Skip to main content
Jucker
Jucker
Explorer III
September 10, 2023
Solved

FortiNAC integration with unlicensed fortigate VM virtualized tab not showing

  • September 10, 2023
  • 1 reply
  • 2179 views

Hello,

 

Hope you are doing great!

 

I got stuck in my lab  with integrating fortinac and fortigate vm evaluation unlicensed mode, when i add fortigate device it does not show virtualized tab i suspect that because of modeling device type when i click on "set device mapping" it does show only Fortinet, and i can not make any change in it.

Fortigate version 7.0.1

FortiNAC version 9.2.6.0451

 
 

Device Mapping issue.JPG

 

Regards!

 

@ebilcari 

Best answer by ebilcari

I haven't tested with FGT unlicensed mode but since it's modeled automatically it means that FNAC should supported it. Are you able to validate credentials, do you see API traffic (L2 polling should be performed via API)? What is shown when you run Test Device Mapping?

I'm currently running FGT VM64(VM1) and I had to manually map as VM04 for things to work:

mapping.PNG

 

1 reply

ebilcari
Staff
ebilcariAnswer
Staff
September 12, 2023

I haven't tested with FGT unlicensed mode but since it's modeled automatically it means that FNAC should supported it. Are you able to validate credentials, do you see API traffic (L2 polling should be performed via API)? What is shown when you run Test Device Mapping?

I'm currently running FGT VM64(VM1) and I had to manually map as VM04 for things to work:

mapping.PNG

 

Emirjon
    Jucker
    JuckerAuthor
    Explorer III
    September 12, 2023

    Hello,

    Thank you for  your prompt response!

    I did try to add licensed VM to FNAC, samething whenever i try to set device mapping i got this error :

     

    Fortigate Cannot Read properties.JPG

    This OID not existing on the FGT, the snmpwalk from the FNAC

     

    FortiNAC snmpwalk.JPG

     

    Validate Credentials

    I suspect because of the enable part FNAC considering it as a normal device like Cisco :

     

    FortiNAC Validate credentials.JPG

    Test device mapping it does show L2 not supported not sure if is because i dont have fortiswitch:

    FortiNAC test device mapping.JPG

     

    Best Regards!

    ebilcari
    Staff
    ebilcari
    Staff
    September 13, 2023

    I think the SNMP query on the OID directly doesn't have a value and want reply. You can try to run the system query and you should see the OID listed, like

    > snmpwalk -v2c -c xxx 10.1.1.1 system
    SNMPv2-MIB::sysDescr.0 = STRING: The FW
    SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.12356.101.1.80005

    Regarding the Credential validation, after testing SSH access FNAC will try the API call and if it fails it will still show the error of CLI failure. Take a look at integration guide page 11 and pages below.

    Emirjon
      Terms & ConditionsAccessibility statement