Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiManager 7.2.6 Administration Guide
    7.2.6
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.6
    6.2.5
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.6.11
    5.6.10
    5.6.9
    5.6.8
    5.6.7
    5.6.6
    5.6.5
    5.6.4
    5.6.3
    5.6.2
    5.6.1
    5.6.0
    5.4.7
    5.4.6
    5.4.5
    5.4.4
    5.4.3
    5.4.2
    5.4.1
    5.4.0
    5.2.10
    5.2.7
    5.2.6
    5.2.4
    5.2.3
    5.2.2
    5.2.1
    5.2.0
    5.0.12
    5.0.11
    5.0.10
    5.0.9
    5.0.8
    5.0.7
    5.0.6
    5.0.5
    5.0.4
    5.0.3
    5.0.2
    4.3.8
    4.3.7
    4.3.6
    4.3.5
    4.3.4
    4.3.3
    4.3.2
    4.3.1
    4.3.0
    4.2.9
    4.2.8
    4.2.7
    4.2.6
    4.2.5
    4.2.4
    4.2.3
    4.2.2
    4.2.1
    4.2.0
    4.1.0
    4.0.3
    4.0.2
    4.0.1
    4.0.0

    Fabric authorization templates

    Fabric authorization templates

    Fabric authorization templates can be used to allow FortiManager to automatically authorize FortiAP, FortiSwitch, and FortiExtender devices.

    Fabric authorization templates can be created by going to Device Manager > Provisioning Templates > Fabric Authorization Template.

    The following options are available:

    Create New

    Create a new template.

    Edit

    Edit a template. Right-click a template, and select Edit.

    Delete

    Delete a template. Right-click a template, and select Delete.

    Generate

    Generate the Fabric devices using the template.

    Fabric authorization template workflow
    1. Create the Fabric authorization template.
    2. Generate the template and select the required target FortiGate device(s).
      FortiManager will create or update the list of Fabric devices (FortiAP, FortiSwitch, and FortiExtender) on the device database according to the template configuration.
    3. The device's Config Status will be set to Modified. The newly created entries can be modified/deleted at this stage as required.
    4. Perform an install on the target FortiGate devices so the Fabric devices are pushed to the targets.
    To create a new fabric authorization template:
    1. Go to Device Manager > Provisioning Templates > Fabric Authorization Template.
    2. Click Create New. The Create New Fabric Authorization Template pane opens.

    3. Enter the following information, then click OK to create the certificate template:

      Name

      Enter a name for the Fabric authorization template.

      Description

      Optionally, provide a description for the template.

      FortiAP

      Enable Wireless Controller

      Toggle to enable wireless controllers. Additional settings are available once this option is selected.

      Platform 1

      By default, only one wireless controller platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      FortiSwitch

      Enable Switch Controller

      Toggle to enable switch controllers. Additional settings are available once this option is selected.

      Platform

      By default, only one switch platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      FortiLink Interface

      Type the interface for FortiLink.

      FortiExtender

      Enable Extender Controller

      Toggle to enable extender controllers. Additional settings are available once this option is selected.

      Platform 1

      By default, only one extender platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      Extension Type

      Select the extension type as either WAN Extension or LAN Extension.

    To generate a Fabric authorization template:
    1. Go to Device Manager > Provisioning Templates > Fabric Authorization Template.
    2. Select a previously created Fabric authorization template, and click Generate in the toolbar or right-click menu.
    3. Select the target FortiGate devices on which to generate the configuration.
      The Generate authorization template wizard runs and applies the authorization template to the selected device.
    4. Click Finish.
    5. When the real devices comes online matching the specified prefix, it will replace the device in the Device Manager. The list is followed from top to bottom until all devices have been replaced by real devices, at which point additional devices will not be automatically authorized.
    6. Fabric devices configured by FortiManager are displayed in the Device Manager. You can go to FortiAP Manager , FortiSwitch Manager, and FortiExtender Manager to view and assign profiles to the devices.
    Previous
    Next

    Fabric authorization templates

    Fabric authorization templates

    Fabric authorization templates can be used to allow FortiManager to automatically authorize FortiAP, FortiSwitch, and FortiExtender devices.

    Fabric authorization templates can be created by going to Device Manager > Provisioning Templates > Fabric Authorization Template.

    The following options are available:

    Create New

    Create a new template.

    Edit

    Edit a template. Right-click a template, and select Edit.

    Delete

    Delete a template. Right-click a template, and select Delete.

    Generate

    Generate the Fabric devices using the template.

    Fabric authorization template workflow
    1. Create the Fabric authorization template.
    2. Generate the template and select the required target FortiGate device(s).
      FortiManager will create or update the list of Fabric devices (FortiAP, FortiSwitch, and FortiExtender) on the device database according to the template configuration.
    3. The device's Config Status will be set to Modified. The newly created entries can be modified/deleted at this stage as required.
    4. Perform an install on the target FortiGate devices so the Fabric devices are pushed to the targets.
    To create a new fabric authorization template:
    1. Go to Device Manager > Provisioning Templates > Fabric Authorization Template.
    2. Click Create New. The Create New Fabric Authorization Template pane opens.

    3. Enter the following information, then click OK to create the certificate template:

      Name

      Enter a name for the Fabric authorization template.

      Description

      Optionally, provide a description for the template.

      FortiAP

      Enable Wireless Controller

      Toggle to enable wireless controllers. Additional settings are available once this option is selected.

      Platform 1

      By default, only one wireless controller platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      FortiSwitch

      Enable Switch Controller

      Toggle to enable switch controllers. Additional settings are available once this option is selected.

      Platform

      By default, only one switch platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      FortiLink Interface

      Type the interface for FortiLink.

      FortiExtender

      Enable Extender Controller

      Toggle to enable extender controllers. Additional settings are available once this option is selected.

      Platform 1

      By default, only one extender platform is listed. You can click the add button at the bottom of the page to add another platform to the template. Click the trash icon to delete the platform.

      Prefix

      Select the serial number prefix for the selected devices from the dropdown menu.

      Number of Devices

      Select the number of devices to pre-authorize.

      Extension Type

      Select the extension type as either WAN Extension or LAN Extension.

    To generate a Fabric authorization template:
    1. Go to Device Manager > Provisioning Templates > Fabric Authorization Template.
    2. Select a previously created Fabric authorization template, and click Generate in the toolbar or right-click menu.
    3. Select the target FortiGate devices on which to generate the configuration.
      The Generate authorization template wizard runs and applies the authorization template to the selected device.
    4. Click Finish.
    5. When the real devices comes online matching the specified prefix, it will replace the device in the Device Manager. The list is followed from top to bottom until all devices have been replaced by real devices, at which point additional devices will not be automatically authorized.
    6. Fabric devices configured by FortiManager are displayed in the Device Manager. You can go to FortiAP Manager , FortiSwitch Manager, and FortiExtender Manager to view and assign profiles to the devices.
    Previous
    Next