FortiAP query to FortiGuard IoT service to determine device details
A FortiAP collects packets from devices and queries FortiGuard with the help of the FortiGate. Device detection results are reported back to the FortiGate where this information is displayed. Querying the FortiGuard service requires an IoT Detection Service license.
The following attributes can be configured in wireless-controller setting:
|
Attribute |
Description |
|---|---|
|
device-weight <integer> |
Set the device upper limit of confidence (0 - 255, default = 1, 0 = disable). |
|
device-holdoff <integer> |
Set the device lower limit of creation time, in minutes (0 - 60, default = 5). |
|
device-idle <integer> |
Set the device upper limit of idle time, in minutes (0 - 14400, default = 1440). |
To query the FortiGuard IoT service:
config wireless-controller setting
...
set device-weight 1
set device-holdoff 5
set device-idle 1440
...
end# diagnose user device list
vd root/0 54:27:1e:e6:26:3d gen 89 req OUA/34
created 70s gen 86 seen 2s port29 gen 28
ip 10.29.1.214 src mac
hardware vendor 'Asustek compute' src fortiguard id 0 weight 21
type 'Home & Office' src fortiguard id 0 weight 21
family 'Computer' src fortiguard id 0 weight 21
os 'Linux' src dhcp id 822 weight 128
host 'test-wifi' src dhcp