FortiNAC integration with unlicensed fortigate VM virtualized tab not showing

[Jucker]

Hello,

Hope you are doing great!

I got stuck in my lab  with integrating fortinac and fortigate vm evaluation unlicensed mode, when i add fortigate device it does not show virtualized tab i suspect that because of modeling device type when i click on "set device mapping" it does show only Fortinet, and i can not make any change in it.

Fortigate version 7.0.1

FortiNAC version 9.2.6.0451

Regards!

@ebilcari 

[ebilcari · Accepted solution]

I haven't tested with FGT unlicensed mode but since it's modeled automatically it means that FNAC should supported it. Are you able to validate credentials, do you see API traffic (L2 polling should be performed via API)? What is shown when you run Test Device Mapping?

I'm currently running FGT VM64(VM1) and I had to manually map as VM04 for things to work:

 

[Jucker]

Hello,

Thank you for  your prompt response!

I did try to add licensed VM to FNAC, samething whenever i try to set device mapping i got this error :

This OID not existing on the FGT, the snmpwalk from the FNAC

Validate Credentials

I suspect because of the enable part FNAC considering it as a normal device like Cisco :

Test device mapping it does show L2 not supported not sure if is because i dont have fortiswitch:

Best Regards!

[ebilcari]

I think the SNMP query on the OID directly doesn't have a value and want reply. You can try to run the system query and you should see the OID listed, like

> snmpwalk -v2c -c xxx 10.1.1.1 system
SNMPv2-MIB::sysDescr.0 = STRING: The FW
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.12356.101.1.80005

Regarding the Credential validation, after testing SSH access FNAC will try the API call and if it fails it will still show the error of CLI failure. Take a look at integration guide page 11 and pages below.

[Jucker]

I did change the device into generic snmp device and the modeling start showing, i did choose Fortigate VM and tab virtualized showed.