Skip to main content
esec
Visitor III
October 17, 2022
Question

FortiManager ZTP with FortiSwitch

  • October 17, 2022
  • 3 replies
  • 1685 views

We are deploying a lot of Fortigates with FortiSwitch and FortiAPs with FortiManager.

 

Using pre-run scripts which creates interfaces and zones, so that we can apply SD-WAN template, policy packet and post-run scripts to update the interfaces with the correct data. All this works perfectly unless there is a FortiSwitch connected. 

 

If there is a FortiSwitch connected the above fails since it´s trying to remove the Fortiswitch configurations, which is automatically added when a switch is detected. If we also add the switch in the pre-run it works but we don´t know which switches is going to be on each site so we need to solve that so we can achieve almost a ZTP.

 

Any ideas on how to solve that?

3 replies

Anthony_E
Staff
Staff
October 20, 2022

Hello esec,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Best Regards
Anthony_E
Staff
Staff
October 20, 2022

Hello esec,

 

Did you try to have a look into this document?:

 

https://docs.fortinet.com/document/fortimanager/6.2.0/new-features/449607/zero-touch-provisioning-for-fortiswitch

 

Could you please tell me if it helped?

 

Regards,

Best Regards
esec
esecAuthor
Visitor III
October 21, 2022

Thanks. Unfortunately we don´t know the serialnumbers that is going to be deployed on each site so we are looking to solve it without it.