Technical Note: Incomplete L2 Poll Results with A...

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 190656

Description
Alcatel switches running AOS 8 do not return a complete list of connected MAC addresses when L2 poll is performed. This causes inaccurate host connectivity information.

SNMP is used to Layer 2 poll Alcatel switches. The appliance queries the following SNMP tables on the switch:

dot1dTpFdbEntry (1.3.6.1.2.1.17.4.3)

dot1qTpFdbEntry (1.3.6.1.2.1.17.7.1.2.2)

It has been found that these tables do not contain every connected hosts' MAC address. The result is that a host physically connected to a switch port may not appear as "online" in the appliance.

Solution
Contact Alcatel Support for further assistance.

179

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Note: Incomplete L2 Poll Results with Alcatel AOS 8