Technical Tip: How to configure and use API token to communicate with FortiGate

[khoffman]

Description	This article describes how to generate and use a REST API token that can be used by FortiNAC: The use of a REST API token increases efficiency when communicating with FortiGates that are integrated with FortiNAC. This reduces the number of API login events made by FortiNAC.
Scope	FortiNAC-F v7.2 and above.
Solution	Create a REST API Admin on the FortiGate: On the FortiGate, navigate to System -> Administrator. Be aware of FortiOS 7.6 API change (Read: Configure FortiGate). Select 'Create New'. Create a new 'REST API Admin'. Configure a REST API Admin. Set the profile to Administrator and configure the following: Visibility only: System read access to all VDOMs. Control: System read/write access to all VDOMs. (Optional) Set trusted hosts using the FortiNAC port1 IP address. (Optional) Minimum required Write Operation to change VLAN on Switchports through Rest API/SSH:   Copy the API token generated. Add the FortiGate API token to the FortiGate device model in FortiNAC. In the FortiNAC Admin GUI, navigate to Network -> Inventory. 'Right-click' on the FortiGate in inventory and select 'Model Configuration'.   Enter the FortiGate API Token generated in step 3.                                          Select Apply. Related documents: Technical Tip: Configuring FortiGate v7.4.5+ to Allow access_token in URL Parameters Troubleshooting Tip: FortiGate API access.  FortiGate Endpoint Management Integration