Technical Tip: Using the Custom Ignored Adapters List

[cmaheu]

Description

This article provides instructions for adding MAC addresses and vendor OUI's to the Custom Ignored Adapters List. The Custom Ignored Adapters list is used to prevent adapter records from being created for specific MAC addresses and vendor OUI's for virtual adapters via the FortiNAC Agent.

Note: As of versions 9.2.9,9.4.5,F7.2.4,F7.4.0, functionality has been added to include checking the ignore custom adapters list on MDM poll.

This process requires CLI access and cannot be configured using the Administration UI. Contact Support if assistance is required.

Note: 

MAC address ranges cannot be added.

Scope

Versions: FortiNAC 8.x, 9.x, F7.x.

Solution

1. Log into the appliance CLI as root for Cent-OS and admin for FortiNAC-OS.
2. FortiNAC-OS CLI: Type execute enter-shell.
3. Navigate to the /bsc/campusMgr/master_loader/vendorCodes directory.
4. If not already created, create file ignoredAdaptersCustom.txt.
5. Modify the file to add the desired address or OUI. 
   
   

Method 1:

Add without opening the file to edit:

echo "<OUI or MAC address using colons and capital letters>" >> /bsc/campusMgr/master_loader/vendorCodes/ignoredAdaptersCustom.txt

Example:

echo "00:15:5D" >> /bsc/campusMgr/master_loader/vendorCodes/ignoredAdaptersCustom.txt
echo "00:05:9A:3C:78:00" >> /bsc/campusMgr/master_loader/vendorCodes/ignoredAdaptersCustom.txt

Method 2: 

Open the file using a text editor to add address/OUI.  This allows for comments to be added to note the reason for the addition.

Example:

# This file has all known virtual MACs with the same address on every host.

# Cisco VPN
00:05:9A:3C:78:00
00:05:9A:3C:7A:00

# Cisco Systems SSL VPN Adapter - Packet Scheduler Miniport
00:05:9A:3C:79:00

# Check Point
54:25:6D:74:E1:0F

Note: 

A restart of processes is not required to apply changes.

Older appliance versions before 7.1 (legacy version before FortiNAC version 8.x):

• It is only possible to add specific addresses. Vendor OUI is not an option.
• The file is located at /bsc/campusMgr/master_loader/vendorCodes/ignoredAdapters.txt.
• When upgrading from an appliance version before 7.1, the ignoredAdapters.txt file will be overwritten. To preserve the ignoredAdapters.txt file, save the file to a different location before upgrading, and replace the file created upon upgrade with the original file. When upgrading from version 7.1 and above, the ignoredAdaptersCustom.txt file will not be overwritten.
  
  

Related article:

Technical Note: Hosts with Persistent Agent and virtual adapters are unexpectedly isolated