Using device blueprints for model devices
Device blueprints can be used when adding model devices to simplify configuration of certain device settings, including device groups, configuring pre-run templates, policy packages, provisioning templates, and more.
Once a device blueprint has been created, it can be selected when adding a model device or when importing multiple model devices from a CSV file. See Adding offline model devices.
Devices that are assigned the blueprint are automatically configured with the settings specified by the blueprint when they are added to FortiManager.
As an exmaple, device blueprints can be used to simplify the onboarding of branch devices in an SD-WAN configuration when using SD-WAN Overlay Templates by configuring the default device group to which the devices are added. See SD-WAN overlay templates.
To create a new device blueprint:
- Go to Device Manager, and select Device Blueprint from the Add Device dropdown menu.
Previously configured blueprints are displayed in the table below and can be edited or deleted. - Click Create New to add a new blueprint.
- Configure the following information for the blueprint:
Name Enter a name for the blueprint. Device Model Select the device model type where the device blueprint can be applied. Enforce Firmware Version Select the checkbox to choose the firmware version that is enforced. By default, ADOM version 7.0 is enforced. Enforce Device Configuration
Enable to enforce the device configuration.
The Enforce Device Configuration option allows auto-link to push changes on FortiGate management interface during ZTP/LTP. When enabled, this option will provision the configuration to the real device, as is. Misconfiguration of the FortiGate management interface may cause the device to not be able to connect to the FortiManager.
Add to Device Group Select the checkbox to add one or more device groups. All devices assigned this device blueprint are added to the selected device group(s). Add to Folder
Select the checkbox to add the devices to the specified folder in the Device Manager.
Pre-Run CLI Template
Select the checkbox to enable the use of a pre-run CLI template, and then select the template from the dropdown menu. See Adding CLI templates.
Assign Policy Package
Select the checkbox to enable policy package assignment, and then select the policy package from the dropdown menu. See Managing policies.
Provisioning Template
Select Click here to assign to choose provisioning templates. You can assign device blueprints system, IPsec, SD-WAN, static route, BGP, and CLI templates, or alternatively select a template group. See Provisioning Templates.
- Click OK to save the blueprint.
The blueprint can now be selected when adding a model device or importing devices from a CSV file. See Add devices.
To edit or delete a device blueprint:
- Go to Device Manager, and select Device Blueprint from the Add Device dropdown menu.
- Select an existing device blueprint from the table. The following actions are available:
- Edit: You can edit an existing device blueprint. Changes made to existing blueprints only affect new devices added to FortiManager after the changes have been made; devices previously configured with the blueprint are not affected.
- Delete: Delete an existing device blueprint.