FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 192623
Description
Administrative Status of Switch Ports Do Not Update Based on SNMP Link State Traps

Scope
Version:  Network Sentry 8
Solution
Version:  Network Sentry 8


Issue:  Network Sentry does not adjust the administrative status of a switch port based upon the receipt of SNMP link state traps.

Example:  
  1. Port is disabled via Network Sentry.  Port will now show Administrative state as "Down".
  2. Port is re-enabled via direct interaction with the switch.  Network Sentry will continue to display port with Administrative state "Down."
  3. A device connects to the port and a link state trap is received by Network Sentry.
  4. Network Sentry performs L2 poll to read the switch's MAC address table.
  5. Network Sentry displays the MAC address as online on that interface.  However, the port will continue to display with an Administrative state of "Down".
  6. Performing a "Resync Interfaces" updates the administrative status.


Solution:  It is recommended to enable/disable ports via Network Sentry.  In the event they are changed via direct interaction with the switch, schedule the Synchronize Devices task via System > Scheduler to run regularly.  The administrative status of any interfaces that were changed outside of Network Sentry will be updated.

This behavior has been documented as a Known Anomaly.  A complete list of Known Anomalies is available in the Customer Portal.


Contributors