FortiNAC Integrate with cisco WLC

[SivaG]

Dear all,

We configured the SNMPv3 in Cisco WLC and it's connected with FortiNAC successfully. Also configured user account with highest privilege for CLI settings. We avoided special characters in the password as well. While validating the credentials getting below error message, anyone experienced this issues.

SNMP connect succeeded.However device failed to connect using CLI credentials.Device either does not support a CLI or credentials are invalid.

Any suggestions,

[AEK]

Hi Siva

What is the WLC model?

Try it with the default WLC's admin user, just to check the behavior.

Also try connect from FNAC's CLI to the WLC and see if it works fine.

Also, did you change the default CLI prompt of your WLC? E.g. replaced the default "$", or ">" or any other by a custom sign/string?

[SivaG]

Dear AEK, 

What is the WLC model? / Cisco Catalyst 9800-40 Wireless Controller

Try it with the default WLC's admin user, just to check the behavior./ Tried no luck

Also try connect from FNAC's CLI to the WLC and see if it works fine. / From FNAC CLI is working 

Also, did you change the default CLI prompt of your WLC? E.g. replaced the default "$", or ">" or any other by a custom sign/string? / No, we are using the default one.

While we checking the logs, FNAC can able to connect but getting error while executing the command for Mac table. Find the below log message for your ref.

yams INFO :: 2025-11-13 13:33:20:528 :: #1017 :: SSH2: Authentication to 10.x.x.x succeeded
10.x.x.x
yams INFO :: 2025-11-13 13:33:32:741 :: #1017 :: TelnetSession.waitfor() ip = 10.x.x.x num bytes = 159
yams.TelnetServer INFO :: 2025-11-13 13:33:32:741 :: #1017 :: Warning: failed to execute CLI commands for IT-9800-WLC01 at 10.x.x.x.

Any suggestions / inputs ?

[AEK]

Dear Siva

From the same logs try find which command it is running, then run the same on your WLC to double check if the command is correct or wrong.

[AEK]

Other things to check..

The WLC firmware version must be supported. For the supported versions you can check on the FNAC doc for integrating this WLC.

Also make sure you didn't forget the enable password on FNAC credentials for your WLC, in case it is configured on WLC.

[SivaG]

Dear Tek,

We couldn't find the commands which is trying to execute, Find the below detailed logs. here 10.x.x.x is WLC

org.apache.sshd.common.io.nio2.Nio2ServiceFactory FINE :: 2025-11-13 13:57:59:335 :: #3600 :: close(org.apache.sshd.common.io.nio2.Nio2ServiceFactory@c4c172c)[Immediately] closed
org.apache.sshd.common.util.closeable.SequentialCloseable FINEST :: 2025-11-13 13:57:59:335 :: #3600 :: doClose(org.apache.sshd.common.util.closeable.SequentialCloseable$1@62cff9d9) closing [DefaultCloseFuture[id=SshClient[6c432324]][value=null]] immediately=true
org.apache.sshd.common.util.closeable.SequentialCloseable FINE :: 2025-11-13 13:57:59:335 :: #3600 :: doClose(org.apache.sshd.common.util.closeable.SequentialCloseable$1@62cff9d9) signal close complete immediately=true
org.apache.sshd.client.SshClient FINE :: 2025-11-13 13:57:59:335 :: #3600 :: close(SshClient[6c432324])[Immediately] closed
yams INFO :: 2025-11-13 13:57:59:817 :: #1017 :: TelnetSession.waitfor() ip = 10.x.x.x. num bytes = 159
yams.TelnetServer INFO :: 2025-11-13 13:57:59:817 :: #1017 :: Warning: failed to execute CLI commands for MDF1-IT-9800-WLC01 at 10.x.x.x.
yams INFO :: 2025-11-13 13:57:59:818 :: #148788 :: 10.x.x.x. Connection Closed

org.apache.sshd.client.channel.ChannelShell FINE :: 2025-11-13 13:57:59:817 :: #1017 :: close(ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22]) Closing gracefully
org.apache.sshd.client.channel.ChannelShell FINE :: 2025-11-13 13:57:59:818 :: #1017 :: close(ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22]) no EOF sent
org.apache.sshd.client.channel.ChannelShell FINEST :: 2025-11-13 13:57:59:818 :: #1017 :: signalChannelClosed(ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22])[signalChannelClosed]
org.apache.sshd.common.channel.LocalWindow FINE :: 2025-11-13 13:57:59:818 :: #1017 :: Closing LocalWindow[client](ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22])
org.apache.sshd.common.channel.RemoteWindow FINE :: 2025-11-13 13:57:59:818 :: #1017 :: Closing RemoteWindow[client](ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22])
org.apache.sshd.common.util.closeable.SequentialCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(org.apache.sshd.common.util.closeable.SequentialCloseable$1@7178c760) closing SequentialCloseable[DefaultCloseFuture[id=Builder][value=null]] immediately=false
org.apache.sshd.common.util.closeable.SequentialCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(org.apache.sshd.common.util.closeable.SequentialCloseable$1@26ca709) closing FuturesCloseable[DefaultCloseFuture[id=ChannelShell[id=0, recipient=-1]-ClientSessionImpl[netadmin@/10.x.x.x.:22]][value=null]] immediately=false
org.apache.sshd.common.util.closeable.FuturesCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(false) future pending: 2
org.apache.sshd.common.util.closeable.FuturesCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(false) complete pending: 1
org.apache.sshd.common.util.closeable.FuturesCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(false) complete pending: 0
org.apache.sshd.common.util.closeable.SequentialCloseable FINEST :: 2025-11-13 13:57:59:819 :: #1017 :: doClose(org.apache.sshd.common.util.closeable.SequentialCloseable$1@26ca709) closing [DefaultCloseFuture[id=ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22]][value=null]] immediately=false
org.apache.sshd.client.channel.ChannelShell FINEST :: 2025-11-13 13:57:59:820 :: #1017 :: close(ChannelOutputStream[ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22]] SSH_MSG_CHANNEL_DATA) closing
org.apache.sshd.client.channel.ChannelShell FINE :: 2025-11-13 13:57:59:820 :: #1017 :: sendEof(ChannelShell[id=0, recipient=3]-ClientSessionImpl[netadmin@/10.x.x.x.:22]) SSH_MSG_CHANNEL_EOF (state=Graceful)

[AEK]

Try using this command, and it should show what we are looking for.

exec enter-shell
device -ip 10.x.x.x -setAttr -name DEBUG -value "TelnetServer ForwardingInterface"
tail -f /bsc/campusMgr/master_loader/logs/output.master | grep ":: write = "