FortiManager ZTP with FortiSwitch

[esec]

We are deploying a lot of Fortigates with FortiSwitch and FortiAPs with FortiManager.

Using pre-run scripts which creates interfaces and zones, so that we can apply SD-WAN template, policy packet and post-run scripts to update the interfaces with the correct data. All this works perfectly unless there is a FortiSwitch connected. 

If there is a FortiSwitch connected the above fails since it´s trying to remove the Fortiswitch configurations, which is automatically added when a switch is detected. If we also add the switch in the pre-run it works but we don´t know which switches is going to be on each site so we need to solve that so we can achieve almost a ZTP.

Any ideas on how to solve that?

[Anthony_E]

Hello esec,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anthony_E]

Hello esec,

Did you try to have a look into this document?:

https://docs.fortinet.com/document/fortimanager/6.2.0/new-features/449607/zero-touch-provisioning-fo...

Could you please tell me if it helped?

Regards,

[esec]

Thanks. Unfortunately we don´t know the serialnumbers that is going to be deployed on each site so we are looking to solve it without it.