Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AEK
SuperUser
SuperUser

FortiNAC doesn't see new VLANs on FortiLink

Hi FNAC admins

  • FortiNAC 7.2.9
  • FortiOS 7.4.9 with managed switches

Integration is fine and all works great so far except when I add a new VLANs in my FortiLink it is not detected by FortiNAC, while all pre-existing VLANs are all detected.

Performed Read VLANs, Resync Interfaces, Validate Credentials, L2/L3 poll, but new VLANs still not detected.

I mean don't see the new VLANs when try Model Config, and don't see then when I try Test Device Mapping.

Even when I assign the new VLAN manually to to a port on my FGT, the FNAC doesn't want to reflect this change (it keeps only known VLANs).

Opened a ticket but no fix so far.

Any idea about this issue?

AEK
AEK
1 Solution
ebilcari

Based on the documentation, the VLAN information should be extracted with REST API.
I didn't found any reported issue related to this behavior. I tried to emulate it in a lab (FOS 7.2.11) and the API call used for it should be: 

https://10.0.10.1:443/api/v2/cmdb/system/interface?filter=type==vlan&access_token=*****&format=name|vdom|vlanid|interface&vdom=* 
the output should list all the VLANs like:

{
"name":"ISOL-F",
"q_origin_key":"ISOL-F",
"vdom":"root",
"interface":"port5",
"vlanid":2501
}

 

You can check from FNAC logs by enabling this debugs:

$ device -ip <IP> -setAttr -name DEBUG -value "TelnetServer ForwardingInterface"

 

or from an external API system and check the response of the FGT when asked to provide the VLAN information.

 

With debugs enabled you can also try to run:
# exe enter
$ updatevlans -ip 10.0.10.1

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.

View solution in original post

12 REPLIES 12
ebilcari

Good to know the issue is fixed. The Read VLANs button is a bit hard to find on FGT devices, did you use this one?

ReadVlan.PNG

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
AEK

Yes it is that one.

AEK
AEK
AEK
SuperUser
SuperUser

Hi Emirjon

Now the new VLANs are added without entering the updatevlans command.

It seems the first time I entered it has fixed the issue for good.

Thanks again for the solution.

AEK
AEK
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors