s) by class in the range 0-56
container-name <container-name>
select device by container name
dbid <dbid> select device by database Id
device-name <device-name> select device by name
group <group> select device(s) by group name
ip <ip> select device by IP Address
mac <mac> select device by MAC Address

 

  1. Display ports and their attributes:

 

diagnose network port display ip <ip>
Usage: diagnose network port display (ip <ip> | all | device-name <device-name> | group <group>)

 

ip <ip> IP Address of the device
all Perform action on all devices
device-name <device-name> Name of the device
group <group> Device Group Name

 

  1. Update VLANs on the device(s). Refresh the device modeling to represent the most recent device configuration:

 

diagnose network vlan update vlans ip <ip>
Usage: diagnose network vlan update vlans [--diff] [--readOnly] (ip <ip> | all | group <group>)


ip <ip> IP Address of the device
all Select all devices
group <group> Select all members of the provided group
--readOnly Operates in ReadOnly mode
--diff Returns Difference in results

 

  1. Test device(s) SNMP credentials:


    diagnose network device test-snmp ip <ip>

    Usage: diagnose network device test-snmp (ip <ip> | mac <mac> | dbid <dbid> | device-name <device-name> | group <group> | container-name <container-name> | class-id <class-id> |
    attribute-name <attribute-name> | all)

    all select all devices
    attribute-name <attribute-name>
    select by device attribute
    class-id <class-id> select device(s) by class in the range 0-56
    container-name <container-name>
    select device by container name
    dbid <dbid> select device by database Id
    device-name <device-name> select device by name
    group <group> select device(s) by group name
    ip <ip> select device by IP Address
    mac <mac> select device by MAC Address

 

  1. Get a debug report for a network device:

 

diagnose network device grab-debug
Usage:
  diagnose network device grab-debug <ip>
Gather a debug report for the specified device.
<IP>
<----- IP address of the device to gather a debug report.

 

 

Related articles:

Technical Tip: Requesting SNMP trap support in FortiNAC

Technical Tip: Generate device log report