Created on 09-28-2018 06:55 AM Edited on 08-15-2023 05:20 AM By Stephen_G
Description
Scope
All supported versions of FortiNAC.
Solution
This is a process that reads from configured Network Devices and attempts to determine if they support L3 routing.
The scan may be started from either the Network -> Inventory view or the Network -> L3 Polling view by selecting 'Start L3 Identification'.
Select 'Open View' in the drop-down menu at the top-right to view the results:
For each device, a score of the likelihood that the device supports L3 is calculated within a range of 0 to 100. Once the scan of all devices is complete, the results may be viewed using the L3 Identification Results task.
If the Score is at least 66, FortiNAC will suggest adding to the L3 group. If the Score is less than 33, FortiNAC will suggest removing from the L3 group.
To check if a device is part of a group, right-click it in Inventory view and select 'Group Membership'.
In the L3 results tab, it is possible to manually change the suggested action for each device by selecting an option from the drop-down menu for each entry:
Pressing OK will submit the changes and will either remove or add the device from the L3 polling group based on the chosen action in the drop-down menu.
To further improve L3 polling performance in the environment, administrators should also consider taking the following steps:
FortiGate-FortiNAC integrations provide the ability to improve and optimize polling by using a REST API. The API key allows FortiNAC to bypass the need to authenticate every time it connects, improving performance.
Check section 'c.3. Polling network devices' in Technical Tip: Comprehensive guide for a simple FortiNAC deployment.
Related documentation:
L3 polling - FortiNAC administration guide.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.